Dear user, we would like to inform you that the “European Regulation 2016/679 concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data” (hereafter “GDPR”) provides for the protection of individuals and other subjects regarding the processing of personal data. Cosmstet.org, as the “Data Controller” of the processing, pursuant to Article 13 of the GDPR, therefore, provides you with the following information:
DATA CATEGORIES: Cosmest.org will deal with personal and / or sensitive and health related data that will be included in the web site forms.
SOURCE OF PERSONAL DATA: The personal data that Cosmest.org will be in possession are collected directly by the interested party when completing the form on the relative page.
DATA CONTROLLER: The data controller is Cosmest.org, which can be contacted by phone at the email address firstname.lastname@example.org.
PURPOSE OF DATA PROCESSING AND LEGAL BASIS: The processing of your data, collected and stored in relation to the completion of this form, has as its legal basis its consent and is made for the following purposes: respond to requests for information sent via the form , provide assistance and support services, proceed with subscription to the newsletter, send training, informational and commercial communications, manage commercial profiling activities.
RECIPIENTS OF DATA: Within the limits relevant to the processing purposes indicated, your data may be communicated to partners, consulting companies, private companies, appointed by the Data Controller. Your data will not be disseminated in any way. The Data Processors and Data Processors are promptly identified in the Privacy Document, which is updated on a regular basis.
TRANSFER OF DATA ABROAD: the data collected will not be transferred abroad.
PERIOD OF CONSERVATION: The data collected will be kept for a period of time not exceeding the achievement of the purposes for which they are processed (“conservation limitation principle”, art.5, GDPR) or according to the deadlines set by law . The verification of the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically.
RIGHTS OF THE INTERESTED PARTY: The data subject is always entitled to request the Data Controller to access your data, correct or cancel it, limit the processing or the possibility of objecting to the processing, requesting data portability, revoke the consent to the processing by relying on these and other rights provided by the GDPR through a simple communication to the Data Controller. The data subject can also lodge a complaint with a supervisory authority.
OBLIGATORY OR LESS DATA: We inform you that the provision of data is for some optional fields and for others (indicated by an asterisk) mandatory and failure to provide the mandatory data involves NOT sending the form.
OBLIGATORY OF CONSENT: The provision of consent to data processing through a special check is optional, but essential to proceed with the submission of the form.
DATA PROCESSING METHOD: The personal data you have provided will form the object of processing operations in compliance with the aforementioned regulations and the confidentiality obligations that inspire the activity of the Data Controller. The data will be processed both with computer tools and on paper and on any other type of appropriate support, in compliance with appropriate technical and organizational security measures provided for by the GDPR.