INFORMATION ON THE PROCESSING OF
PERSONAL DATA.

In accordance with the provisions of EU Regulation 2016/679 (GDPR), we provide the person to whom the processed data refers (hereinafter also referred to as the “Interested Party”) with the following information on data processing.

1. DATA CONTROLLER
MEDITERRRANEA COSMETICS SRL SB
Registered Office: Via Giacinto M. Serrati 36 – 18100 Imperia
Headquarters: Via de Sonnaz 27 - 18100 Imperia
Tax code and VAT number: 01784730085
Telephone: 0039 0183/195.195.0
Contact details: dpo@mediterranea.it

2. PURPOSE OF THE PROCESSING AND LEGAL BASIS OF THE PROCESSING
The data provided may be used for these purposes:
a: carrying out the activities requested to respond to the requests of interested parties, to execute contractual and pre-contractual obligations and legal obligations and to allow registration and participation in the activities promoted by the Data Controller.
The legal basis that legitimises this processing is the need to manage the requests of the interested party and the participation of the interested party in activities carried out by the Data Controller and the need to execute the requests of the interested party.
b: Use of data for promotional purposes by sending commercial communications from third parties or conducting market research. For this purpose, it may be necessary to use the data of the interested parties for normalization, deduplication, filtering and verification operations. The communications will be sent by the OWNER.
The promotional actions carried out by the OWNER may be carried out through the following channels:
● e-mail,
● post,
● telephone calls to landlines or mobile phones,
● sending WhatsApp messages, SMS and/or MMS,
● instant messaging platform services, chat,
● any other type of similar communication.
The legal basis that legitimises this processing is the specific consent expressed by the person to whom the data refers.
c: Carry out analysis activities on the characteristics, behaviours and interests of the people to whom the data refers as part of the personnel selection activity
The legal basis that legitimises this processing is the consent expressed by the person to whom the data refers.

3. PERSONAL DATA STORAGE PERIODS
With reference to the data collected by the owner for requests from the interested party, execution of contractual, pre-contractual or legal obligations: The Owner will keep the database for the time necessary to manage the activities related to data processing and for the ten years following the conclusion of the contract.
With reference to information activities: the data of the interested parties will be stored for the time necessary for the execution of the activity, avoiding in any case indefinite storage and favoring the exercise of their rights by the interested party.
For data processed with the consent of the interested parties for marketing and analysis purposes, the data is stored for the duration of our commercial relationship. Once our commercial relationship has ended, the data will be stored and processed for five years from the date of the last contact.

4. RECIPIENTS TO WHOM PERSONAL DATA WILL BE COMMUNICATED
The data collected for requests of the interested party with respect to requests organized by the Owner may be communicated to subjects authorized to process and responsible suppliers necessary for the processing of personal data.
Data collected for the implementation of information actions by the Owner, data communications to third-party recipients are not foreseen, but the data may be processed by managers, operating in the territory of the European Union, responsible for processing with a specific legal act. Transfers outside the European Union are not foreseen.

5. RIGHTS IN RELATION TO PERSONAL DATA
The person to whom the data refers has the right to:
· Access your data.
· Request rectification
· Request cancellation
· Object to processing.
· Request the limitation of processing.
· Request data portability.
With reference to the treatments whose purposes require consent, the person to whom the data refers has the right to revoke such consent at any time.
The interested party may exercise his/her rights directly and free of charge by contacting the following email address dpo@mediterranea.it and indicating in the subject “EXERCISE OF THE RIGHT IN MATTER OF PERSONAL DATA” specifying which right he/she intends to exercise. The Data Protection Officer designated by the Owner can be contacted at the same address.
Your request must indicate dates, name, surname, request, address for notification purposes. To avoid any misunderstanding about the identity of the natural person requesting the exercise of their rights, the Owner reserves the right to request a copy of the identity document to confirm the identity of the applicant in cases where this is necessary.
The interested party has the right to lodge a complaint with the Guarantor for the protection of personal data at www.garanteprivacy.it