Privacy Policy

DATA PROTECTION POLICY

pursuant to Article 13 of the European Regulation 2016/679 'GDPR'.

 

This policy describes the personal data we collect when you use this Website (https://world.comfortzoneskin.com/) and lists the purposes for which the data is used and your rights as a data subject. It does not refer to other processing operations carried out or described as a result of browsing websites that can be reached through links that may be present on this Website.

 

Click on each paragraph in this policy to find out all the details concerning your personal data.

WHO IS THE DATACONTROLLER?

With reference to the personal data collected through this Website, the Data Controller is Davines S.p.A., in the person of its legal representative, with registered office in Via Don Angelo Calzolari 55/A - Roncopascolo, 43126 - Parma - PR (hereinafter, also 'Davines' or 'Data Controller').
You can contact the Data controller by calling 0521-965611 and/or writing to the e-mail address: gdpr@davines.it.

HAS A DATA PROTECTIONOFFICER (DPO) BEEN APPOINTED?

The Data Controller has appointed a Data Protection Officer whom you may contact by e-mail at privacydpo@davines.it whenever you think and/or suspect that data processing is not carried out in compliance with the relevant regulations or violates your rights and/or freedoms.

WHAT DATA DO WE PROCESS AND FOR WHAT REASONS?

WEBSITE NAVIGATION

Type of data processed: the IP addresses or domain names of the computers used to connect to the Website, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.


Purpose and legal basis:data are automatically acquired by technical and necessary cookies installed to enable web browsing; to carry out aggregate statistical analyses aimed at measuring the proper functioning of the Website and, in the event of computer crimes to the detriment of the Website, to ascertain possible liability.
The legal basis legitimising the processing of this data is the legitimate interest of the Data Controller in ensuring the proper functioning of the Website and the services available, as well as in the investigation of possible offences.


Data retention time:data are normally retained for short periods of time, as further detailed in the Cookie Policy, with the exception of possible extensions related to survey activities.
In addition to the cookies necessary for navigation, we may install other types of cookies that will allow us to capture additional data relating to your location and your browsing experience in general. Where necessary, we will only process your data with your prior consent via the cookie panel. For more details, please read our Cookie Policy.

CUSTOMER CARE

Type of data processed: we may collect some of your data through the form in the "Contact Us" section of the Website (first name, last name, e-mail, country of origin, order number and/or any other data specifically indicated in the form) and/or through any contact data indicated on our Website.
The data required as compulsory for sending the form are indicated with an asterisk (*), the others are optional and do not preclude the possibility of sending the contact request. Any other information that you voluntarily enter in the message text may also be processed, so please only provide us with the information that you consider necessary.


Purpose and legal basis:
personal data are acquired to enable us to collect and manage your requests relating both to an order and/or to products purchased and/or to be purchased (information relating to the status of purchases made, their delivery, any returns/refunds, defects in products received, etc.), and to more general requests for information (relating, for example, to opening hours, salons in your area, initiatives and events, product characteristics, etc.), and, therefore, to offer the best pre- and post-sales support to our customers.
The processing of your data, which is carried out on the basis of your request, is therefore necessary to execute the contract of sale and/or purchase of a service or pre-contractual measures taken as a result of your request.


Data retention time:
the data collected are usually kept for short periods of time and, in any case, for as long as is strictly necessary to process requests and provide the requested services.

ASSISTANCE FORM FOR PROFESSIONALS

Type of data: through the various contact forms on the Website and dedicated to you as a professional, we may acquire the data indicated in the reference form, including the following data:
- Request reserved for professionals (stylists, salon owners, educators, distributors) (form"I'm a professional"): name, surname, role, e-mail, telephone number, company, address, state/region, city and postcode, message;
- Request to become part of the Davines Comfortzone partner network (form"Become a Partner"): name, surname, e-mail, mobile and landline phone, company name, location, address, country, city and postcode, additional information about your company and the Davines world (e.g. website, number of employees, business objectives, etc.).
The data requested as compulsory are indicated with an asterisk (*), the others are optional and do not preclude the possibility of sending the contact request. Any other information you voluntarily enter in the message text may also be processed, so please only provide us with the information you consider necessary.


Purpose and legal basis:personal data are collected to enable us to collect and process your requests and, therefore, to execute pre-contractual and contractual measures taken as a result of your request.
With reference to the second type of form, please note that the relevant data will specifically be used to contact the partner's contact person, initiate the commercial phase and establish whether the partner can be considered suitable to join the Davines network.


Data retention time:
data collected through contact formsare usually retained for short periods of time and, in any case, for as long as is strictly necessary to process requests and provide the requested services.
With reference to the second form, Davines has an interest in keeping all the history of requests and evaluations made with reference to each partner; for this reason, data relating to salons that will not become part of the Davines network will also be kept.

SENDING OF COMMERCIALCOMMUNICATIONS - MARKETING

Type of data processed:identification and contact data (name, surname, e-mail address, telephone number), purchase data.


Purpose and legal basis:
to send commercial communications - via the newsletter service and/or promotional text messages - regarding products/services, discounts, offers, promotions and/or events relating to the brands of the Davines S.p.A. Group (Davines and Comfort Zone) and via any other channel that Davines usually adopts and/or will adopt as part of its marketing campaigns; to carry out market research and activities to survey your degree of satisfaction regarding products relating to the brands of the Davines S.p.A. Group (Davines and Comfort Zone). In order to process this data we require your consent, which you may revoke at any time by clicking on the unsubscribe link in any communication you receive or, alternatively, by accessing your private area or by writing to the email address gdpr@davines.it. We can also carry out marketing campaigns, remarketing/retargeting through social channels and third-party platforms. This depends on your consent given with regard to Cookies and other tracking tools. For more details, please read the following paragraph and our Cookie Policy.
As part of the social campaigns, by filling in the subscription formsfor our newsletter service, you will also be able to obtain free content, such as free samples of our Davines and Comfort Zone products. For further information, please refer to the privacy policy at the bottom of the forms.


Data retention period:
We will use your identification and contact information to reach you with our promotional communications for twenty-four (24) months from the last interaction.
Purchase data will be used for marketing purposes for a period of twenty-four (24) months after collection.

REMARKETING/ RETARGETING

Our Website uses Remarketing technologies to communicate, optimise and process advertisements based on users' browsing. In particular, the information collected (IP address and e-mail address) is transferred to the following partners, to which the Remarketing activity is linked, to categorise users of the Website by dividing them into user groups. Based on the different user groups, personalised advertising on DAVINES products and services is proposed to users on other sites/applications. The processing is done on the basis of your consent given in the cookie panel, which can be revoked at any time. You may also choose not to participate in certain advertising features through the corresponding device configuration options.
- Google Customer Match: The Customer Match function allows you to show advertisements to the user, even after visiting this Website and after authenticating to your Google profile to access the services offered. Your information shared with Google will be saved within the Google Ads service and used solely for the provision of the service in question to DAVINES.
This mechanism only works if you decide to activate the relevant cookies by issuing the appropriate consent via the cookie panel.
- Facebook Pixel: The Facebook pixel is active on our Website. This is a piece of software that is embedded in the pages of our Website in order to track the passage of users, create a link between the user's visit to the Website and Facebook, and collect useful data to optimise our marketing strategies and improve the performance of campaigns on Facebook. When the pixel is loading, Facebook installs a cookie on the user's computer that helps Facebook to offer more personalised advertising, but also to measure and improve advertising. When the cookie is installed, Facebook is able to track your browsing behaviour across other websites that have applied a Facebook pixel or social plug-in. This mechanism only works if you decide to activate the cookies by giving your consent.
For more information, please refer to the sections in the following link.
- TikTok Pixel: the TikTok Pixel is a code snippet that we can add to the website to share website events with TikTok. With the TikTok for Business tools, the pixel can help us monitor traffic on our Website, measure and optimise the performance of advertising campaigns and find new customers. For more information, please refer to the sections in the following link.
- Pixel from Tradedoubler: On our website, we use the Tradedoubler pixel, a piece of software integrated into the pages of our website to track user activity. This pixel allows us to establish a link between the user's visit to our website and the Tradedoubler network, enabling the collection of useful data to optimise our affiliate marketing strategies and improve the performance of advertising campaigns. During the loading of the pixel, Tradedoubler installs a cookie on the user's device, which helps to provide more personalised advertisements and to measure and improve the effectiveness of the advertising. For more information, please refer to the sections in the following link.
For further details, please refer to the Cookie Policy.

PROFILING

Type of data processed:data relating to your purchases -- also relating to the other brands of the Davines S.p.A. Group (Davines and Comfort Zone) -- your country of origin, your gender and age, your expressed preferences (e.g. skin/hair type, preferred salon, etc.), your interaction with us through our websites, our social channels (e.g. Facebook, Tik Tok, etc.) and through our Hairquiz/Skinquiz. Finally, we may enrich your profile with statistical information that we may lawfully acquire from other sources: for example, in relation to your area of residence (such as demographic information, geo-referencing data, etc.) or the electronic tools you use to interact with us.


Purpose and legal basis:
we analyze your purchasing habits and/or preferences, browsing or other identifying data produced by the devices, applications, tools and protocols used in order to create your profile, place it in groups of homogeneous profiles, carry out statistical and market analyses aimed at identifying products and/or services of interest to you improve our products and/or services in line with our customers' preferences, as well as send you personalized commercial communications based on your profile, your purchasing habits over the last twelve (12) months, and your browsing experience on our Website and, in general, offer you marketing and remarketing services thanks also to the information collected through cookies or other identifiers. Personal data is processed by automated tools, including those owned by third parties. In order to process this data, we require your consent, which you may revoke at any time by accessing your reserved area or by writing to gdpr@davines.it. In addition, we remind you that you can manage your browsing preferences by accessing the relevant section through the Cookie panel, which can be found in the footer of the Website.


Data retention time: Data relating to your interactions will be retained for profiling purposes for a period of twelve (12) months from the time of collection, unless you withdraw your consent.

SELECTION AND SEARCH FOR CANDIDATES TO JOIN OUR TEAM

Type of data processed: personal data communicated by voluntarily sending a CV to the e-mail addresses indicated and/or acquired via the 'Carreers' section of the site in response to vacancy notices are collected.
We may also collect data relating to your state of health (e.g. in the case of the selection of a resource belonging to protected categories) or revealing your racial or ethnic origin (so-called 'special data'). Since this data is highly confidential, we ask you to communicate to us only the information strictly necessary for the purposes of your application.


Purpose and legal basis:
data are used for the sole purpose of enabling personnel search and selection activities. The processing of this data is necessary in order to implement pre-contractual measures. We are also authorised to process 'special data' that you wish to transmit to us, without the need for a declaration of consent from you. For any further details, we invite you to consult the privacy policy dedicated to applications, in the appropriate section.


Data retention period:
data will be retained for eighteen (18) months after it is provided.
Please note that the section dedicated to applications can be found on our corporate website under the link Careers | Davines Group where you can consult the full information for candidates.

HOW DO WE PROCESSYOUR DATA?

In relation to the aforementioned purposes, personal data shall be processed by formally authorised and specifically trained Davines' internal resources, using manual and paper-based instruments, as well as computerised and telematic instruments, with logics strictly related to the purposes themselves and, in any case, adopting technical and organisational measures such as to guarantee a level of security adequate to prevent the risk of destruction, loss, modification and unauthorised disclosure of data or access, accidental or unlawful, to the same.

TO WHOM DO WECOMMUNICATE YOUR DATA?

In order to achieve the above-mentioned purposes, we may need to communicate your data to these categories of persons, outside our authorised in-house personnel:
- Davines S.p.A. Group Branches: in order to enable you to use our services at all Group branches;
- Davines' suppliers (e.g. suppliers of IT services and platforms, consultants, etc.) who collaborate with us for consultancy, assistance, maintenance services and who may use your data as "Data Processors" appointed under specific contracts. In particular, as far as marketing and remarketing purposes are concerned, we may use the collaboration of specialised external parties, such as advertising platforms, to optimise and personalise our promotional campaigns. In this case, we may disclose your information to such third parties, who will act as joint controllers or data processors under specific contractual arrangements. These platforms may include various social media services used to implement remarketing strategies. Such use may involve the sharing of data in order to optimise and personalise our promotional campaigns on various networks. If you would like to know any further details about our relationship with these parties and/or to receive a list of our data processors, please send a written request to the contact details indicated in this policy;
- The data may be made available to parties who are entitled to access them by virtue of provisions of the law, regulations or European legislation, within the limits and for the purposes provided for by those provisions (debt collection companies, insurance agencies, public authorities).
In no other way will the data be disseminated.

DO WE TRANSFER YOURDATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION?

We make every effort to protect your data and do not regularly transfer data outside the European Union. However, should it become necessary to transfer personal data to non-EU countries, in order to process your online purchase or to guarantee the services offered, this will be done in accordance with Articles 44 et seq. of the GDPR, by setting up appropriate means to ensure adequate data protection guarantees.

SOCIAL NETWORK

On our Website there are social buttons/widgets, i.e. those particular 'buttons' depicting the icons of social networks (e.g. Facebook, Pinterest and Twitter). These 'buttons' allow users who are browsing our Website to be directed directly to the social network by simply clicking the desired 'button'. If the user then logs in to the selected social network, the latter will acquire the data relating to the user's visit to our Website.

WHAT RIGHTS CAN YOUEXERCISE AS A DATA SUBJECT?

You can exercise your rights under the GDPR regarding your personal data by writing to gdpr@davines.it. We will endeavour to respond to your request as soon as possible and in any event no later than thirty days from receipt of your report. In certain cases, we will ask you for a copy of an identification document if, in connection with your request, it is necessary to verify your identity. In particular, you may exercise the following rights, where applicable:
- Right of access, i.e. the right to know whether personal data concerning you is being processed and, if confirmed, to obtain a copy of such data and to be informed about: the source of the data, the categories of personal data processed, the recipients of the data, the purposes of the processing, the existence of automated decision making (including profiling), the data retention period, the rights under the GDPR;
- Right to have your data corrected or supplemented;
- Right to obtain the deletion ofpersonal data if such data are no longer necessary for the purposes for which they were collected, or if we are no longer authorised to process them;
- Right to obtain the restriction of the processing of personal data in the following cases: i) you have contested the accuracy of the personal data. You may request a restriction of the processing for the period necessary to verify the accuracy of the data; ii) we are no longer authorised to process the data, and instead of deleting it, you may ask us to restrict its use; iii) if the personal data in our possession, although no longer necessary for the purposes for which it was collected, is necessary for you to establish, exercise or defend a right in court;
- Right to data portability, i.e. the right to receive personal data concerning you in a structured, commonly used and machine-readable format, as well as the right to request that such data be transmitted to another data controller;
- Right to withdraw consent, for processing based on it;
- Right to object at any time to the processing of your personal data based on our legitimate interest.
You also have the right to write to the appointed DPO and/or lodge a complaint with the Data Protection Authority if you consider that the processing of your data contravenes the provisions of the GDPR.

DO WE USE COOKIES?

We use cookies in some areas of the Website. We ask you to read the Cookie Policy, which should be consulted in conjunction with this notice.

Subscribe to our newsletter