Our Cookie Policy

KIKO S.p.A., with its registered office in Bergamo, via Giorgio e Guido Paglia 1/D ("Data Controller"), informs you pursuant to Article 13 of Regulation (EU) 679/2016 ("GDPR") that your data, collected through cookie, will be processed by means and for the purposes indicated in this policy.

KIKO S.p.A. has appointed a Data Protection Officer (“DPO”) pursuant to Articles 37, 38 and 39 of GDPR. The DPO may be contacted at the following email address: dpo.kiko@kikocosmetics.com

Cookie are small text files that are saved on your electronic device (PC, tablet, etc.) while browsing a website and that provide certain information. Cookie are then sent back to the website of origin during each subsequent browsing session or are sent to a different website that is able to recognize that specific cookie. Cookie act as memory for a website, allowing the website to recognize your device on each of its subsequent visits to that same site. Cookie also allow users' browsing preferences to be stored, thus offering a more functional website experience, and making the content of the website as personalized as possible. Cookie may be technical, analytical and profiling.

This website ("Site") of the Data Controller uses the following categories of cookie:

TECHNICAL COOKIE Technical cookie, which are always active, guarantee the proper functioning of the Site. The Site uses the following technical cookie.

ANALYCAL COOKIE

Analytical cookie are used for statistical analyses and to measure the performance of the Site. These cookie are not anonymous and therefore cannot be assimilated to technical cookie. Analytical cookie will therefore be inactive unless you give prior, specific consent. The Site uses the following analytical cookie.

For technical cookie, your explicit consent is not required considering that these cookie are necessary to enable the browsing and proper functioning of the Site. For non-anonymous analytical cookie, used to process statistical analyses and evaluate the performance of the Site, the provision of data through cookie is based on your consent. The provision of data is therefore optional. If you do not accept non-anonymous analytical cookie, you may click on the “X” button on the upper right of the banner. You will still be able to browse the Site with only the strictly necessary technical cookie. By clicking on the "Agree and close" button, you grant consent to the installation of analytical cookie. You may always review your choices freely and at any time through the "Cookies management" section of the Site’s footer.

The data will be stored for the time foreseen for each of the categories of cookie, for which please see the tables containing the relevant retention periods. In particular, technical cookie are always active and cannot be disabled. When the retention period of a technical cookie expires, new cookie will therefore be automatically activated. Analytical cookie will always be inactive and can only be enabled if you explicitly grant your consent to them through the "Agree and close" button or kept inactive if you close the banner using the "X" button on the upper right. The banner will not be shown again unless there are substantial changes (e.g. list of third parties), the Data Controller cannot determine whether a cookie is already stored on the device or if six months have passed from your choice.

Data processing is carried out by internal personnel of the Data Controller authorised to the processing and adequately trained pursuant to Article 29 of GDPR. The data collected for the above purposes will also be processed by third parties appointed as data processors, or, as the case may be, disclosed to them as independent data controllers, such as, by way of example: i) companies belonging to Data Controller’s group; ii) companies, bodies or associations that perform connected and instrumental services to allow you to browse the Site and enable its proper functioning, as well as the development and maintenance of the Site (including the provider of the Consent Management Platform); iii) public bodies, competent authorities and law enforcement agencies, in order to respond to requests for verification and for the performance of institutional functions within the limits established by law and regulations.

In view of the global nature of the Data Controller's activities, data may be transferred abroad to countries located outside the EEA, to companies (including companies affiliated with KIKO S.p.A.) or to cookie providers in the case of third-party cookie. For information on the transfer of data collected through third-party cookie, please refer to the privacy policies of each third party, available on the websites of the third parties referred to in the links in the tables of each category of cookie, "third-party technical cookie" and "third-party analytical cookie". In any event, transfer of personal data to countries located outside the European Union (including the USA) will be carried out in accordance with Articles 44 et seq. of GDPR, implementing appropriate safeguards aimed at ensuring a correct level of data protection during the transfer of your personal data, such as:

• Adequacy decisions adopted by the European Commission concerning third countries that guarantee an adequate level of protection of personal data; • Data transfer agreements incorporating the Standard Contractual Clauses of the European Commission; • Additional measures required by applicable legislation and/or by measures of the competent authorities.

For information on the appropriate safeguards regarding the transfer of personal data outside the EEA, write to the following email address: dpo.kiko@kikocosmetics.com.

You may authorize the use of analytical cookie by clicking on the "Agree and close" button directly from the banner, or reject the use of these cookie by closing the banner and clicking on the "X" button on the upper right. In this case, only technical cookie will be activated. At any time you may manage and review your consent for each type of cookie through the specific "Learn more" button of the banner or through the "Cookies management" link in the footer of the Site. You may disable cookie at any time by manually changing your browser configuration, as indicated below:

• Chrome: https://support.google.com/chrome/answer/95647?hl=en

• Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer#w_cookie-settings

• Internet Explorer: https://support.microsoft.com/en-gb/windows/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use-168dab11-0753-043d-7c16-ede5947fc64d

• Opera: https://help.opera.com/en/latest/web-preferences/#cookies

• Safari: https://support.apple.com/en-gb/105082

If you are using a web browser that is not listed above, you may refer to your browser's documentation or online help for more information. The Data Controller acts as a mere technical intermediary for the links contained in this document and assumes no responsibility for any changes.

Examples of other technologies

• Localstorage This is a technology used to optimize navigation, which does not collect data on the preferences expressed by the user (e.g., it stores a code that identifies the user's session after logging in, to prevent the user from having to enter a username and password on each page of the profile when accessing reserved areas).

• Tracking pixel A "tracking code" or "monitoring code" is a small portion of code that is sent by some systems to be implemented in others to track certain data relating to the user and his or her browsing session or the opening of emails, in a way totally transparent to the user. Various data can be tracked, such as date and time, geographical location, and type of browsing device, up to the most complex tracking pixels, used to monitor the value spent on a purchase order and other useful information for the marketing departments of the companies that use them.

• Plugin This is a program that interacts with another program to expand or extend its original features. The most commonly used plugins are social networks plugins, which allow users to follow a page or a social profile at a click, to indicate liking a web content at a click and to share it on a social network profile, etc.

• Widget This is a graphical user interface component of a program, which is intended to facilitate the user's interaction with the program. The most commonly used widgets are social networks widgets, which allow users to easily open social networks in a separate browser window.

These services allow users to interact with social networks, or with other external platforms, directly from the pages of a site. Any interactions and information acquired by the site are subject to the privacy settings of the third party that created these technologies. To receive detailed information pursuant to Article 13 Regulation (EU) 2016/679 on the use of personal data processed when you use these technologies, please visit the websites of the third parties that manage these technologies.

In relation to the processing of data collected through cookie, you may exercise the rights provided for by the GDPR (Articles 15-22), including:

• To receive confirmation of the existence of the data and access its content (access rights);

• To update, modify and/or correct the data (right of rectification);

• To request the erasure or limitation of the processing of data processed in violation of the law, including data the retention of which is not necessary in relation to the purposes for which the data was collected or otherwise processed (right to be forgotten and right to limitation);

• To object to processing (right to object);

• To withdraw consent, where given, without prejudice to the lawfulness of the processing based on the consent given before revocation through the "Cookies management" section;

• To lodge a complaint with the supervisory authority in the event of a breach of data protection regulations;

• To receive a copy in electronic format of the data concerning the data subject and delivered in the context of the processing, where technically possible, and to request that such data be transmitted to another data controller (right to data portability).

To exercise these rights, you may contact the Data Controller by sending an email to the email address of the Data Protection Officer dpo.kiko@kikocosmetics.com.

The Data Controller reserves the right to update and/or modify this policy statement at any time. The date of the last update is shown below. Last update: 9 November 2023 View KIKO’s privacy policy