Privacy policy

Information on data processing pursuant to EU Directive No. 679/2016

The company Claudia Kosmetik Estetica der Gasparini Claudia provides information pursuant to EU Regulation No. 679/2016 (hereinafter GDPR), with regard to the personal and sensitive data it may become aware of, about the nature, scope and purpose of processing that data.

  1. Data controller:

The data controller is the company Claudia Kosmetik Estetica der Gasparini Claudia, represented by its legal representative Gasparini Claudia, with registered office at Trattengasse 4/b, 39042 Brixen, Italy.

The person responsible for data processing is Gasparini Claudia and can be contacted by registered mail at Claudia Kosmetik Estetica der Gasparini Claudia, Trattengasse 4/b, 39042 Brixen, Italy, or by email at info@claudia-kosmetik.it.

  1. Types of data processed and individuals concerned:

We process the personal data of customers and suppliers, as well as data from individuals who voluntarily provide their personal information to our company (in person, by phone, by fax, or by email), or by registering on our website, as well as data from individuals whose information has been obtained from third parties—for example, when collecting external data for business information, public directories, etc.—where, in the latter case, the data consists exclusively of basic personal information. 

  1. Purpose of data processing: 

Data processing is carried out exclusively for the following purposes:

  1. Compliance with the obligations set forth in applicable regulations and laws, including those relating to tax and accounting matters
  2. Fulfillment of contractual obligations toward the data subjects
  3. Performing tasks related to our company’s business operations, such as compiling internal statistics, preparing financial statements, and maintaining customer and supplier accounts
  4. Preparation of a quote 
  5. Sending newsletters
  6.   Compilation of internal statistics

  1. Legal basis for data processing:

Data processing is carried out in accordance with legal requirements and is based on the following legal grounds pursuant to Articles 6 and 7 of the GDPR: Data processing is carried out to fulfill the agreed-upon services, to implement contractual measures and respond to inquiries, to comply with legal obligations and protect legitimate interests, as well as on the basis of the consent of the data subjects.

  1. Methods of data processing: 

Data processing may be carried out with or without the aid of electronic means, but in any case by automated means, and includes the collection, storage, organization, retention, retrieval, processing in the strict sense, modification, selection, extraction, comparison, use, interconnection, blocking, transmission, erasure, and archiving of data. 

Data processing is carried out both by the data controller and by processors and third parties whom the data controller has commissioned to process the data for the purposes set forth in Section 3, or in cases where this is required by law. The data controller has ensured that processors and third parties also process personal data in accordance with the GDPR.

If necessary, the data may be disclosed to domestic and/or foreign individuals and/or legal entities, provided that this serves the purposes and activities specified in Section 3. However, personal data is not generally disclosed. 

Specifically, data processing is carried out in the following ways:

  1. Contact us:

When users contact the company via the contact form, email, or social media, their information is processed in order to handle and resolve their inquiry. This information may be stored in a customer relationship management system or a similar inquiry management system. 

Requests will be deleted as soon as they are no longer needed, unless retaining the data is necessary to comply with legal obligations.

  1. Google Tag Manager:

Google Tag Manager is a solution that allows so-called website tags to be managed via a user interface in order to integrate Google marketing services into the website, and it is used on this website. The Tag Manager itself does not process any personal data; for more detailed information, please refer to the Google Services Terms of Service: https://www.google.com/intl/de/tagmanager/use-policy.html

  1. Google Analytics:

This website uses analytics tools provided by Google Inc. for marketing and optimization purposes. Data is collected and stored in an anonymized form. Google Analytics uses cookies, which are text files stored on the user’s computer that enable an analysis of the user’s interaction with the website. This data is transmitted to a Google server in the United States and stored there. The IP address transmitted by the user’s browser as part of Google Analytics is not combined with other Google data. Additionally, the “anonymizeIP” function is used in the code, which ensures that the IP address is masked, so that all data is collected anonymously. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. The collected data is not used to personally identify visitors to this website; individual users remain anonymous, and no data is shared with third parties. Google uses this information on behalf of the website operator to generate various reports on website activity.

In this context, users are informed of their right to object by installing the browser plugin available at https://tools.google.com/dlpage/gaoptout?hl=de to disable Google Analytics.

  1. Google AdWords and Conversion Tracking:

This website also uses the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google is certified under the Privacy Shield Framework and guarantees compliance with European data protection laws. This website uses the online marketing service Google AdWords to place ads on the Google advertising network so that they are displayed to users who are likely to be interested in the ads. This allows ads for and within this website’s online offering to be displayed in a more targeted manner, so that users are shown only ads that potentially match their interests. To this end, when visiting websites where the Google advertising network is active, a Google code is executed directly by Google, and so-called marketing tags are integrated into the website, which are used to store an individual cookie—i.e., a small file—on the user’s device. This file records which web pages the user visits, what content they are interested in, as well as technical information about the browser and operating system and the time of the visit. In addition, Google uses conversion cookies to generate statistics that determine the total number of users who have viewed the ad. However, users themselves cannot be personally identified; instead, Google processes only cookie-related data within anonymized user profiles, unless a user expressly permits Google to process the data without anonymization. Further information on this can be found in Google’s Privacy Policy (https://policies.google.com/technologies/ads).

  1. Social media accounts:

The company Claudia Kosmetik Estetica der Gasparini Claudia maintains online presences on social networks and platforms in order to communicate with customers, interested parties and users active there and to inform them about its services. When accessing the respective networks, the privacy policies of their operators apply. 

  1. Disclosure of data to domain registrars:

In order to register the domains of the individuals concerned, their data must be forwarded to the respective national and international domain registrars. Only the personal data that is absolutely necessary is transmitted in this process. The data transmitted to the registrars can be retrieved and viewed by Internet users. The registrars prohibit commercial and abusive use.

  1. Disclosure of data to certificate authorities:

To issue an SSL certificate, personal data is transmitted to the certificate issuer. Only the data that is absolutely necessary is transmitted. The data subject consents to this data being automatically transmitted to the certificate issuer during the creation of the certificate. 

  1. Business Analysis and Market Research:

In order to identify market trends and the needs of our contractual partners and users, we analyze the available data on business transactions, inquiries, contracts, etc. In doing so, we process inventory data, communication data, contract data, payment data, usage data, and metadata from contractual partners, prospective customers, customers, and visitors to our online platform. The analyses are used to improve user-friendliness, optimize the service, and enhance operational efficiency, and are not disclosed externally. 

  1. Cookies: 

When you visit this website, session cookies are created that are valid only for the duration of your visit. It is not possible to track these cookies across domains, as advertising networks do, nor are these cookies used to track user behavior.

  1. Disclosure of data and refusal to disclose:

The provision of personal data is essential for the fulfillment of the purposes set forth in Section 3, and any refusal by the data subjects to provide such data will result in the inability to fulfill the purposes set forth in Section 3.

  1. Data storage:

Unless otherwise expressly stated in this Privacy Policy, the processed data will be deleted as soon as it is no longer needed for the purposes set forth in Section 3 and there are no longer any legal retention requirements. In general, personal data is not retained for longer than two years. 

If deletion is not possible for legal reasons, data processing will be restricted; in other words, the data will be blocked and not used for any other purposes. 

  1. Rights of the data subject:

The GDPR allows data subjects to exercise specific rights:

  1. The right to obtain from the controller information regarding the personal data in question, as well as the right to have such data corrected, erased, or restricted, and the right to object to the processing;
  2. The right to receive one’s own data from the data controller in a structured and commonly used format, where possible, also for the purpose of transmitting the data to another data controller;
  3. The right to withdraw consent to data processing at any time, provided that the lawfulness of the processing is based on the data subject’s consent, and without affecting the lawfulness of the processing carried out on the basis of consent prior to withdrawal;
  4. The right to file a complaint with the data protection authority.

You may exercise these rights by sending a written notice via email to info@claudia-kosmetik.it or by registered mail with return receipt requested to Claudia Kosmetik Estetica, owned by Claudia Gasparini, Brixen, Trattengasse 4/b, 39042 IT.