Our Cookie Policy

KIKO S.p.A., with its registered office in Bergamo, via Giorgio e Guido Paglia 1/D ("Data Controller"), informs you pursuant to Article 13 of Regulation (EU) 679/2016 ("GDPR") that your data, collected through cookie, will be processed by means and for the purposes indicated in this policy.

With respect to certain cookie as well as Pixels, in addition, the Data Controller and Meta Platforms Ireland Limited, located at Merrion Road, Dublin 4, D04 X2K5, Ireland, as well as TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, act as joint data controllers, on the basis of a specific Joint Ownership Agreement, for the purpose of measuring the level of interaction between the websites visited according to the preferences of the data subjects and providing targeted advertising. Further information on how Meta Platforms Ireland Limited and TikTok Technology Limited process personal data, including the legal basis to which Meta Platforms Ireland Limited and TikTok Technology Limited refer and how to exercise your rights vis-à-vis Meta Platforms Ireland Limited and TikTok Technology Limited, can be found in Meta Platforms Ireland Limited's Data Policy at facebook.com/about/privacy and in TikTok Technology Limited’s Privacy Policy tiktok.com/legal/page/eea/privacy-policy/en.

KIKO S.p.A. has appointed a Data Protection Officer (“DPO”) pursuant to Articles 37, 38 and 39 of GDPR. The DPO may be contacted at the following email address: dpo.kiko@kikocosmetics.com.

Cookie are small text files that are saved on your electronic device (PC, tablet, etc.) while browsing a website and that provide certain information. Cookie are then sent back to the website of origin during each subsequent browsing session or are sent to a different website that is able to recognize that specific cookie. Cookie act as memory for a website, allowing the website to recognize your device on each of its subsequent visits to that same site. Cookie also allow users' browsing preferences to be stored, thus offering a more functional website experience, and making the content of the website as personalized as possible.

Cookie may be technical, analytical and profiling.

This website ("Site") uses the following categories of cookie and other tracking tools:

TECHNICAL COOKIE

Technical cookie, which are always active, guarantee the proper functioning of the Site. The Site uses the following technical cookie.

ANALYTICAL COOKIE

Analytical cookie are used for statistical analyses and to measure the performance of the Site. These cookie are not anonymous and, therefore, cannot be assimilated to technical cookie. Analytical cookie will therefore be inactive unless you give prior, specific consent.

The Site uses the following analytical cookie.

PROFILING COOKIE AND OTHER TRACKING TOOLS

Profiling cookie and other tracking tools are used for sending you both personalised and non-personalised advertising. These cookie and other tracking tools are not technical and, therefore, they will be inactive unless you give your prior and specific consent.

The Site uses the following profiling cookie and other tracking tools:

For technical cookie, your explicit consent is not required considering that these cookie are necessary to enable the browsing and proper functioning of the Site. For non-anonymous analytical cookie, used to process statistical analyses and evaluate the performance of the Site, profiling cookie and other tracking tools, used to send both non-personalized and personalized advertising, the provision of data is based on your consent. The provision of data is, therefore, optional. If you do not accept non-anonymous analytical cookie and profiling cookie, as well as other tracking tools, you may click on “Continue without accepting” on the upper right of the banner. You will still be able to browse the Site with only the strictly necessary technical cookie. By clicking on the "Agree all" button, you grant consent to the installation of analytical and profiling cookie, as well as other tracking tools. You may always review your choices freely and at any time through the "Cookies management" section of the Site’s footer.

The data will be stored for the time foreseen for each of the categories of cookie, for which please see the tables containing the relevant retention periods. In particular, technical cookie are always active and cannot be disabled. When the retention period of a technical cookie expires, new cookie will therefore be automatically activated. Analytical and profiling cookie, as well as other tracking tools, will always be inactive and can only be enabled if you explicitly grant your consent to them through the "Agree all" button or kept inactive if you close the banner clicking on "Continue without accepting" on the upper right.

The banner will not be shown again unless there are substantial changes (e.g. list of third parties), the Data Controller cannot determine whether a cookie is already stored on the device or if six months have passed from your choice.

Data processing is carried out by internal personnel of the Data Controller authorised to the processing and adequately trained pursuant to Article 29 of GDPR. The data collected for the above purposes will also be processed by third parties appointed as data processors, or, as the case may be, disclosed to them as independent data controllers, such as, by way of example: i) companies belonging to Data Controller’s group; ii) companies, bodies or associations that perform connected and instrumental services to allow you to browse the Site and enable its proper functioning, as well as the development and maintenance of the Site (including the provider of the Consent Management Platform); iii) public bodies, competent authorities and law enforcement agencies, in order to respond to requests for verification and for the performance of institutional functions within the limits established by law and regulations.

The Site uses special tools that allow you to embed the features of the social network directly within the Site (e.g. Meta and TikTok Pixels). Pixels are aggregated statistics created from certain events recorded by Meta's and TikTok’s servers when people interact with pages and content associated with them.

When you visit a page of our website and use Meta or TikTok Products (including the "Pages"), the corresponding information e.g. IP addresses, operating system, browser type, language settings, cookie data, is transmitted from your browser directly to Meta and TikTok and stored by Meta or TikTok.

For more information on the purposes, type and methods of collection, processing, use and storage of personal data by the social network platform, as well as how to exercise your rights, please consult the privacy policy of Meta here facebook.com/about/privacy and TikTok here tiktok.com/legal/page/eea/privacy-policy/en.

In view of the global nature of the Data Controller's activities, data may be transferred abroad to countries located outside the EEA, to companies (including companies affiliated with KIKO S.p.A.) or to cookie providers in the case of third-party cookie. For information on the transfer of data collected through third-party cookie, please refer to the privacy policies of each third party, available on the websites of the third parties referred to in the links in the tables of each category of cookie, "third-party technical cookie", “third-party analytical cookie” and “third-party profiling cookie and other tracking tools”.

In any event, transfer of personal data to countries located outside the European Union (including the USA) will be carried out in accordance with Articles 44 et seq. of GDPR, implementing appropriate safeguards aimed at ensuring a correct level of data protection during the transfer of your personal data, such as:

- adequacy decisions adopted by the European Commission concerning third countries that guarantee an adequate level of protection of personal data;

- data transfer agreements incorporating the Standard Contractual Clauses of the European Commission;

- additional measures required by applicable legislation and/or by measures of the competent authorities.

For information on the appropriate safeguards regarding the transfer of personal data outside the EEA, write to the following email address: dpo.kiko@kikocosmetics.com.

You may authorize the use of analytical and profiling cookie, as well as other tracking tools, by clicking on the "Agree all" button directly from the banner, or reject the use of these cookie by closing the banner and clicking on "Continue without accepting" on the upper right. In this case, only technical cookie will be activated. At any time you may manage and review your consent for each type of cookie through the specific "Customize my choices" button of the banner or through the "Cookies management[FT1] " link in the footer of the Site.

You may disable cookie at any time by manually changing your browser configuration, as indicated below:

Chrome: https://support.google.com/chrome/answer/95647?hl=it

Firefox: https://support.mozilla.org/it/kb/Gestione dei cookie

Internet Explorer: https://support.microsoft.com/it-it/topic/eliminare-e-gestire-i-cookie-168dab11-0753-043d-7c16-ede5947fc64d

Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Safari: http://support.apple.com/kb/HT1677?viewlocale=it_IT

If you are using a web browser that is not listed above, you may refer to your browser's documentation or online help for more information. The Data Controller acts as a mere technical intermediary for the links contained in this document and assumes no responsibility for any changes.

Examples of other technologies

• Localstorage This is a technology used to optimize navigation, which does not collect data on the preferences expressed by the user (e.g., it stores a code that identifies the user's session after logging in, to prevent the user from having to enter a username and password on each page of the profile when accessing reserved areas).

• Tracking pixel A "tracking code" or "monitoring code" is a small portion of code that is sent by some systems to be implemented in others to track certain data relating to the user and his or her browsing session or the opening of emails, in a way totally transparent to the user. Various data can be tracked, such as date and time, geographical location, and type of browsing device, up to the most complex tracking pixels, used to monitor the value spent on a purchase order and other useful information for the marketing departments of the companies that use them.

• Plugin This is a program that interacts with another program to expand or extend its original features. The most commonly used plugins are social networks plugins, which allow users to follow a page or a social profile at a click, to indicate liking a web content at a click and to share it on a social network profile, etc.

• Widget This is a graphical user interface component of a program, which is intended to facilitate the user's interaction with the program. The most commonly used widgets are social networks widgets, which allow users to easily open social networks in a separate browser window.

These services allow users to interact with social networks, or with other external platforms, directly from the pages of a site. Any interactions and information acquired by the Site are subject to the privacy settings of the third party that created these technologies. To receive detailed information pursuant to Article 13 of GDPR on the use of personal data processed when you use these technologies, please visit the websites of the third parties that manage these technologies.

In relation to the processing of data collected through cookie, you may exercise the rights provided for by the GDPR (Articles 15-22), including:

• To receive confirmation of the existence of the data and access its content (access rights);

• To update, modify and/or correct the data (right of rectification);

• To request the erasure or limitation of the processing of data processed in violation of the law, including data the retention of which is not necessary in relation to the purposes for which the data was collected or otherwise processed (right to be forgotten and right to limitation);

• To object to processing (right to object);

• To withdraw consent, where given, without prejudice to the lawfulness of the processing based on the consent given before revocation through the "Cookies management" section;

• To lodge a complaint with the supervisory authority in the event of a breach of data protection regulations;

• To receive a copy in electronic format of the data concerning the data subject and delivered in the context of the processing, where technically possible, and to request that such data be transmitted to another data controller (right to data portability).

To exercise these rights, you may contact the Data Controller by sending an email to the email address of the Data Protection Officer dpo.kiko@kikocosmetics.com.

The Data Controller reserves the right to update and/or modify this policy statement at any time. The date of the last update is shown below. Last update: 9 November 2023 View KIKO’s privacy policy