About Giufra S.r.l.

The website of Giufra S.r.l., as well as the e-commerce portal integrated therein (hereinafter collectively, "Website") are operated by Giufra S.r.l., with registered office in Via Veneto 152 - 06059, Zona Industriale Ponte Rio (PG), Italy, +39 075 898 76 91, E-mail: marketing@astramakeup.com, C.F. and P.I. no. IT 01837230547 (hereinafter, "Giufra" or "we").

Giufra is the exclusive owner of the Astra Make-Up trademark and all "ASTRA" products contained on the Web Site.

Privacy Policy

We attach great importance to the protection of the user's personal data, which take on a high value, and as for the collection, processing and use, we strictly comply with the legal provisions of the European General Data Protection Regulation, EU Reg. 2016/679 (GDPR) and Legislative Decree No. 196/2003 (Privacy Law). The purpose of this Privacy Policy is to explain the methods adopted by Giufra S.r.l. to collect, process, and protect personal data provided by users via Giufra's websites and mobile applications, via email, and through service providers and distribution partners.

This Privacy Policy does not cover, and Giufra disclaims any responsibility for:

the privacy, information or other data processing practices of third parties, including distribution partners, suppliers and third parties;

any third party operating sites whose links are on the Giufra Websites.

Collection of personal data

In the course of its business, Giufra collects and processes personal data in a variety of ways. Data may be collected because it is provided directly by the user or by recording how the user interacts with the services, such as through the use of cookies on the site. Giufra may also receive personal data from third parties.

Personal data collected about the user may include, but is not limited to: name, e-mail address, mailing address, phone number, billing information, survey responses, booking information, and other information the user provides on the site, IP address, and web browser software.

Users can choose not to provide their personal data to Giufra. However, as a rule, some personal data is necessary to receive relevant offers from Giufra and its partners and to take advantage of the benefits reserved for registered users in execution of the purchase and sale agreement through the e-commerce channels on the Website (hereinafter, "Terms and Conditions").

This Privacy Policy does not cover, and Giufra disclaims any responsibility for:

the privacy, information or other data processing practices of third parties, including distribution partners, suppliers and third parties;

any third party operating sites whose links are on the Giufra Websites.

Collection of personal data

In the course of its business, Giufra collects and processes personal data in a variety of ways. Data may be collected because it is provided directly by the user or by recording how the user interacts with the services, such as through the use of cookies on the site. Giufra may also receive personal data from third parties.

Personal data collected about the user may include, but is not limited to: name, e-mail address, mailing address, phone number, billing information, survey responses, booking information, and other information the user provides on the site, IP address, and web browser software.

Users can choose not to provide their personal data to Giufra. However, as a rule, some personal data is necessary to receive relevant offers from Giufra and its partners and to take advantage of the benefits reserved for registered users in execution of the purchase and sale agreement through the e-commerce channels on the Website (hereinafter, "Terms and Conditions").

The processing of the user's personal data is carried out on the basis of the following regulations and procedure contained therein:

(a) Contractual relationship pursuant to Article 6 paragraph 1 letter b GDPR.

We process personal data that has been transmitted to us voluntarily and in execution of the Terms and Conditions, pursuant to Art. 6 para. 1 lett. b GDPR, for the contractual processing of orders.

For this purpose we need the user's first name, last name, e-mail address and telephone number. For the necessary execution of the payment we possibly also need the following data:

for payment of a service by PayPal, we need full name, e-mail address, and data of the user's credit card connected to the online PayPal account.

for payment by bank transfer, full name and data required by the bank for crediting the transfer are needed.

When making the payment, one's data are possibly transmitted to the following payment service providers. The credit card number or other bank data is not saved on the Website, but directly transmitted to the payment service providers:

Bank transfer payment methods are handled by the user's bank.

The PayPal payment method is operated by PayPal (Europe) S.à r.l. & Cie, S.C.A., 5. Etage, 22-24 Boulevard Royal, L-2449 Luxembourg. More information on PayPal's data protection can be found in PayPal's Privacy Policy.

(b) Legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR

Pursuant to a legitimate interest under Art. 6 para. 1 lit. f and, where applicable, lit. b GDPR, we process data necessary for the following purposes:

Data retained to execute the Terms and Conditions and place product orders are transmitted only to the extent necessary for Giufra to execute the order requested by the user to third parties in charge of order delivery (e.g., BRT and GLS) at the same time as registration and completion of the product sale. The transmitted data cannot be used by our service providers for any other purpose than the execution of their task.

In addition to the performance of the main services of the Terms and Conditions, Giufra also uses your data for advertising purposes as well as market studies and opinion polls, to communicate to you via mail or newsletters offers and news tailored to your interests. For this purpose, by virtue of a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR, we perform a scoring evaluation of the interest-based advertising strategy. You can object at any time to the use of your data for advertising purposes, market studies and opinion polls as well as to the scoring evaluation of advertising by sending a communication to Giufra S.r.l., headquartered at Veneto 152 - 06059, Zona Industriale Ponte Rio (PG), Italy or to the e-mail address marketing@astramakeup.com.

Processing of personal data

A personal customer account can be created with us. In the password-protected customer account area you will be able to conveniently manage your orders and save your data for future orders.

Fields marked (*) as mandatory containing personal data will be used for the creation and processing of the user account. Initially, only the e-mail address is required, with which we verify the user's identity. During registration, you may also voluntarily enter your name, address or other optional information.

In addition, here the user can also voluntarily save his or her phone number so that he or she can be contacted in case of delays or changes in the delivery of products ordered by the user.

You can update or delete at any time, from your personal customer account, your customer account, and thus also your saved personal data.

Such deletion does not affect personal data necessary for the fulfillment of the contract within the meaning of legally prescribed retention periods.

Marketing

The personal data collected when subscribing to the newsletter, with one's consent pursuant to Art. 6 para. 1 lett. a GDPR, is used for communications with the user (e.g. service communications, system messages, e-mails for confirmation of one's registration, transmission of user account information as well as for sending newsletters).

Users will only receive marketing messages from Giufra if they have provided consent, requested them, or purchased goods or services from Giufra and opted out of receiving marketing messages.

At such time as they are no longer interested in receiving email marketing communications from Giufra, users have several options for revoking consent to receive future emails, they may unsubscribe at any time by following the instructions and clicking on the link included in each marketing message sent by Giufra.

If consent to receive marketing communications is revoked, Giufra will still continue to send emails regarding purchases and reservations, containing service and administrative information such as changing terms, conditions, and policies.

Cookies

Giufra collects personal data using cookies and similar technologies. "Cookies" are small pieces of information stored by your Web browser on your computer's hard drive for data logging purposes.

For more information about cookies in general, how to view cookies installed on your (mobile) device and how to manage and delete them, please refer to www.allaboutcookies.org and http://www.youronlinechoices.com/it/. 

Notwithstanding the provisions of this Policy, you may object to the recording of cookies on your hard disk by configuring your web browser to disable cookies. Below are the ways offered by the main browsers: 

Explorer: https://support.microsoft.com/it-it/help/17442/windows-internet-explorer-delete-manage-cookies 

Chrome: https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDesktop&hl=it 

FireFox: https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%20cookie 

Safari: https://support.apple.com/kb/ph21411?locale=it_IT 

Opera: http://help.opera.com/Windows/10.00/it/cookies.html 

After this operation, however, some functions of the web pages may not run properly.

User Rights.

You have the right to check, supplement and update the data you provide to Giufra or choose to close your account at any time, in either case you may write to marketing@astramakeup.com. If you decide to close your account, Giufra will deactivate and delete your profile information and reviews. Giufra will send an e-mail confirming the request. Once the account is closed, you will no longer be able to access your personal information. You can, however, open a new account at any time.

You can change your marketing preferences at any time.

In accordance with applicable laws, you have the right to access, rectify, delete, and restrict the processing of your data, as well as the right to data portability and the right to object. Further details and information on how and when you can exercise your rights are available below. If these rights exist, requests will be answered within one month.

In accordance with current law, you may have the following rights regarding your personal data:

Right to request access to your personal data.

Right to request correction of your data if it is incorrect.

Right to request deletion of your personal data if:

it is no longer necessary for the purposes for which it was collected or processed;

the user withdraws consent, where the processing of personal data is subject to consent and there is no further legal basis;

the user objects to the processing of his or her personal data and Giufra has no overriding legitimate grounds for continuing the processing;

personal data has been processed unlawfully;

personal data must be deleted for the purpose of compliance with legal obligations.

Right to object to the processing of one's personal data. Giufra is committed to acting in the best interests of users, unless there is an overriding legitimate interest in the processing of the data or a need to continue the processing in order to establish, exercise or defend a legal claim.

Right to restrict the processing of one's personal data if:

the accuracy of the data is disputed by the user, during the period in which Giufra is required to verify its accuracy;

the processing is illegal and the user objects to the deletion of his/her personal data by requesting restriction;

Giufra no longer needs the user's personal data for processing purposes, but it is needed by the user for legal claims;

the user has objected to the processing, for the period when Giufra is required to verify the presence of overlying legitimate bases.

Right to data portability. Users may request to receive personal data concerning them. This right can only be exercised if it relates to personal data provided to Giufra, if the processing is subject to consent or necessary for the performance of a contract between the user and Giufra, and if the processing is carried out through automated means.

You can exercise your rights by sending an e-mail request to marketing@astramakeup.com.

Protection of Personal Data

Giufra stores users' personal data in secure operating environments, not accessible to the general public, and implements security measures at its physical facilities to protect personal data from loss, misuse, or alteration by its employees.

However, there is no absolute guarantee of security for Internet transmissions or storage environment environments, so Giufra makes no absolute guarantee that personal data provided by users will be secure at all times. Giufra relies on users having the ability to report any unusual occurrences that might indicate a breach in the security of their information. In the event of a report, Giufra will verify whether the event can be linked to data transmissions from or to Giufra and will inform the data subject of the measures that can be implemented or implemented to resolve the problem.

Information related to minors

Giufra does NOT offer services for minors. Should Giufra detect the transmission of personal information by minors under the age of 13, such information will be deleted and destroyed as soon as possible.

Contact

If you have any questions or complaints about Giufra's processing of your personal data, please contact the Data Protection Officer at marketing@astramakeup.com. Users also have the right to file complaints about Giufra's processing of their personal data with the appropriate authorities. We encourage, however, users to give Giufra the opportunity to address any concerns by contacting it before contacting the relevant authorities.

Full contact details:

Data Protection Officer: Giufra S.r.l. via Veneto 152 - 06059, Zona Industriale Ponte Rio (PG), Italy,

Tel: +39 075 898 76 91,

E-mail: marketing@astramakeup.com.