Privacy Policy and Cookies

OWNER OF ACTION
The owner of the treatment of data is: Crespo S.r.l., with headquarters in Rome, 00153, Viale di Trastevere, 42; email: [email protected] P.Iva 15353231002 (from now onwards mentioned as “the Owner”).
Responsible for the protection of data: contactable via email at [email protected] or at the above mentioned address by inserting in the Subject: “Inherent to Privacy”.

METHOD OF TREATMENT OF HELD DATA
The European Regulation n. 679/2016 (follows GDPR) on the subject of treatment of personal data and privacy has the objective of strengthening the protection of personal data of European Union citizens.
The protection of data is of high importance for Crespo S.r.l. and this, as Owner of Treatment, wishes to guarantee the complete and utter transparency in regards to this matter.
This website collects necessary data for the correct navigation and use of the provided services.
The treatment of such data will only be done in an authorized manner in conformity with the suggested purposes and by following the correct safety measures, and not as described within the cited Regulation.
Other than the Owner there could be third-parties allowed to use the data, which are all members nominated by the Owner, as responsible users.

PLACE AND PURPOSE OF THE TREATMENT OF DATA
The treatment of data connected to the online service we offer, are processed at our headquarters and/or at the headquarters of those in charge with managing the website; all data is curated only by those in charge and by authorized personnel. None of the received data will be widespread. The personal data that will request further information will only be used to follow up any following demand.
The collection and treatment of personal data of any given person will be cured in respect of the principles of necessity, rightfulness, and relevance and without exceeding these needs; in particular the treatment of data will occur in order to allow the Owner to provide its services and for the following reasons:

• finalize and execute the contract of sales for given services on crespobeauty.it
• handle the requests that have been forwarded to our Client Assistance
• allow clients to register on our website and the ability to use the section of services reserved for our clients

In all above mentioned cases the treatment of data is legitimized as a necessary step to bring forward the signed contract and to provide the service that has been specifically requested. To provide the services of crespobeauty.it, such as subscribe to the newsletter, we will need the declaration of the interested person to be above the age of 16 and the approval of the treatment of personal data by ticking the correct box.

CATEGORIES OF RECIPIENTS OF PERSONAL DATA
The personal data that have been given can be used and treated only for the scope of execution of all activities for which the data has been collected for. The personal data of the client can be read only by authorized and capable personnel allowed by the Owner to treat such data.
The data of the Owner can be read by anyone who wishes to, through a request via email sent to the above mentioned.

PERIOD OF CONSERVATION OF DATA
Persona data is treated and conserved for the time requested for the reasons for which they have been collected, when that ends they will be erased or made anonymous. The personal data that will be collected for reasons as described in the contract between the Owner and the client will be kept just as long as the actions described in the contract will be concluded; the right to conservation of data shall not change for as long as the law allows it, especially in virtue of the fulfillment of accounting and tax obligations, as foreseen by the existing law for the Owner of the treated data and for those specifically nominated by him.
When the treatment is based on the client’s consensus, the Owner can keep the personal data longer than stated, as long as the consensus is not revoked. The data collected to send newsletters are conserved until one does not request to end receiving the newsletters, however for a time period not longer than 10 years, as foreseen by article 5 of the GDPR.

RIGHTS OF THE CLIENT
The client can express his rights at any moment by respecting those of the Owner. In particular as stated in the UE Regulation n. 679/2016 (GDPR), the client will be able to exercise the following rights:
Right to revoke its consensus. The client can revoke the consensus of the treatment of this personal data, previously allowed.
Right to access their own data (art. 15 GDPR). The client has the right to obtain information regarding the data that have been treated by the Owner, on specific aspects of the treatment and to receive copy of the treated data, with right to communicate the following information: a) finality of treatment; b) category of treated personal data; c) recipients to whom the data have been and will be communicated; d) period of conservation of data and criteria used; e)right to receive information on the origin of personal data if these were not to be collected by the client.
Right of amendment (art. 16 GDPR). The client can request, without unjustified delay, the amendment of the personal data if they are incorrect and include the request of completing partial data.
Right of cancellation (art. 17 GDPR). When certain situations arise, the client may request the cancellation of his data by the Owner if: a) the data is no longer necessary in comparison to the finality for which they have been collected; b) the data have been illicitly treated; c) the client has successfully opposed himself to the treatment of personal data; d) the data must be cancelled in compliance with legal obligations. Unless the treatment of data becomes necessary for fulfillments of legal obligations or for the execution of something related to the public interest or for the assessment or the defense of a right in a judicial court.
Right of limitation (art. 18 GDPR). The client has the right to request the limitation of the treatment of his own data, in this case the Owner will not treat the data for any other kind of scope if not to keep them when: a) the client will contest the rightness of the personal data; b) the treatment is illicit and the client opposes himself to the cancellation of personal data and requests to limit the use of it; c) even if the Owner of the treatment will not be needing the data, the personal data is important to the client for the assessment, the exercise or the defense of rights in court; d) the client has opposed himself to the treaty while awaiting the verification of the presence of any legitimated reasons between the client and the Owner.
Right of portability of data (art. 20 GDPR). The client has the right to transfer his personal data to another Owner for treatment. For this scope the client has the right to receive his personal data in a correct manner, for common use and readable from any device.
Right of opposition (art. 21 GDPR). The client may oppose himself at any time when the treatment occurs in a different manner that what is allowed by consensus, unless there are legitimate reasons for the Owner to continue with the treatment overriding the rights and liberties of the client or if there is the need for assessment, exercise or right to opposition in a court of law.
All the rights of the client are exercised with the request turned to the Owner of data treatment of Crespo S.r.l. in written form using the “Module for exercising your rights in protection of your personal data” which can be found at the following link: https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924
The deadline for the response to the client is of a month, for all of the above cited rights.
The general right to propose a reclamation to the Guarantying Authority for the protection of personal data to, Piazza di Montecitorio n. 121, 00186, Rome (RM), remains unaffected. The model for the complaint has been made available by the Guarantying Authority for the protection of personal data and is available at the following link: https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524
The complaint to the Guarantying Authority can be signed directly by the client or by a lawyer, an attorney, an agency, an organization or an association, on his behalf.

TRANSFER OF DATA TOWARDS A THIRD COUNTRY AND/OR INTERNATIONAL ORGANIZATION
The personal data provided will not be transferred to non-EU countries.

NEWSLETTER
SendinBlue Newsletter Service: the data is regulated by the Privacy Policy of the agency offering the service, more information can be found at the following LINK. By clicking HERE you will be able to have more information on the Places of Data Storage.

You may request the cancellation of personal data at any moment sending an email to [email protected].

FIDELITY PROGRAM
Registered users on the website that have accepted the Targeting and Advertisement cookies will be able to participate in a collection of points. For more details click the following LINK.

TRUSTED PROGRAM
7Pixel S.r.l. as the legal representative throughout, is nominated as responsible for the treatment of the users’ data (by email address) for the management of the requested comments in the Trusted Program on the website www.trovaprezzi.it

TRUSTED SHOP
You have given your explicit consensus during or after placing the order, by art. 6, comma 1, letter a of GDPR, we will forward your email to Trusted Shops GmbH, Subbelrather Str. 15c, 50823, Koln, Germany (www.trustedshops.it), in a way that Trusted Shops will be able to send a request of review by email.

This consensus can be revoked at any moment by sending a message to the above mentioned addresses or contacting directly Trusted Shops.

EXTENDED INFORMATIVE ON COOKIES
What are Cookies

Regulation of Cookies
Technical cookies
Strictly needed activities for functioning
These cookies are technical in nature and are needed in order for the website to function correctly. For instance, they keep the user connected during the entire stationing on the website avoiding that the website requests the user to connect multiple times for each page.

Activities of saving preferences
These cookies allow to remember the users’ chosen preferences during the navigation, for instance they allow to choose the language.

Statistic activities and audience measuring
These cookies help us understand how users interact with the website by giving related information on visited sections, time spent on the website, any eventual malfunctioning, all in anonymity. This helps to have a better functioning of the website.

Statistic cookies and audience measuring by third parties
These cookies (third party web services) provide anonymous information connected to the way people navigate on the website.

Cookies for social media sharing
These third party cookies are used to integrate some popular functionalities of the main social media and provide them within the website. In particular they allow the registration and authentication on the website through Facebook, Instagram and Twitter and thus the sharing of comments on our social page, for instance allowing the possibility to click the “Like” button on Facebook.

Analytical cookies on this website
This website uses the free service of Google Analytics. Mind you the data that is used is only to gain numbers on most visited pages, number of visitors, aggregated visitors per operative system, per browsers, etc. These parameters are archived in Google’s servers which settle the Privacy based on the guidelines. The names of domain and the kind of browsers of the computers used to login into the website are stored with the visited pages and the URI addresses (Uniform Resource Identifier) of requested resources are stored amongst the data. These data do not allow reaching your identity whatsoever; for their own nature and for their kind of data treatment they are anonymous.

Analytical cookies are considered as technical only for the scopes of optimization and if the users’ ID are kept anonymous.

Use of Google Analytics on this website
Google Analytics (“Analytics” from now on) is a statistics service offered by Google Inc. with legal venue in 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Analytics allows keeping trace on the accesses of the website and gives the administrators the possibility to see the data of same genre matched together in an anonymous way, to see the way users navigate the website and to create statistics.

Source of personal data
Google Analytics requires the presence of a so-called tracing code on their webpages in order to function. The reason for this code is to find the pages that a user visits during a session of navigation on the website. Besides the visited pages, the data can collect the names of domains and the types of browsers used by computers to connect to the website, the URI addresses, he time of request, parameters regarding the operative system and the computer environment. These data do not give the possibility to reach your identity based on their nature and for their treatment modes and are thus to be considered as anonymous.
As previously stated analytics cookies are considered technical is used only for optimization and if the IP of users are kept anonymous. We inform you that this website uses the free service of Google Analytics. We remind you that the data is used only to receive information on most visited pages, number of visitors, aggregated of visits per operative system and browser, etc. These parameters are archived in the servers of Google which regulates its Privacy.
We have turned Google Analytics anonymous which gives us the possibility to collect statistics without any profiling. From any parts of the website you may access the extended privacy policy.
A user may deactivate Google Analytics during the navigation by using the added button available for Chrome, Firefox, Internet Explorer, Opera and Safari, available on this link.
Remember you may choose your cookie preferences also through the browser.

If you use Internet Explorer
Click on the “Settings” taskbar in the menu and select the menu “Options”. Click on “Privacy” and deactivate the “Accept cookies” button and then click “OK”.

If you use Firefox as browser
Click on the “Settings” taskbar in the menu and select the menu “Options”. Click on “Privacy” and deactivate the “Accept cookies” button and then click “OK”.

If you are using the Safari browser
From the Safari Browser select the “Edit” menu and select “Preferences”. Click on “Privacy”. Always set the “cookies Block” setting “and click OK.

If you use Google Chrome as browser
Enter the Chrome menu o the browser’s taskbar. Select “Settings”. Click on “Show Advanced Settings”. In the “Privacy” section click on the button “Content Settings”. In the section “Cookies” select on “Do not allow this website to collect data” and control “Block third-party cookies” and then click “OK”.
If you use any other browser, search the browser Settings and the mode of cookie management.