The protection of your personal data is one of our first concerns. Hence, we process your personal data exclusively on the basis of the legal regulations (i.e. General Data Protection Regulation n.2016/679 hereafter “GDPR”), In this privacy notice, we inform you about the most important aspects of data processing in the context of our website.
Based on the EU privacy regulation we give you the following information on how your personal data are processed by us.
Our contact details:
Great Lengths S.p.A Società Benefit
ROMA (RM) VIA PIEMONTE 39
CAP 00187
39A INT 8
P.IVA 06434421001
Phone: 0039 0761 527069
e-mail: info@greatlengths.com
Explanation of terms
Personal data (Art 4 L 1 GDPR)
The regulations of the GDPR apply to the processing of personal data of natural persons.
As per definition “personal data” are all pieces of information which refer to an identified or
identifiable natural person (“data subject”). An identifiable person is one who can be identified,
directly or indirectly, in particular by reference to a name, an identification number, site data, an
online identification sign or by one or more factors specific to the physical, physiological, mental, economic, cultural or social identity of that natural person.
Processing (Art 4 L 2 GDPR)
With the term “processing” the GDPR describes any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
Data Controller (Art 4 L 7 GDPR) and Data Processor (Art 4 L 8 GDPR)
The “Data Controller” is a natural or legal person, authority, entity or any other body who jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
The “Data Processor” is a natural or legal person, authority, entity or any other body who processes
personal data on behalf of the Data Controller;
Consent (Art 4 L 11 GDPR)
The “consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
Pseudonymization
The pseudonymization means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
Personal data processed and collected
Your navigation on the Site and/or access to certain sections of the Site may result in the collection and subsequent processing of your personal data by the Controller. In fact, when connecting to the Site, computer systems and software procedures for their operation automatically and/or automatically and indirectly acquire certain information (such as, but simply an example, the so-called “cookies”, as specified in the “Cookie Policy”, which is located at the end of this policy, “IP” addresses, domain names of the computers used by users who connect to the Site, request, the time of the request to the server, etc.).
Specifically, your navigation to the Site and/or any requests for information or services from you may also involve the collection and subsequent processing of your personal data (such as first name, last name, postal and e-mail address, password, age, date of birth, gender, image, profession, marital status, etc.).
In particular, the collection of your personal data may take place:
- by filling out online forms on your part;
- through the publication by you of Contributions (as defined below), the content of which may include your personal data conferred directly by you, on social networks independently managed by third parties, such as, but not limited to, Facebook, YouTube, etc. (below “Social Network”). By “Contributions” we mean the images, comments, effect phrases associated with what is the subject of the Site, the contents and any other information that you conceived and published on the pages of the Social Networks dedicated to products of the different brands of the Controller, including the image that you possibly give. The publication of the Contributions can also take place under a pseudonym (“nickname”) chosen by you during registration on the Site, and possibly to the image that you have associated with your nickname. In choosing the nickname and any image associated with it, you remain solely responsible for any prejudices that the use of the nickname or image may cause to third parties.
In case you choose to send a request through the “Contact Us” section of the Site, the granting of some personal data is necessary for the Controller to meet your needs within the functionality of the Site.
Purposes and legal basis of data processing
According to the needs you have expressed from time to time by accessing the various sections of the Site the following are the purposes of the processing of your personal data and its legal basis.
Your personal data will be processed for the following purposes on the basis of the establishment of a precontractual relationship or with your consent to the data processing, which can be revoked at any time according to the procedures indicated by the Controller at the time of the collection of consent:
a) managing and responding to your requests
you can decide to give consent to the processing of your personal data for management and response, by the Controller, to your requests in relation to your activities on the Site (“contact us” section of the Site). In connection with this purpose, your consent is required when submitting requests. If you decide not to consent to the processing of your personal data for that purpose, you will not be able to continue sending your request.
b) managing your activities
your personal data will be used to manage the activities related to your interaction with the Site and the sections in it. For that kind of activities, the collecting of personal data is mandatory for ensure the possibility to navigate on the site. The failure of the conferring will not allow you to navigate on the website.
c) performing e- mail marketing activities on personal data conferred by using the website
you can decide to give the consent to the processing of your personal data for the performing of marketing activities carried out by the Controller on the personal data released by the user in the context of site use. If you decide not to consent to the processing of your personal data for that purpose, the Controller will not be allowed to send you advertising email for promotional and marketing activities of products or services;
d) performing third – parties marketing activities on personal data conferred by using the website
you can decide to give the consent to the processing of your personal data for the performing of marketing activities carried out by the distributors (hereafter also “third party or licensee”) on the personal data released by the user in the context of site use. If you decide not to consent to the processing of your personal data for that purpose, the distributors will not be allowed to send you advertising email for promotional and marketing activities of products or services;
e) performing profiling activities on personal data released by using the website
you can decide to give the consent to the processing of your personal data for the performing of profiling activities carried out by the Controller on the personal data released by the user in the context of site use.
In particular, on account of your navigation on site it could be collected tags and text traces concerning your habits and preferences about a product or a service offered by the Controller. If you decide not to consent to the processing of your personal data for that purpose, the Controller will not be allowed to collect personal data concerning your habits and preferences about a product or a service offered by the Controller.
f) performing third – party profiling activities on personal data released by using the website
you can decide to give the consent to the processing of your personal data for the performing of profiling activities carried out by the distributors on the personal data released by the user in the context of site use.
In particular, on account of your navigation on site it could be collected tags and text traces concerning your habits and preferences about a product or a service offered by the distributors. If you decide not to consent to the processing of your personal data for that purpose, the distributors will not be allowed to collect personal data concerning your habits and preferences about a product or a service offered by the distributors.
g) performing re-marketing activities on personal data released by using the website
you can decide to give the consent to the processing of your personal data for the performing of re- marketing activities carried out by the Controller on the personal data released by the you in the context of site use. In particular you can decide if give the consent to the processing of tags and text traces collected in the context of the above – mentioned point e) for the sending of promotional or marketing advertising in line with your interests. If you decide not to consent to the processing of your personal data for that purpose, the Controller will not be allowed to send you promotional or marketing advertising.
h) performing third party re-marketing activities on personal data released by using the website
you can decide to give the consent to the processing of your personal data for the performing of re- marketing activities carried out by the distributors on the personal data released by the you in the context of site use. In particular you can decide if give the consent to the processing of tags and text traces collected in the context of the above – mentioned point f) for the sending of promotional or marketing advertising in line with your interests. If you decide not to consent to the processing of your personal data for that purpose, the distributors will not be allowed to send you promotional or marketing advertising.
i) managing of the newsletter service
you can decide to give your consent to the processing of your personal data in order to subscribe the newslettering service carried out by the Controller by filling in the dedicated web form on the web site. If you decide not to consent to the processing of your personal data for that purpose, the Controller will not be allowed to provide you with the newslettering service.
Methods of data processing and security measures
The processing of your personal data may include any type of operation, including collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction. Your personal data will be processed mainly in an automated but form, with logic strictly related to its purposes, through the databases, the electronic platforms managed by the Controller or by third parties appointed for this purpose data processors and / or integrated IT systems of the Controller and the aforementioned third parties and / or websites. The Data Controller has assessed the level of security as adequate taking into account the risks that could derive from loss, destruction, modification, unauthorized disclosure, accidental or illegal access, abuse or alteration of your personal data. In particular:
- has adopted security measures appropriate to the risks;
- keep your personal data on servers mainly located in the European territory, (for information on how to transfer personal data outside the European Economic Area, see the following section “Transfer of your personal data outside the European Economic Area”).
Data Retention
In order to ensure compliance with the principles of necessity and proportionality of the processing, the Data Controller has identified different times for storing personal data in relation to the individual purposes pursued:
Your personal data will be deleted, if they are no longer needed for justifiable and admissible
purposes or as soon as you revoke your consent and we are not legally bound or in any other way authorized to save these data anymore. Your data will be stored in particular to respect legal
retention obligations as long as they may be needed for the exercise or defense of legal claims.
Data Recipients
Your personal data may be communicated to and processed by:
Distributors, formally authorized to the use of the website on the basis of the license agreement signed with Great Lengths s.p.a. S.B., acting as Data Processors.
Transfer of your personal data outside the European Economic Area
Your personal data could be transferred to recipients belonging to USA, according to the Standard Contractual Clauses adopted by the Data Controller.
Data Protection Officer Contact
The Data Protection Officer appointed by the Data Controller has the following contact data: dpo@greatlengths.com
Data subject’s rights
Data Protection applicable Law recognizes you, as data subject, numerous rights. In particular, you have the right to:
Furthermore, if the processing of your personal data bases on your consent, you have the right to withdraw the consent at any time per mail to the (address) or via email to info@greatlengths.com. If you believe that the processing of your data violates the data protection applicable law, or your data protection rights are infringed in any other way, you can lodge a complaint with a supervisory authority. In Italy the competent supervisory authority is the “Autorità Garante per la protezione dei dati personali”.
Right to objection
At any time and for reasons related to your particular situation, you have the right to object to the processing of your personal data (including profiling) that is necessary for the pursuit of a legitimate interest of the Controller or third parties. In this case, the Data Controller refrains from further processing your personal data unless he demonstrates the existence of binding legitimate reasons that prevail over your interests, rights or freedoms or is necessary for the assessment, exercise or defense of a right in court.
Company with certified management
system for ISO 900I, ISO 14001, ISO 45001
