Privacy & Cookie Policy



Privacy Protection

AB S.r.l., with registered office at via Isonzo 65 – 40033 Casalecchio di Reno (BO), VAT No. IT03690221209, tel. (+39) 391 3270956, email info@AntiAgeBoutique.com, ab-srl@legalmail.it (certified e-mail address) is the Data Controller of the personal data collected on this website pursuant to and for the purposes of EU Regulation 679/2016 (GDPR).

In accordance with the commitment and care that AB S.r.l. dedicates to the protection of personal data, we inform you of the methods, purposes and scope of communication and dissemination of your personal data and of your rights, in compliance with Art. 13 of the GDPR.



1. CATEGORIES OF PERSONAL DATA PROCESSED BY THE DATA CONTROLLER

In order to provide you with the services offered on its website, AB S.r.l., acting as Data Controller, must process certain personal data necessary for the provision of its services.

This data may be provided implicitly by the tools you use to access and use the services, or may be provided explicitly by you.

AB S.r.l. may process the following categories of users' personal data:

• technical browsing data relating to the IP address, identification codes of the devices used by the user to access the website or services, browser characteristics and access times;

• profiling browsing data provided indirectly through use of the service itself, obtained and analysed subject to the user's consent;

• common identifying data provided by the user (e.g. name, surname, email, phone number, etc.) for the use of products and services.

2. PURPOSES AND LEGAL BASES OF PROCESSING

The data and cookies received from you will be processed by AB S.r.l. exclusively using methods and procedures necessary to provide you with the requested services and for any additional purposes for which you have given your consent.

Only with your express consent may the data be used to carry out statistical analyses, market research, promotional activities via social media and the sending of commercial information about AB S.r.l.'s products and promotional initiatives (Direct marketing purposes).

Communications for market research or commercial information about products and promotional initiatives may be carried out by post, email, telemarketing, SMS, MMS.

Please note that some activities may be carried out through suppliers, specifically appointed as Data Processors, including those residing outside the European Union.

The legal bases for the purposes described above are the performance of a request made by you as a data subject and the consents you have expressed.

3. DISSEMINATION, COMMUNICATION AND PARTIES ACCESSING THE DATA

Your personal data will not be disseminated, but may be communicated where necessary for the provision of the service to third parties (such as third-party technical service providers, couriers, hosting providers, IT companies), appointed, where necessary, as Data Processors by AB S.r.l. for technical or organisational tasks instrumental to the provision of services.

Access to the data is also granted to categories of AB S.r.l. staff involved in the data processing organisation (administrative, commercial, marketing, customer service and system administration personnel).

The updated list of Data Processors may always be requested from the Data Controller.

The right to communicate data to third parties where you have given specific and optional consent remains unaffected.

4. TRANSFER OF DATA ABROAD

Your personal data will be processed by AB S.r.l. within the territory of the European Union.

Should it become necessary, for technical and/or operational reasons, to make use of parties located outside the European Union, or should it become necessary to transfer some of the collected data to technical systems and cloud-based services located outside the European Union area, the processing will be governed in accordance with the provisions of Chapter V of the Regulation and authorised on the basis of specific European Union decisions. All necessary precautions will therefore be taken to ensure the fullest protection of personal data, basing such transfer on: a) adequacy decisions regarding the recipient third countries issued by the European Commission; b) adequate guarantees expressed by the recipient third party pursuant to Art. 46 of the Regulation; c) the adoption of binding corporate rules.

5. DURATION OF PROCESSING AND RETENTION OF PERSONAL DATA

AB S.r.l., in accordance with Art. 5.1(e) of the GDPR, will process the data you have provided for the entire duration of the requested services and will retain it for the following 12 months for the purpose of completing administrative activities, as well as for the time necessary to fulfil legal obligations.

6. DATA SUBJECT RIGHTS

AB S.r.l. guarantees that you may exercise the rights provided for under Art. 12 of the GDPR at any time.

In particular, you have the right to:

Right of access (Art. 15)

• The right of access includes in all cases the right to receive a copy of the personal data being processed.

• The information that the controller must provide does not include the "methods" of processing, but must include the envisaged retention period or, if not possible, the criteria used to determine that period, as well as the safeguards applied in the event of data transfer to third countries.

A "registered" user can view all their data stored on this website by logging in to the GDPR area (link).

From this web page the user can obtain, by clicking the appropriate buttons, a copy of all the data stored by AB S.r.l. on this website; this data can be exported in both PDF and CSV format.

Exporting data in CSV format also guarantees the right to data portability provided for under Art. 20 of the GDPR.

Unregistered users (commonly referred to as "guests") who have made a purchase on this website do not have a personal reserved area.

Such users may however request, using the contact form (link), information about the personal data stored on this website.

AB S.r.l. undertakes to respond promptly to requests submitted by such users.

Right of rectification (Art. 16)

• The data subject has the right to obtain from the controller the rectification of inaccurate personal data concerning them without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the completion of incomplete personal data, including by providing a supplementary declaration — to the rectification of inaccurate personal data or to the completion of incomplete personal data (Art. 16 Right of rectification);

A "registered" user can view all their data stored on this website by logging in to their account (link).

From this web page the user can modify their data if it is inaccurate; specifically, they can modify:

• email address used to access the reserved area and the website;

• password used to access the reserved area and the website;

• first and last name if incorrect;

• tax identification number;

• company name if applicable;

• VAT number;

• addresses (residential, delivery, billing, etc.);

• phone numbers;

• any notes entered.

Right of erasure (right to be forgotten) (Art. 17)

• The so-called "right to be forgotten" takes the form of an enhanced right to erasure of one's personal data. It provides, in fact, for an obligation on controllers (if they have "made public" the personal data of the data subject: for example, by publishing it on a website) to inform other controllers processing the erased personal data of the erasure request, including "any link, copy or reproduction" (see Art. 17, paragraph 2).

• It has a broader scope of application than that referred to in Art. 7, paragraph 3, letter b), of the Code, since the data subject has the right to request erasure of their data, for example, also after withdrawing consent to processing (see Art. 17, paragraph 1).

All registered "users" and also "guest" users may at any time request, using the contact form (link), the erasure of their data stored on this website.

AB S.r.l. undertakes to fulfil data erasure requests within a reasonable timeframe.

Prior to final erasure, the requester will be notified by email of the initiation of the erasure procedure.

From that moment, AB S.r.l. will no longer be able to send further communications to the user, as their data — and in particular the requester's email address — will have been permanently and irrecoverably deleted from the database of this website.

Data retention

Your data is stored on servers equipped with the most modern protection and security systems, located within the EU. Specifically, your data is stored on a Serverplan S.r.l. (link) server, to which we refer you for detailed information regarding the Privacy Policy and the security technologies used.

Except in cases where the user specifically requests the deletion of their data from the database of this website, all data relating to the individual user and their purchases are retained on this website for a period of 26 (twenty-six) months from the last purchase made.

This data retention period corresponds to the validity period of the "Legal Guarantee of Conformity" provided for by the Consumer Code (Articles 128 et seq.), which protects the consumer in the event of the purchase of defective products, products that malfunction or do not correspond to the use declared by the seller or to which such goods are generally intended.

Exceptions

The deletion of data from this website does not imply the elimination of any tax documents issued (invoices, receipts, delivery notes, etc.), which will be retained in accordance with applicable Civil and Tax regulations, i.e. for 10 (ten) years from the date of issue.

7. DATA PROTECTION OFFICER

AB S.r.l. has identified and appointed, pursuant to Art. 37 of the GDPR, a Data Protection Officer.

To exercise the rights guaranteed to you, you may contact us at the following details:

• by post: AB S.r.l. - via Isonzo 65 – 40033 Casalecchio di Reno (BO)

• by email: info@AntiAgeBoutique.com

• by certified email (PEC): ab-srl@legalmail.it

7Pixel S.r.l., in the person of its legal representative pro tempore, is appointed as data processor for the User's data (email address) for the management of review requests within the Trusted Program of the website "www.trovaprezzi.it".

This Privacy Policy was last updated on 30/07/2022

COOKIE POLICY

Cookie policy

AB S.r.l. uses its own cookies and those of its partners in order to improve the user experience of its website and to collect information for advertising purposes and content personalisation through the analysis of users' browsing habits.

For your privacy, it is important to remember that AntiAgeBoutique.com cookies never store personal or privacy-protected information.

To browse AntiAgeBoutique.com, the use of cookies is necessary, as they allow you to log in to the website, add products to the cart and complete a purchase.

By disabling cookies, it is not possible to make purchases on AntiAgeBoutique.com

What are cookies

Cookies are small text files that are stored by your browser (e.g. Internet Explorer, Chrome, Firefox, Safari) on your computer or mobile device.

Cookies allow websites to store certain information.

Cookies are used to store certain information relating to the website being visited, for example to recognise a user and behave appropriately without asking them to log in again each time they change page, or to store products in the cart, or the website preferences.

Consent to the use of cookies

For technical cookies, user consent is not required.

For profiling cookies, both from AntiAgeBoutique.com and from third parties, user consent is required.

On the first visit to AntiAge Boutique (www.AntiAgeBoutique.com) the website displays a prominent brief notice regarding consent to the use of cookies.

If the user leaves the website without clicking on any of its elements, or clicks on the "more info" link in the brief notice which leads to this page, the user has not given their consent to non-technical cookies, which are therefore not installed.

If instead the user clicks "accept" or continues browsing the website (by clicking on any of its elements), the user gives their consent to the use of cookies.

Cookies used

AB S.r.l. uses the following types of cookies:

  • technical cookies
    • session cookies
    • anonymous statistical cookies
  • profiling cookies
    • advertising cookies
    • remarketing and behavioural retargeting cookies
    • aggregate statistical cookies
    • social network cookies

All technical cookies do not require consent and are therefore installed automatically upon accessing the website.

TECHNICAL COOKIES

Session

These are the cookies that allow you to browse the website, log in, and keep products stored in the cart.

Without these cookies it is not possible to fully use the website, as they allow you to log in, add products to the cart, or complete a purchase.

Domain: AntiAgeBoutique.com

Anonymous statistical cookies

In order to improve the website, we use Google Analytics with anonymised IP, a web traffic analysis service provided by Google, Inc. ("Google"), to collect (anonymous) information about how users use the website — for example, which pages they visit, how many pages they view, etc.

This is a third-party cookie, specifically from Google.

They are defined as anonymous because they cannot be used to identify specific individuals.

This information is collected by Google Analytics, which processes it in order to compile reports on website activity. This website does not use (and does not allow third parties to use) Google's analysis tool to monitor or collect personally identifiable information.

Google will not associate your IP address with any other data held by Google. The terms of service to which all programme customers must adhere prohibit the monitoring or collection of personal information (personally identifiable data, such as name, email address, billing data or other data that can reasonably be linked to such information) through the use of Google Analytics or the association of such data with web analytics information.

Google Analytics

Google Analytics is a web analytics service provided by Google Inc. ("Google"). Google uses the Personal Data collected to track and examine the use of this Application, compile reports and share them with other services developed by Google.

Google may use Personal Data to contextualise and personalise the ads of its own advertising network.

This Google Analytics integration anonymises your IP address. Anonymisation works by shortening Users' IP addresses.

Personal data collected: Cookies and Usage Data

Place of processing: USA

Privacy policy: http://www.google.com/intl/it/policies/privacy/

Opt-Out: http://tools.google.com/dlpage/gaoptout?hl=it

PROFILING COOKIES

Advertising

These services allow the use of User Data for commercial communication purposes in various advertising forms, such as banners, including in relation to the User's interests.

This does not mean that all Personal Data is used for this purpose. Data and conditions of use are indicated below.

Some of the services listed below may use Cookies to identify the User or use the technique of behavioural retargeting, i.e. displaying personalised advertisements based on the User's interests and behaviour, detected also outside this Application. For more information, we suggest you check the privacy policies of the respective services.

Remarketing and behavioural retargeting

These services allow this Application and its partners to communicate, optimise and serve advertising based on the User's past use of this Application. This activity is carried out through the tracking of Usage Data and the use of Cookies, information which is transferred to partners to which the remarketing and behavioural targeting activity is linked.

Adwords Remarketing (Google)

AdWords Remarketing is a Remarketing and Behavioural Targeting service provided by Google Inc. that connects the activity of this Application with the Adwords advertising network and the Doubleclick Cookie.

Personal data collected: Cookies and Usage Data.

Place of processing: USA

Privacy Policy: http://www.google.com/intl/it/policies/privacy/

Opt-out: http://www.google.com/settings/ads/onweb/optout

DoubleClick for Publishers Audience Extension (Google Inc.)

DoubleClick for Publishers Audience Extension is a Remarketing and Behavioural Targeting service provided by Google Inc. that tracks visitors to this Application and allows selected advertising partners to show them personalised ads across the web.

Personal data collected: Cookies and Usage Data.

Place of processing: USA

Privacy policy: http://www.google.com/intl/en/policies/privacy/

Opt-out: https://www.google.com/settings/ads/onweb#display_optout

Facebook Remarketing (Facebook, Inc.)

Facebook Remarketing is a Remarketing and Behavioural Targeting service provided by Facebook, Inc. that connects the activity of this Application with the Facebook advertising network.

Personal data collected: Cookies and Usage Data.

Place of processing: USA

Privacy Policy: https://www.facebook.com/about/privacy/

Opt Out: http://www.aboutads.info/choices/

Remarketing with Google Analytics for Display Advertising (Google)

Google Analytics for Display Advertising is a Remarketing and Behavioural Targeting service provided by Google Inc. that connects the tracking activity carried out by Google Analytics and its Cookies with the Adwords advertising network and the Doubleclick Cookie.

Personal data collected: Cookies and Usage Data.

Place of processing: USA

Privacy Policy: http://www.google.com/intl/it/policies/privacy/

Opt Out: http://www.google.com/settings/ads/onweb/optout

Twitter Remarketing (Twitter)

Twitter Remarketing is a Remarketing and Behavioural Targeting service provided by Twitter, Inc. that connects the activity of this Application with the Twitter advertising network.

Personal data collected: Cookies and Usage Data.

Place of processing: USA

Privacy Policy: https://twitter.com/privacy

Opt Out: http://www.aboutads.info/choices/

Facebook Custom Audience (Facebook, Inc.)

Facebook Custom Audience is a Remarketing and Behavioural Targeting service provided by Facebook, Inc. that connects the activity of this Application with the Facebook advertising network.

Personal data collected: Cookies and Email.

Place of processing: USA

Privacy Policy: https://www.facebook.com/about/privacy/

Opt Out: http://www.aboutads.info/choices/

Statistics

The services contained in this section allow the Data Controller to monitor and analyse traffic data and are used to track User behaviour.

Google Analytics falls under anonymous statistical cookies as it is used with anonymised IP.

Google AdWords Conversion Tracking (Google Inc.)

Google AdWords Conversion Tracking is a statistics service provided by Google Inc. that connects data from the Google AdWords advertising network with actions performed within this Application.

Personal data collected: Cookies and Usage Data.

Place of processing: USA

Privacy policy: http://www.google.com/intl/it/policies/privacy/

Facebook Ads Conversion Tracking (Facebook, Inc.)

Facebook Ads Conversion Tracking is a statistics service provided by Facebook, Inc. that connects data from the Facebook advertising network with actions performed within this Application.

Personal data collected: Cookies and Usage Data.

Place of processing: USA

Privacy policy: https://www.facebook.com/about/privacy/

Twitter Ads Conversion Tracking (Twitter)

Twitter Ads Conversion Tracking is a statistics service provided by Twitter, Inc. that connects data from the Twitter advertising network with actions performed within this Application.

Personal data collected: Cookies and Usage Data.

Place of processing: USA

Privacy policy: https://twitter.com/privacy

Displaying content from external platforms

These services allow content hosted on external platforms to be displayed directly from the pages of this Application and to interact with it.

In the event that a service of this type is installed, it is possible that, even if Users do not use the service, it may still collect traffic data relating to the pages on which it is installed.

YouTube Video Widget (Google Inc.)

YouTube is a video content display service managed by Google Inc. that allows this Application to integrate such content within its own pages.

Personal data collected: Cookies and Usage Data.

Place of processing: USA

Privacy Policy: http://www.google.it/intl/it/policies/privacy/

Vimeo Video (Vimeo, LLC)

Vimeo is a video content display service managed by Vimeo, LLC that allows this Application to integrate such content within its own pages.

Personal data collected: Cookies and Usage Data.

Place of processing: USA

Privacy Policy: http://vimeo.com/privacy

Google Fonts (Google Inc.)

Google Fonts is a font style display service managed by Google Inc. that allows this Application to integrate such content within its own pages.

Personal data collected: Cookies and Usage Data.

Place of processing: USA

Privacy Policy: http://www.google.it/intl/en/policies/privacy/

Google Maps Widget (Google Inc.)

Google Maps is a map display service managed by Google Inc. that allows this Application to integrate such content within its own pages.

Personal data collected: Cookies and Usage Data.

Place of processing: USA

Privacy Policy: http://www.google.it/intl/it/policies/privacy/

Cookie duration

The cookies used by AB S.r.l. have a maximum duration of no more than 12 months, as established by the Italian Data Protection Authority's provision 229/2014. For third-party cookies, please refer to their respective policies indicated above.

Cookie management

Users can decide whether or not to accept cookies using their browser settings.

Please note: total or partial disabling of technical cookies may compromise the use of website features reserved for registered users. On the other hand, access to public content is possible even with cookies completely disabled.

Settings can be defined specifically for different websites and web applications. Furthermore, most browsers allow you to define different settings for "first-party" and "third-party" cookies.

For example, in Firefox, through the Tools->Options->Privacy menu, you can access a control panel where you can define whether or not to accept the different types of cookies and proceed with their removal.

Cookie consent