Privacy Policy

Information on data processing pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 GDPR

This information is intended to describe the processing of personal data collected through this site (hereinafter “Site”) owned by Eclair Srls (hereinafter “Eclair Srls”).

This information is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation) (hereinafter "GDPR") to users who interact with the Site's web services (hereinafter "Data Subjects"); browsing the Site is free and does not require registration, with the exception of certain areas where users may freely and expressly provide personal data to access specifically identified services.

Therefore, where the visitor intends to provide their personal data to access these additional services, a specific privacy policy is provided, drafted to define the purposes and methods of data processing for each service by Eclair Srls. With reference to the processing described therein, the interested party may freely express their consent to the processing.

We wish to inform you that the GDPR provides for the protection of natural persons and other subjects with respect to the processing of personal data.

According to the law, the processing of personal data must be based on the principles of lawfulness, fairness, and transparency pursuant to Article 5 of the GDPR.

Pursuant to Articles 13 and 14 of the GDPR, we therefore provide you with the following information:

1. Data controller

The data controller is Eclair Srls with registered office in Rome (RM), Via Mario Musco 42, ZIP Code 00142 (hereinafter “Controller”).

2. Data provision

Personal data will be acquired directly from the interested party, through:

– direct provision of the same (see the following section “Data provided voluntarily by the user”);

– automatic acquisition (see the following sections “Browsing data” and “Cookies” or similar technologies).

If you are under 16 (sixteen) years of age, you may not provide us with any personal data or register on the Site. In any case, we assume no responsibility for any false statements you provide. If we discover any false statements, we will immediately delete any personal data we have acquired.

3. Types of data

The following categories of data may be processed (collectively, the “Data”):

i) Browsing data: the computer systems and software procedures used to operate the Site acquire, during their normal operation, certain personal data (such as IP addresses or domain names of the computers used by users, the pages visited, and the date/time of the visit), the transmission of which is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature, it could, through processing and association with data held by third parties, allow users to be identified.

This data is used solely to obtain anonymous statistical information on the use of the Site and to monitor its proper functioning. The data may be used to ascertain liability in the event of hypothetical cybercrimes detrimental to the Site.

ii) Cookies: to make navigation on this Site more efficient and immediate, when users access this Website, cookies are used: small text strings that allow you to maintain the connection to the Site.

Please refer to the cookie policy on the Eclair Srls website.

iii) data provided voluntarily by the user: this is personal data freely provided by the user to access certain freely chosen services. Failure to provide this data may make it impossible to obtain the requested service. Specific information and consent requests are provided on the Site pages dedicated to the services on request.

4. Purpose of the processing

Except for specific rules and information for individual initiatives that require the provision of specific personal data, published from time to time on the Site, the Data is processed for the following purposes:

– manage registrations on the Eclair Srls website and manage activities directly related to registration;

– manage orders, provide products and services, process and manage payments, communicate with the interested party regarding orders, shipments, services and promotional offers.

– prevent or detect fraud and abuse of our Site to enable third parties to carry out technical, logistical and other activities on our behalf,

– send administrative information, marketing communications, advertising and promotional initiatives (in paper format, text message, email, etc.), promotional offers, periodic customer satisfaction surveys, market research, or quality surveys, from the same, from related, controlled, affiliated companies, or from third parties appointed by Eclair Srls;

– analyze your habits or consumer choices in order to offer you an increasingly personalized service in line with your interests and to improve our commercial offering.

5. Communication and dissemination of data

The Data collected as part of the provision of the service may be communicated to:

– companies that perform functions strictly connected and instrumental to the operation – including technical – of Eclair Srls' services, such as suppliers who provide services aimed at reviewing and verifying advertisements, providers of direct marketing and customer care services, companies that provide archiving, administrative, payment and invoicing services, companies that provide technical components for the provision of certain service features;

– freight transport companies, couriers, shipping companies and similar companies in the freight transport sector;

– credit institutions, to arrange payments or credits;

– administrative and judicial bodies and authorities pursuant to legal obligations;

The Data may be communicated to other companies belonging to the Eclair Srls group or in any case connected to them, as well as to other third parties that Eclair Srls uses to optimize the services offered through the Site.

Under no circumstances do we sell or rent personal data to third parties.

Pursuant to Article 37 of the GDPR, the Data Controller appoints a Data Protection Officer (hereinafter "DPO") to oversee the protection of personal data. DPO can be contacted at info@skintech.it.

If the Data Controller entrusts processing operations to third parties, they will be appointed as data processors pursuant to Article 28 of the GDPR, subject to verification of their compliance with the provisions on personal data protection. The Data Controller will only use data processors who provide sufficient guarantees to implement appropriate technical and organizational measures, such that the processing meets the requirements of the GDPR and guarantees the protection of the data subject's rights.

6. Mandatory or optional nature of providing data

Providing personal data is mandatory only for the processing necessary to provide the services offered by Eclair Srls (any refusal to provide such data for the purposes of providing the service will make it impossible to use the service); however, it is optional for promotional and profiling purposes, and any refusal to provide consent will not have negative consequences on the provision of the service offered on the Site.

7. Methods and duration of the Treatment

Processing is carried out using automated tools for the time strictly necessary to achieve the purposes for which they were collected, as well as for any additional period necessary to fulfill specific legal obligations.

Except in the event of liability being ascertained in the event of hypothetical computer crimes against the Site, data relating to navigation on the Site will not be retained for more than 30 (thirty) days.

The Data may be processed both electronically and on paper.

For analysis purposes aimed at developing and improving the service, the user's personal data will be retained for 36 (thirty-six) months.

Data relating to telematic traffic, excluding the content of communications, will be retained for a period not exceeding 6 years from the date of communication, pursuant to Article 24 of Law No. 167/2017, which transposed EU Directive 2017/541 on counter-terrorism.

Per finalità di marketing diretto e profilazione conserviamo i tuoi dati per un periodo massimo pari a quello previsto dalla normativa applicabile (rispettivamente pari a 24 (ventiquattro) e 12 (dodici) mesi).

Invoices, accounting documents and transaction data are retained for 11 (eleven) years in accordance with the law (including tax obligations).

Eclair Srls guarantees the lawful and correct processing of the Personal Data provided through the Site, in full compliance with current legislation, as well as the maximum confidentiality of the data provided during registration.

All data is collected in accordance with the applicable legislation, with particular regard to the security measures set forth in Article 32 of the GDPR for processing using computerized, manual, and automated tools and using methods strictly related to the purposes indicated in Article 4, and in any case in a manner that guarantees the security and confidentiality of the data.

8. Transfer of Data Abroad

This Site may share some of the data collected with services located outside the European Union, particularly with Google, Facebook, and Instagram, via social plugins and the Google Analytics service. This transfer is authorized under specific decisions of the European Union and the Italian Data Protection Authority, specifically Decision 1250/2016 (Privacy Shield), for which no further consent is required. The companies mentioned above guarantee their adherence to the Privacy Shield.

9. Rights of the interested parties

The interested party has the right to request from the Data Controller at any time access to the Data and its rectification or erasure, or to limit or object to its processing. In any case, the interested party may exercise against the Data Controller all the rights set forth in Articles 15 et seq. of the GDPR applicable to him or her.

The interested party also has the right to lodge a complaint with the Italian Data Protection Authority or any other competent supervisory authority.

Any request relating to the Data processed by the Data Controller may be sent by email to the following address: info@skintech.it.

10. Review clause

This policy may be subject to change. If the Data Controller makes substantial changes to how it uses your data, it will notify you by prominently posting them on its pages or through alternative or similar means.