Privacy Policy - Contact Us
Data controller KIKO S.p.A., with a registered address at 24122 Bergamo, via Giorgio e Guido Paglia n. 1/D, VAT Number 02817030162, Fiscal Code 12132110151 (the “Company”).
Data protection officer (PO) Email address: dpo.kiko@kikocosmetics.com
PERSONAL DATA PROCESSED Identity data*. Contact details*. Details relating to purchase(s).
OBLIGATORY PROVISION OF DATA Your data (your name, telephone number, email address, address, pictures, and data of the purchased order) must be provided to be able to provide the information requested, therefore if this information is absent the Company will not be able to process the request.
RECIPIENTS OF THE DATA Personal data may be communicated to parties acting as data controllers (such as supervisory bodies and authorities and public organizations authorized to request data) or processed on behalf of the Company by parties appointed as data processors, who are provided with suitable operating instructions.
These parties include the following categories:
a) companies belonging to the KIKO Group offering support services to Data Controller for organizational matters; a) companies that manage/maintain the company website; b) companies that provided Customer Service Management (i.e. call center); c) supervisory and control authority and any public entity entitled to request the Data.
THIRD PARTIES AUTHORISED TO PROCESS DATA Your personal data may be processed by company employees tasked with the pursuit of the goals set out above, who are expressly authorized to process data and have received appropriate data processing guidelines.
PERSONAL DATA TRANSFERS OUTSIDE THE EU The company does not transfer your Data to non-EU countries
DATA SUBJECTS’ RIGHTS - COMPLAINT TO THE SUPERVISORY BODY By contacting the privacy office via e-mail sent to privacy@kikocosmetics.com, data subjects may ask the Controller or the DPO for access to personal data, or the rectification of inaccurate personal data and the completion and the deletion of personal data, and also have the right to restrict processing of the data in the cases set out in article 18 GDPR, and object to processing in the case of legitimate interests of the controller. Where the processing is based on consent or is necessary for the performance of a contract to which the data subject is party, or to take steps at the request of the data subject prior to entering into a contract, and the processing is carried out by automated means, the data subjects have the right to receive the personal data concerning them in a structured, commonly used, machine-readable format, and, if technically feasible, the right to have their personal data transmitted to another controller without hindrance Data subjects have the right, at any time, to withdraw consent given for marketing and/or profiling purposes, and to object to the processing of personal data for marketing purposes, including any profiling connected with direct marketing. This will not prejudice the possibility available to any data subject who prefers to be contacted for the aforementioned purposes exclusively by traditional means to indicate his/her objection only to the receipt of communications by electronic means. Notice in relation to the processing of the personal data of online customers COOKIE policy pursuant to Regulation (EU) 2016/679 (“GDPR”) Here
