Introduction: scope of this privacy & cookie policy
Dear User, when you access and navigate on this website (hereinafter 'Website') some of your personal data is acquired, stored, and managed (in technical terms 'processed') through the device you are using, also by analyzing and saving your IP address, browsing data, 'cookies' and other online identifiers such as 'pixels'. Based on these processing activities, in compliance with the applicable legislation that requires the protection, confidentiality and security obligations on your data, Pettenon Cosmetics S.p.A. SB clarifies below the purposes and means defined in its capacity as Data Controller.
Data Controller
Data processing operations will be performed as Data Controller by Pettenon Cosmetics S.p.A. SB with legal seat in San Martino di Lupari (PD - Italy), Via del Palù, 7d, VAT IT04937500280.
Pettenon Cosmetics S.p.A. SB can be contacted at the following addresses:
by writing an e-mail to the address privacy@pettenon.it
by hard mail, at the address of the legal seat as provided above.
Pettenon Cosmetics S.p.A. SB has appointed a Data Protection Officer (“DPO”) based on EU Regulation 2016/679 (“GDPR”) that can be contacted by writing an e-mail to the address dpo@pettenon.it.
Categories of data processed
The categories of data processed through the Website are:
information related to the User's browsing activities, including the so-called online identifiers and data related to the device in use
personal identification and contact data provided freely by the User on the Website, such as name, surname, e-mail address, telephone number
personal data obtained from third parties or sources, in connection with specific initiatives or purposes promoted by the Data Controller
other categories of data, specifically identified, in case of further implementation of purposes on the Website.
Purposes, legal basis and data retention periods
In the table below, the Data Controller lists the specific purposes under which a processing of personal data takes place, each accompanied by the relevant legal basis and the maximum retention time of the data, if it is possible to indicate it precisely (absent that, the retention criterion is given on the basis of which the relevant technological tool was set up).
| Purposes | Legal Basis | Data Retention Period |
|---|---|---|
| User access to the pages of the Website, to its functionality and content such as, for example, products catalogs | Art. 6 (1) (b) GDPR – performance of pre-contractual activities | For the duration the User remains on the Website, and in any case for a maximum of 24 months after it. |
| Response to contact requests or information inquiries made by the User, including those sent through the digital assistant service | Art. 6 (1) (f) GDPR – exercise of legitimate interest, aimed at maintaining relations with Users of the Website | For a maximum of 10 years from interaction with the User. |
| Managing unsolicited contacts from Users by sending Curriculum Vitae and/or other communications | Art. 6 (1) (b) GDPR – performance of pre-contractual activities | For a maximum of 12 months from the ending of the selection process, safe for further retention needs or User’s consent. |
| Analysis of the usage statistics and improvement of the functionality of the Website by technologies involving data processing activities in accordance with Directive 2002/58/EC | Art. 6 (1) (a) GDPR – User consent | Until the expiry of the longest retained online ID (cookie or other stored technology), save for User’s requests of cancellation and/or anonymization. |
| Analysis of the usage statistics and improvement of the functionality of the Website by technologies involving data processing activities in accordance with Directive 2002/58/EC | Art. 6 (1) (f) GDPR – exercise of legitimate interest, aimed at improving products and services | Only for the period necessary for complete anonymization of the collected data. |
| User contact as a result of events or meetings within which the Data Controller or third parties have collected personal contact data |
Art. 6 (1) (a) GDPR – User consent or alternatively Art. 6 (1) (f) GDPR – legitimate interest aimed at maintaining contact with the User |
Until consent is withdrawn or, in case of legitimate interest, up to 3 months from reception of the data, subject to the User’s right of opposition. |
| Subscription to the newsletter and management of related commercial communications (special offers, promotions and news) | Art. 6 (1) (a) GDPR – User consent | Until consent is withdrawn and, in any case, no later than 2 months thereafter for technical and procedural purposes. |
| Analysis of the User's preferences and consumer habits for personalized promotions and services (profiling) | Art. 6 (1) (a) GDPR – User consent | Until consent is withdrawn and, in any case, no later than 2 months thereafter for technical and procedural purposes. |
| Locating the store closest to the User using geolocation tools | Art. 6 (1) (a) GDPR – User consent | Until the end of the duration of the online ID related to the requested functionality. |
Other information on how we process personal data
If the User wish to receive more information about the balance between the legitimate interests pursued by the Data Controller and the fundamental rights and freedoms of the natural person, he/she can contact the Data Controller at the addresses indicated, and in particular at the e-mail address provided, having the right to receive adequate feedback as soon as possible and in any case within the time required by law.
In the event of litigation with the User or with third parties, or control of the competent Authorities, the conservation may be extended until the expiry of the last applicable prescription period.
The User's personal data will not be disseminated in any way, except for the acquisition of express and prior consent or within the limits of what is provided for or imposed by law.
Consequences of failure to provide data
The provision of personal data from time to time indicated as mandatory is necessary to pursue the related purposes: not providing such data makes it impossible to proceed with the related processing.
The provision of other personal data is optional: failure to provide such additional data may make it impossible to access all or part of the Website's functions or characteristics. With respect to so-called marketing and profiling purposes, as well as in relation to so-called "online identifiers" that are not merely technical, consent to the processing of personal data is optional: there is no legal or contractual obligation on the user to provide such data for such a purpose and/or to give consent to the processing of his or her personal data for such a purpose.
Automated decision-making processes
The Website does not process any personal data through automated decision-making processes, in accordance with current legislation, and in particular in accordance with Article 22(1) and (4) of the GDPR.
In any case, any automated processing will not have a legal effect on the person concerned or significantly affect him/her, unless specific informed consent is acquired and in any case within the limits of the law.
Categories of subjects that process data on behalf of the Data Controller
Within the limits of the obligations, tasks or purposes indicated above, personal data may be made available and / or communicated to:
- employees and / or collaborators of the Data Controller;
- other third parties appointed as Data Processors (in particular, suppliers of goods and services) including their employees and / or collaborators;
- Judicial, administrative and / or public security authorities.
The complete list of Data Processors and other third parties to whom the data are made available and / or communicated can be requested from the Data Controller at any time, at the indicated references.
Transfer of data
Personal data will be transferred to countries inside and outside the European Economic Area for technical purposes, in any case to entities based in countries recognized as ‘adequate’ by the European Commission, including members of the ‘EU-US Data Privacy Framework’, or to entities that have entered into specific Standard Contractual Clauses based on the current text approved by the European Commission.
Rights of the Data Subject
The User, as a "Data Subject" according to the GDPR, can at any time exercise the rights attributed to him by the European Regulation n.2016/679. In particular, the User has the right to:
- access his/her personal data;
- obtain the correction or cancellation of the same or the limitation of the processing that concerns him/her;
- oppose the processing;
- obtain his/her data portability, where provided by the law;
- withdraw consent, where provided: the withdrawal of consent does not affect the lawfulness of the processing based on the consent given before the revocation;
- lodge a complaint with the supervisory authority. For Italy - as the Data Controller’s home state - the supervisory authority is the ‘Autorità Garante per la protezione dei dati personali’ based in Rome (www.gpdp.it).
The exercise of the aforementioned rights can take place by sending a request to the Data Controller's references, as indicated above, and in particular to the e-mail address privacy@pettenon.it
***
Supplemental notice for United States residents
If you reside in the United States, we are committed to processing your Personal Information in accordance with the privacy laws applicable in your State of residence.
While regulations vary from state to state, this section provides an overview of your rights, with particular reference to the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), as well as current local regulations, including those of Florida (FDBR) and Delaware (DPDPA), in any case they are or will be applicable to us.
Regardless of your US State of residence, we guarantee you the following fundamental rights:
- right to know and access: you have the right to request information about the categories and specific parts of Personal Information we have collected, used, disclosed, or sold
- right to deletion: you may request the deletion of your Personal Information, subject to certain legal exceptions
- right to correction: you have the right to correct inaccurate Personal Information we hold about you
- right to opt-out (“Do Not Sell or Share”): we do not sell your Personal Information for monetary consideration; however, under the broad definitions of "sale" or "sharing" as present in certain state laws (e.g., California, Florida, Delaware), the use of advertising cookies or tracking technologies may be considered as such; you may therefore opt out of such processing via our cookie settings or dedicated banner.
- non-discrimination: you will not receive discriminatory treatment for exercising your privacy rights.
To exercise these rights, or for California residents wishing to exercise their rights under local law, please contact us at the addresses provided.
What are cookies and other tools used by the Website
Cookies are small text files that are transmitted from the Website to the devices of Users who visit it, and which are then retransmitted to the Website on subsequent visits; they may have different characteristics and be used for different purposes, both by the Website’s Data Controller and by third parties who provide technical services to the Data Controller or directly to the User.
This Website uses different types of cookies, in compliance with the "Guidelines for cookies and other tracking tools" as issued by the Italian Data Protection Authority with general provision no. 231 of 10 June 2021.
Cookies can be divided between "first-party" cookies, if installed directly from the Website, and "third-party" cookies, if they provide access to features and services offered by third parties with respect to the Owner.
Some of the cookies used by this Website are "technical" - being installed automatically following the opening of the Website - and therefore do not require the user's consent. Technical cookies can be "session" cookies, if they are deleted from the device when the browser and/or the navigation tab is closed, or "persistent" cookies, if they remain in the device's memory even after the Website is closed.
The Website might also use cookies, both first and third party, classified as "profiling", with the user's consent, through which the browsing experience and access to the Data Controller’s offerings are personalized and improved.
Additional elements, classified as "online identifiers" by the GDPR, are also implemented, which allow the analysis and monitoring of the Website's functionalities and enable the User to access specific services. Some of them do not involve the installation of content on the tool used by the User to connect to the Website and allow to minimize the processing of personal data carried out, thus meeting the requirements of the "Digital Markets Act" (EU Reg. 2022/1925) and not interfering with the regulations provided by the so-called "ePrivacy Directive" (Dir. 2002/58/EC).
How to manage cookie settings
To revoke your general consent to the installation and use of cookies, the User can interact with the banner available by the Website on the homepage or manage the preferences by Privacy & Cookie Policy
The user can also seek further information on the following websites:
http://www.youronlinechoices.com/uk/your-ad-choices
http://www.allaboutcookies.org/manage-cookies/index.html
The provision of all cookies can always be deactivated by the user by adjusting the browser settings. It should be noted, however, that intervening on these settings could render the Website unusable if the browser blocks cookies that are technically indispensable for the provision of our services. In any case, each browser has different settings for deactivating cookies. The links to the instructions for the most common browsers are as follows:
- Apple Safari → https://support.apple.com/kb/PH19214?locale=it_IT
- Google Chrome → https://support.google.com/chrome/answer/95647?hl=it
- Microsoft Edge → http://windows.microsoft.com/it-it/windows-10/edge-privacy-faq
- Mozilla Firefox → https://support.mozilla.org/it/products/firefox/protect-your-privacy/cookies
Last updated on: December 11th, 2025