1. General information: The undersigned Company (G & P Cosmetics s.r.l. hereinafter for brevity also referred to as the “Company”) would like to inform you that it will process the personal data you provide on the form or following submission of the form for the purposes indicated below. Only the data needed to fulfil the purposes mentioned in this information statement will be requested and processed.
2. Purposes and legal basis: Your data may be processed by the Company:

   A. to enable you to register with the app and use all its features. The legal basis of this processing is consent 
   B. to fulfil an obligation established by the law, a regulation or EU legislation and for a legitimate interest such as asserting or defending a right of the Company through the appropriate proceedings. The legal basis of this processing is fulfilment of legal obligations, pursuit of legitimate interests
   C. to send advertising/information about the products-services-initiatives of the Company and its partners with prior consent. This material will be sent by the Company to the email address provided in newsletters, including periodical newsletters (please note that emails may be sent electronically with the aid of automated instruments). The legal basis of this processing is consent.    

3. Mandatory or optional provision of data: The provision of marked data is optional for the purposes referred to in point 2 letter A of this information statement but failure to provide data will make it impossible to register with the app and use all its features. Consent for the purposes referred to in point 2 letter A of this information statement is always freely given (and can be withdrawn at any time by writing to the Data Controller at the addresses indicated below) but failure to give consent will make it impossible to register with the app and use all its features. The provision of data is necessary for the purposes referred to in point 2 letter B of this information statement and failure to provide them will make it impossible to register with the app and use all its features. Consent and provision of data for the purposes referred to in point 2 letter C of this information statement are always freely given and optional but failure to provide consent and data will make it impossible to receive the services referred to in the point; consent can always be freely withdrawn by writing to the Data Controller at the addresses indicated below or using any other methods indicated in the newsletters.
4. Categories of data recipients: the data collected and processed for the purposes referred to in point 2 letter A will not be disclosed by the Company except for communication to other members of the community if the data subject decides to use that service. For the purposes referred to in point 2 letter B of this information statement, data may be communicated to lawyers-legal consultants, public bodies, judicial bodies, the police and the post office (as they are able to see the address for sending any written communications). For the purposes referred to in point 2 letter C, data will not be disclosed. The Company will only communicate the data needed to fulfil the individual purposes indicated in this statement. The Company may delegate all the individuals specifically appointed to process the data to process them on its behalf (staff in the sector to which the request is addressed, site management staff also external to the Company, marketing staff also external to the Company,  consultants also external to the Company – e.g. legal consultants, IT technicians, staff in charge of quality - IT staff also external to the Company, public relations officers) and data processors (appointed by the Company) also external to the Company (such as IT outsourcing companies, marketing consultancy outsourcers, outsourcers who send newsletters). The complete list of data processors can be requested from the Data Controller at the addresses indicated above.
5. Data retention: data may be stored and processed by the Company for the time needed to fulfil the purposes described in this statement. The data retention period is as follows:
   - for obligations established by the law, regulations and EU legislation, data may be kept for the time imposed by these regulatory sources;
   - for the purposes referred to in point 2 letter A of this information statement, data may be kept until consent is withdrawn or a request is submitted to delete or unsubscribe to the app; data may also be retained afterwards to show that consent was previously given, for the time that the data subject may raise any objections
   - for the purposes referred to in point 2 letter C of this information statement, data may be kept until consent is withdrawn or a request is submitted to delete the app. Data may also be retained afterwards to show that consent was previously given, for the time that the data subject may raise any objections
   - all data may be kept for the time needed to assert or defend a right of the Company in accordance with Italian and European legislation.
6. Data controller and Data protection officer: the data controller is G & P s.r.l. with registered office in via De Gasperi, 8 – 52037 Sansepolcro (AR) – ITALY Telephone: +39.0575.720.682 Email: info@ilovesensus.it. To date, the Company is not required by law to have a data protection officer but, should it become necessary, it will be notified on the Company website https://www.ilovesensus.it. The Company invites users to periodically visit the site to view updates to this information statement.
7. Rights: we would like to inform you that the GDPR gives data subjects the right to ask the data controller (at the addresses indicated above) to access personal data, rectify or erase data, restrict the processing of their data and ask for data portability; data subjects are also entitled to object to the processing of their data and exercise the other rights contained in Chapter 3 Section 1 of the GDPR, including the right to withdraw consent, where required: withdrawing consent does not affect the legality of the processing based on the consent given before the withdrawal.
8. Complaints: if they deem it appropriate, data subjects are entitled to lodge a complaint with the Italian Data Protection Authority whose contact details can be found on the website www.garanteprivacy.it
9. Data processing methods: data may be processed by the Company in paper, manual, IT and electronic form (therefore retaining and processing the data on both paper and IT media). All the data referred to in this statement shall be retained and processed by the Company, which shall take all the necessary measures to protect them in accordance with all current legislation (and therefore in accordance with the principles of correctness, lawfulness and transparency, while protecting confidentiality and rights) using logics which are closely connected with the purposes indicated in this information statement. The data will be processed only to fulfil the purposes indicated herein. Data will be kept at the Company’s offices and at the premises of the data processors appointed by the Company (as well as at the premises of the third parties indicated in this information statement whom data may be disclosed to and who process them in their capacity as independent data controllers). Data may also be organized in databases, including IT databases.

Note For the purposes for consent is envisaged, the same cannot be provided by any person who is under the age of 14 and therefore the said subjects will not be object of processing activities subject to consent and it will not possible to ask them for it.
By providing consent the data subject declares being more than 14 years old

Update of the information notice 03/09/2019