Cookie Policy


1. Introduction

This information on cookies and other tracking tools explains to our users the types of cookies, other tracking tools, used by our website, as well as how they work and what steps the users can take to refuse or delete them.
G&P Cosmetics S.r.l. merely acts as a technical intermediary for the above-mentioned third-party links and shall not be liable in the event of their modification by the respective Owners/Editors.

2. DEFINITIONS AND CLASSIFICATIONS

2.1. Cookies

Cookies are usually text strings that websites (known as “Publishers” or “first parties”) visited by the user or other websites or web servers (known as “third parties”) place and store - directly, in the case of publishers, and indirectly, i.e., through the publishers themselves, in the case of “third parties” - on a terminal device available to the user.

The terminals referred to are, for example, a computer, a tablet, a smartphone, or any other device capable of storing information. These include, as of today, and even more so in the future, IoT (Internet of Things) devices, which are designed to connect to networks and among each other to provide various kinds of services, not necessarily limited to communication. The software used to browse the internet and operate these devices, such as browsers, can store cookies and then transmit them back to the sites that created them upon a subsequent visit by the same user, thus saving a record of its previous interaction with one or more websites. The information encoded in cookies may include personal data, such as an IP address, username, unique identifier or email address, but it may also contain non-personal data, such as language settings or information about the type of device a person is using to browse the site. Therefore, cookies may perform important and diverse functions, including tracking sessions, storing information about specific configurations of users accessing the server, facilitating the use of online content, etc. They can, for example, be used to keep track of the items in an online shopping cart or the information used to fill in a computer form. If, on the one hand, it is through cookies that it is possible, among other things, to allow web pages to load more quickly, as well as to route information on a network - in line, therefore, with obligations strictly related to the way websites work -, again through cookies it is also possible to convey behavioural advertising and then measure the effectiveness of advertising messages, i.e. to conform the type and modalities of the services rendered to the behaviour of the user previously observed.

Since it is not possible to distinguish cookies on the basis of their technical characteristics, they can be subdivided as explained below.
The main subdivisions relate to cookies’ origin, according to which the following may be identified:

1. first-party cookies, which are installed directly by the site operator on the user’s terminal;
2. third-party cookies, installed by a different website through the operator of the website that the user is visiting;

Based on the purposes cookies pursue, they may be classified into two categories:

- technical cookies, i.e., those used for the sole purpose of “carrying out the transmission of a communication on an electronic communications network, or to the extent strictly necessary for the provider of an information society service explicitly requested by the contracting party or user to provide such service” (see Article 122(1) of Legislative Decree 196/03). These cookies do not require consent.

- profiling cookies, which are those used to link specific actions or recurring behavioural patterns in the use of the functions offered (patterns) to specific identified or identifiable subjects, in order to group the various profiles within homogeneous clusters of different sizes, so that the owner can, among other things, vary the provision of the service in an increasingly personalised manner beyond what is strictly necessary to provide the service, and send targeted advertising messages, i.e., in line with the preferences expressed by the user when surfing the web. These cookies may only be used with the consent of the data subject, which also constitutes the legal basis of the data processing. Users can never be required to express their consent, without an alternative option, to receiving cookies or other tracking tools, in the absence of which they may not be able to access the site.

- There are also analytics cookies that carry out analyses and statistics on the use of the site and on the flow of surfers. These cookies fall into the category of technical cookies if their use  precludes the possibility of directly identifying the data subject (single out), which is equivalent to preventing the use of analytical cookies that, due to their characteristics, work as direct and unique identifiers.

Analytical cookies also fall into the category of technical cookies if the use of statistical analyses relating to several domains, websites or apps can be traced back to the same data controller, provided that the latter carries out the statistical processing themselves, without such analyses ever resulting in an activity which actually takes on the features of data processing aimed at making commercial decisions beyond the limits of a mere statistical count. The legal basis of data processing is the same as that of technical cookies where the relevant cookies fall within this category, or consent where they do not.

2.2. Other tracking systems

Other technologies may exist that are used with the same purposes as cookies.
For example, while Cookies can be used in both web and mobile browsers, it would be inappropriate to talk about Cookies in the context of mobile applications, as these are Tracking Tools that require a browser to be in place. For this reason, within this document the term Cookies is only used to specifically refer to that particular type of Tracking Tool. For these technologies, the same criteria used for cookies apply.

2.3. Coding criteria

The criteria by which tracking tools (including cookies) are classified are as follows:

Strictly necessary - always activated unless the user has the right to block them through their browser settings: tools used to ensure the proper functioning of the website. These tools do not store personal information. Their use does not require the user's consent. Without such cookies, the site may not function properly. The legal basis for data processing for these cookies is the legitimate interest in the proper functioning of the website. These fall within the definition of technical cookies.
Experience enhancement: used to foster the user’s efficient use of the website and promote a personalised browsing experience.  These tools may only be used with the user's consent. Without these tools, it is still possible to browse the site without any issue or restriction other than that of not being able to use the functionalities that require these types of tools. The legal basis of the data processing for these instruments is consent.

Measuring - always activated unless the user has the right to block them through the browser settings: these are used to count website visits and are necessary to improve the performance of our website. Data are aggregated and collected anonymously and, as such, the user's consent is not required in this case. Without these tools, users may still browse the website without any issue or restriction.  The legal basis of the data processing for these tools is the legitimate interest in improving the performance of the site. However, as this is done anonymously, no data processing takes place. These cookies fall within the definition of analytics cookies.

PROFILING - used to link specific actions or recurring behavioural patterns in the use of the functions offered (patterns) to specific identified or identifiable subjects, in order to group the various profiles within homogeneous clusters of different sizes, so that the owner can, among other things, vary the provision of the service in an increasingly personalised manner beyond what is strictly necessary to provide the service, and send targeted advertising messages, i.e. in line with the preferences expressed by the user when surfing the web. These tools may only be used with the consent of the data subject, which also constitutes the legal basis of the data processing. Users can never be required to express their consent, without an alternative option, to receiving cookies or other tracking tools, in the absence of which they may not be able to access the site.

3. LIST OF COOKIES, TRACKING SYSTEMS AND PURPOSES

3.1. Strictly necessary

List and storage period:

4. DATA CONTROLLER AND DATA PROTECTION OFFICER

The Data Controller is: G&P COSMETICS SRL, having its registered office in Via L. Mascheroni No. 27 - 20145 Milano (MI-Italy), Tax Code, VAT number and Padua Company Register No. 04778640963, E.A.I. No. MI 1771789, Share  Capital EUR 62,500.00 fully paid-in, a company subject to the management and coordination of AGF88 Holding S.r.l.,Tel.  0575 720 682, FAX 0575 749 923, gruppoprivacy@agf88holding.it.
As of today, the Company is not legally required to have an internal Data Protection Officer. In case such a function should become necessary, the identity of the relevant person will be made known through the Company’s website www.g&pcosmetics.it, which you are encouraged to visit periodically, including for any updates to this privacy policy.

5. Rights

We inform you that the GDPR allows the data subject to request to the Data Controller (using the contact details provided above) full access to its personal data and the rectification of such data, the data erasure, a restriction to the data processing, and the right to data portability; the data subject may also object to the processing of its data, and exercise the other rights set forth in Chapter 3, Section 1 of the GDPR, including that of revoking consent, where envisaged: revocation of consent shall not however affect the lawfulness of the processing based on the consent given before revocation.

6. Complaints

If the User believes that the processing of his or her personal data violates the provisions of the GDPR and privacy regulations, he or she may always lodge a complaint with the Italian Data Protection Authority, whose details can be found at www.garanteprivacy.it.

7. Data disclosures

Data may be processed only by personnel authorised to carry out the data processing (computer technicians, also external to the company, consultants, also external to the company - computer technicians, consultants responsible for managing the website - marketing staff, also external to the company, website management staff, also external to the company - staff working in the sectors to which any request is addressed) and by specially appointed data processors (e.g., companies managing the website or where the website is located). The list of data processors may be obtained by contacting the data controller. All of the aforementioned parties shall only process data that are necessary for the performance of their tasks.
If necessary, the Company may disclose the data to judicial or police bodies, to lawyers and to anyone it may be necessary for the purpose of fulfilling the obligations provided for by law, by a regulation or by Community legislation or to assert or defend a right in the appropriate fora.

8. Additional purposes

Please note that, in any event, all data may be processed to enforce or defend a right of the Company in the appropriate fora and for all obligations under the law, regulation or EU legislation, bearing in mind that in this sense the provision of data is necessary and failure to do so will make it impossible to access the website and/or to establish any relationship with the Company (including simply by writing an e-mail for information) and that for these purposes the data may be disclosed to judicial or police bodies, lawyers and anyone it may be necessary precisely to meet the obligations laid down by law, regulation or legislation or to enforce or defend a right in the appropriate fora.

9. INSTRUCTIONS FOR DISABLING COOKIES DIRECTLY FROM THE USERS’ BROWSER


– Chrome → https://support.google.com/chrome/answer/95647?hl=it
– Internet Explorer → http://windows.microsoft.com/it-it/internet-explorer/delete-manage-cookies#ie=ie-11
– Opera → http://help.opera.com/Windows/10.00/it/cookies.html
– Safari per dispositivi mobili → http://support.apple.com/kb/HT1677?viewlocale=it_IT
– Safari per desktop → https://support.apple.com/kb/PH19214?locale=it_IT
– Firefox→https://support.mozilla.org/it/products/firefox/protect-your-privacy/cookies
– Microsoft Edge –> http://windows.microsoft.com/it-it/windows-10/edge-privacy-faq

If you use a web browser other than those listed above, please refer to your browser’s documentation or online help for further information.

Update 25/08/2022