HOLIDAY DEPILATORI S.R.L
with registered office in VIALE ETRURIA 65 – 53047 SARTEANO (SI)
tax code 01082230523 P.I. IT01082230523 (hereinafter, Owner)

Informs you pursuant to Art. 13 Legislative Decree no. 196 of 30/06/2003 (hereinafter, “Privacy Code”) and Art. 13 EU Regulation no. 2016/679 (hereinafter, GDPR) that your data will be processed in the manner and in compliance with the above legislation

1. COOKIE POLICY

We inform you that there are different types of cookies:
1) technical cookies, those used only to explore and navigate the site
2) profiling cookies, those used to store searches and used in order to send advertisements in line with the preferences expressed
3) third party cookies, i.e. those cookies installed on Holiday’s site but by third parties

Our site uses cookies to improve the services we provide to our visitors and customers.

You can find out more about what cookies we are using or how to disable them by consulting our COOKIE POLICY.

2. PURPOSE OF PROCESSING

Your personal data are processed

A) without your express consent (art. 24 lett. a), b), c) Privacy Code and art. 6 lett. b), e) GDPR), for the following purposes
– conclude contracts for the Controller’s services;
– to fulfil pre-contractual, contractual and fiscal obligations arising from relations with you
– to fulfil the obligations required by law, regulation, EU legislation or an order of the Authority (such as anti-money laundering);
– exercise the rights of the Controller, such as the right of defence in court;

B) only with your specific and distinct consent (Articles 23 and 130 of the Privacy Code and Article 7 GDPR), for the following marketing purposes
– to send you by e-mail, post and/or sms and/or telephone contact, newsletters, commercial communications and/or advertising material on products or services offered by the Data Controller and detection of the degree of satisfaction on the quality of services
– send you by e-mail, post and/or sms and/or telephone contacts commercial and/or promotional communications from third parties. We would like to point out that if you are already our customer, we may send you commercial communications relating to services and products of the Controller similar to those you have already used, unless you disagree (art. 130 c. 4 Privacy Code).

3. METHODS OF PROCESSING

The processing of your personal data is carried out by means of the operations indicated in Art. 4 of the Privacy Code and Art. 4 no. 2) GDPR and precisely:
– collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.

Your personal data shall be subject to both paper and electronic and/or automated processing.

The Data Controller will process your personal data for the time necessary to fulfil the above purposes and in any case for no longer than 10 years from the termination of the relationship for service purposes and for no longer than 2 years from the collection of the data for marketing purposes.

4. ACCESS TO DATA

Your data may be made accessible for the purposes set out in Articles 2.A) and 2.B)

– to employees and collaborators of the Data Controller and abroad, in their capacity as persons in charge and/or internal data processors and/or system administrators;
– to third party companies or other entities (by way of example, credit institutions, professional firms, etc.) that perform outsourcing activities on behalf of the Data Controller, in their capacity as external data processors.

5. COMMUNICATION OF DATA

Without the need for express consent (pursuant to Art. 24 letters a), b), d) of the Privacy Code and Art. 6 letters b) and c) of the GDPR), the Data Controller may communicate your data for the purposes set out in Art. 2. These subjects will process the data in their capacity as autonomous data controllers.

Your data will not be disseminated.

6. DATA TRANSFER

Personal data are stored at the Data Controller’s premises within the European Union.

It is in any case understood that the Data Controller, should it become necessary, will be entitled to move the servers outside the EU as well. In this case, the Data Controller assures as of now that the transfer of data outside the EU will take place in compliance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided for by the European Commission.

6. DATA TRANSFER

Personal data are stored at the Data Controller’s premises within the European Union.

It is in any case understood that the Data Controller, should it become necessary, will be entitled to move the servers outside the EU as well. In this case, the Data Controller assures as of now that the transfer of data outside the EU will take place in compliance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided for by the European Commission.

7. NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL TO REPLY

The provision of data for the purposes set out in Article 2.A) is mandatory. In their absence, we will not be able to guarantee you the Services of art. 2.A). On the other hand, the provision of data for the purposes of Article 2.B) is optional. You may therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided: in this case, you will not be able to receive newsletters, commercial communications and advertising material relating to the Services offered by the Controller. However, you will continue to be entitled to the Services referred to in Article 2.A).

8. RIGHTS OF THE DATA SUBJECT

In your capacity as data subject, you have the rights referred to in Art. 7 of the Privacy Code and Art. 15 GDPR and specifically the rights to
– obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet recorded, and its communication in intelligible form;
– obtain information on the origin of the personal data, the purposes and methods of processing and the logic applied in the event of processing carried out with the aid of electronic instruments, as well as the identification details of the data controller, data processors and the representative designated pursuant to Art. 5, paragraph 2 of the Privacy Code and Art. 3, paragraph 1 of the GDPR
– to obtain the updating, rectification or, where interested therein, integration of the data; the cancellation, transformation into anonymous form or blocking of data processed in breach of the law, including data whose retention is not necessary for the purposes for which the data were collected or subsequently processed
– where applicable, you also have the rights set out in Articles 16-21 GDPR (right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to complain to the Data Protection Authority.

Pursuant to Art. 13 para. 2 and Art. 14 para. 2 GDPR you have the right to know:
– the storage period of your personal data
– to request from the data controller access to your personal data and its rectification or erasure or to object to its processing, as well as the right to data portability;

Limited to personal data not collected at your premises, you have the right
– to lodge a complaint with a supervisory authority;
– to know the source from which your personal data originated and, if applicable, whether the data came from publicly accessible sources
– to know whether there is an automated decision-making process, including profiling as referred to in Article 22(1) and (4) GDPR, and, at least in such cases, meaningful information about the logic used, as well as the relevance and expected consequences of such processing for you.

9. METHODS OF EXERCISING RIGHTS

You may exercise your rights at any time by sending
– a registered letter with advice of receipt to: HOLIDAY DEPILATORI S.R.L – VIALE ETRURIA 65 – 53047 SARTEANO (SI)
– an email to: privacy@holidaydepilatori.net

10. OWNER, MANAGERS AND APPOINTEES

The Data Controller is:

HOLIDAY DEPILATORI S.R.L
VIALE ETRURIA 65 – 53047 SARTEANO (SI)

The updated list of data processors and persons in charge of processing is kept at the registered office of the Data Controller.