Arval srl VAT: 00792900151
Address: Viale Bligny 30 – 20136 Milan
Phone/Fax: +39 0258321002 / +39 0258321264
Email: info@arvalcosmetici.com

We wish to inform you that Regulation (EU) 2016/679 ("European Regulation on the protection of personal data") provides for the protection of individuals and other subjects concerning the processing of personal data. Pursuant to Article 13, we hereby inform you of the following information:

1. Purpose and legal basis of data processing, marketing, and profiling purposes
   The legal basis for the processing lies in the source/origin/justification of the processing in a legal provision, in the performance of a contract, or in a legal obligation.
   The processing of the personal data you provide is solely for the purpose of fulfilling contractual obligations, providing the requested services, and complying with specific requests, as well as regulatory obligations, particularly accounting and tax requirements.
   Where data collection is carried out for marketing and profiling purposes, processing is only carried out with the explicit consent of the user under Article 6 of the GDPR. Without such consent, no marketing or profiling activities will be performed.
   Personal data provided through the contact form and the use of the reserved area are processed in compliance with current regulations, in order to provide the requested services and improve the user experience.
2. Methods of processing
   In relation to the stated purposes, your data is subject to both electronic and paper processing. The processing operations are carried out in a way that ensures the logical, physical, and confidentiality security of your personal data.
3. Nature of personal data
   Your personal data related to the service you requested are subject to processing. Providing your personal data is mandatory in order to execute the existing contract or the requested services and to fulfill the obligations deriving from it, including legal obligations.
4. Scope of communication and dissemination of data
   Your data may be communicated to:
   • our collaborators and employees, within the scope of their respective duties;
   • all individuals and/or legal entities when communication is necessary or functional to the performance of our activity in the ways and for the purposes outlined above.
5. Methods and duration of personal data storage
   The Data Controller, the data processors, and the persons authorized to process the data will retain personal data for the time necessary to fulfill the purposes mentioned above and, in any case, for no longer than 10 years after the termination of the relationship where required or necessary by current regulations, unless longer retention periods apply. For marketing activities, personal data will be processed for no longer than two years.
6. Rights of the data subject
   6.1 Right of access to personal data (Article 15 of Regulation (EU) 2016/679)
   The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning them is being processed and, if so, access to the personal data.
   6.2 Right to rectification (Article 16 of Regulation (EU) 2016/679)
   The data subject has the right to obtain from the data controller the rectification of inaccurate personal data concerning them without undue delay.
   6.3 Right to erasure ("right to be forgotten") (Article 17 of Regulation (EU) 2016/679)
   The data subject has the right to obtain the erasure of personal data concerning them without undue delay, and the data controller is obliged to erase personal data without undue delay.
   6.4 Right to restriction of processing (Article 18 of Regulation (EU) 2016/679)
   The data subject has the right to obtain the restriction of processing from the data controller.
   6.5 Obligation to notify (Article 19 of Regulation (EU) 2016/679)
   The data controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Articles 16, 17, and 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The data controller shall inform the data subject about those recipients upon the data subject’s request.
   6.6 Right to data portability (Article 20 of Regulation (EU) 2016/679)
   The data subject has the right to receive the personal data concerning them, which they have provided to a data controller, in a structured, commonly used, and machine-readable format and has the right to transmit those data to another controller without hindrance from the controller to which the personal data was provided.
   6.7 Right to object (Article 21 of Regulation (EU) 2016/679)
   The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them pursuant to Article 6, paragraph 1, letters e) or f), including profiling based on these provisions.
   6.8 Automated decision-making, including profiling (Article 22 of Regulation (EU) 2016/679)
   The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.
7. Withdrawal of consent to processing
   The data subject has the right to withdraw consent to the processing of their personal data by contacting the Data Controller.

Data Controller: Arval srl VAT: 00792900151
Address: Viale Bligny 30 – 20136 Milan
Phone/Fax: +39 0258321002 / +39 0258321264
Email: info@arvalcosmetici.com

COOKIE POLICY

Open the PDF file