Privacy Policy

Dear User, we inform you that the processing of your personal data will be carried out in compliance with current regulations and will be based on the principles of fairness, lawfulness, and transparency. Below, we provide information regarding the data processing carried out through the Website.

This privacy policy does not extend to services provided by other companies acting on their own behalf (such as Facebook, IG, Wiralex, or payment service providers, who are the sole entities storing banking data for purchases), even if you access the Website via your Meta account.

1. Data Controller

1.1 The "Data Controller" of personal data processing is FeelSrl, with its registered office at via Roggia Morlana 8, Dalmine.

2. Types of Processed Data

2.1 Common personal data, such as identifying information (name, surname, and tax code), contact details (email address, phone number, address), and financial data (credit/debit card number).
These data are voluntarily provided by you through the Website when you place an order for online product purchases, register on the Website, subscribe to the newsletter service, join the "Beauty Points" loyalty program, or submit a request via our contact form in the "Contacts" section, or by registering on the Website using your Meta profile.

2.2 Browsing data.

3. Purposes, Legal Basis, and Retention Period

3.1 Identifying, contact, and financial data are processed to manage your purchases through the Website.
• Legal basis: Performance of contractual obligations and/or pre-contractual measures requested by the Data Subject.
• Retention period: 10 years from contract execution.

3.2 Identifying and contact data are processed for Website registration.
• Legal basis: Performance of contractual obligations and/or pre-contractual measures requested by the Data Subject.
• Retention period: 24 months from data provision.

3.3 Identifying and contact data are processed to respond to user requests, such as product or service inquiries.
• Legal basis: Performance of contractual obligations and/or pre-contractual measures requested by the Data Subject.
• Retention period: As long as necessary to provide the requested feedback and any follow-up actions.

3.4 Identifying and contact data are processed, subject to the Data Subject's consent, for marketing activities (newsletters, promotions, discounts, commercial information, loyalty programs) via email.
• Legal basis: Consent of the Data Subject, given by ticking the consent box.
• Retention period: 24 months from consent unless revoked earlier. Revocation does not affect the lawfulness of processing prior to withdrawal.

4. Data Sharing and Storage Methods

4.1 The Data Controller may share personal data with:
• Authorized personnel of the Data Controller (data processors).
• External professionals/companies/social platforms/Alfa Parf Group companies, as either data processors or independent controllers.
• Competent public authorities.

4.2 User data may be transferred to entities, whether controllers or processors, located inside or outside the European Union. Data transfers to non-EU countries will comply with applicable regulations, ensuring an adequate level of protection.

4.3 Your data are collected and stored lawfully and fairly for the purposes stated above, in accordance with applicable legal principles. Processing may occur through manual, IT, or electronic tools, always under technical and organizational measures ensuring security and confidentiality, reducing the risks of accidental loss, unauthorized access, or unlawful processing.

5. Nature of Data Provision

5.1 Processing for contractual/pre-contractual purposes.

Providing personal data for purposes outlined in sections 3.1, 3.2, and 3.3 is necessary for purchasing products through the Website and for offering requested services. Failure to provide such data will prevent product purchases and requested service provision.

6. Data Subject’s Rights

6.1 The Data Subject may exercise the following rights at any time:
• Access personal data, obtaining details of processing purposes, data categories, recipients, retention periods, and the existence of automated decision-making.
• Rectify inaccurate personal data without delay.
• Request erasure of personal data, where applicable.
• Restrict processing or object to it, where permitted by law.
• Oppose automated decision-making, including profiling, under legal conditions.
• Request data portability, receiving personal data in a structured, commonly used format and transmitting them to another controller, where applicable.
• File a complaint with the Data Protection Authority.

To exercise these rights, contact the Data Controller via email at info@feelyourlook.com.