Information and consent to the processing of personal data pursuant to EU Regulation 2016/679 (GDPR) and Legislative Decree 196/2003 as amended by Legislative Decree 101/2018

Planet Nails International LLC, as Data Controller, informs you, pursuant to Article 13 of EU Regulation no. 2016/679 (hereinafter also GDPR) and pursuant to national legislation on the protection of personal data, that your data will be processed in the manner and for the purposes specified below.

It should also be noted that Planet Nails International LLC, reachable at https://www.planetnails.org , does not require consent for cookies or other technical identifiers, as the type used falls within the exemptions from the obligation to acquire codified consent pursuant to law. Consequently, there is no need to display specific banners that the user is responsible for removing while browsing online.

1) Data Controller

The Data Controller is the company Planet Nails International LLC , owner of the website https://www.planetnails.org and of the social pages Instagram, Youtube, Facebook and TikTok “planetannagiulia”.

The data controller, responsible for data protection, can be contacted by registered mail to the company headquarters.

2) Object of the Treatment

The following categories of personal data may be collected concerning the Subjects, which may vary depending on the products and services:

• Contact details, such as name and surname, email address, telephone number;
• Personal information, such as date of birth, gender, marital status, etc.;
• Information relating to your service preferences, lifestyle and consumption habits, personal tastes, etc.
• Order and reservation data (telephone contact, payment information, such as credit/debit card details and any other data required in compliance with applicable laws and regulations);
• Website usage – information about how you use the Site, open or forward communications, including information collected via cookies;
• Special data such as information regarding health status necessary for the correct organisation of events or initiatives of the Data Controller (for example, allergies or sensitivities to specific products).

Simply browsing the website https://www.planetnails.org does not require registration.

Accessing the reserved area for booking appointments and online courses, however, requires entering contact information, an email address, and a telephone number, as well as the information required to complete the payment. Providing this information is optional, but failure to provide it will make it impossible to proceed and complete the desired transactions.

3) Methods of Processing

The Data Controller will process the Personal Data of Users/Customers using paper and electronic means, with logic strictly related to the purposes themselves and, in any case, in a way that guarantees the security and confidentiality of the data.

The personal data voluntarily provided is collected using electronic means directly by the Data Controller and appropriate security measures are observed to prevent data loss, illicit or incorrect use, and unauthorized access to the data.

Personal data will not be disclosed to third parties without the interested party’s consent, except as required by law.

4) Duration of Treatment

Users’/customers’ personal data will be retained for the time strictly necessary to fulfill the purposes for which they were collected and, in any case, until the user/customer withdraws their consent. In any case, personal data will be retained for a period compliant with applicable legislation.

The personal data of users/customers will also be retained by the Data Controller for as long as necessary to provide the service, without prejudice to the interested party’s right to withdraw consent at any time.

5) Purpose of the Processing

The personal data of users/customers will be used for the following purposes:

1. a) b) c) d) Site navigation, with reference to the possibility of collecting technically necessary user data, such as, for example, the IP address. This data will be used by the Data Controller for the sole purpose of providing the service offered and verifying the identity of the user/customer, preventing fraud or abuse.

Access and registration on the site, in order to allow the use of services reserved for users and, in particular, online courses and consulting services.

Contractual obligations and provision of services, in order to fulfill requests to purchase products and services in the “online courses” section of the Site;

Administrative and accounting purposes in the event of a purchase, or to carry out organizational, administrative, financial, and accounting activities necessary for managing the contractual relationship.

1. e) Legal obligations in order to fulfill legal obligations or orders from authorities.

For the purposes listed above, providing data is mandatory. Failure to provide contact information will make it impossible for the User to use the features of the services offered by the Data Controller.

The personal data of users/customers will also be used for the following purposes:

1. f) g) Completion of questionnaires and/or surveys to improve the services offered;

Commercial communications and/or advertising and promotional material relating to the services offered by the Data Controller;

1. h) i) Survey on the level of satisfaction with the quality of the service;

Sending marketing communications via email, post, SMS/WhatsApp, telephone contacts, and newsletters for commercial and promotional purposes;

1. j) Profiling of personal data;
2. k) Publication of multimedia content (social and video) on the Center’s social channels for advertising and promotional purposes.

Providing Personal Data for marketing, profiling, and marketing purposes is optional. Failure to provide consent will not affect your ability to use the Site and purchase the services offered.

The legal basis for processing is the specific consent, freely given by the user/customer, for the performance of each of the aforementioned marketing, profiling, and data communication purposes to Partners for marketing purposes (pursuant to Article 6, paragraph 1, letter a) of the Regulation). In the event of non-consent, the Data Controller will limit itself to carrying out analysis activities.

anonymous statistics regarding information related to the provision of the services offered.

In case of consent, the User may revoke it at any time by making a request to

Data Controller in the manner indicated in paragraph 7 “Rights of interested parties”.

Once consent has been revoked, the Data Controller will send the User an email to confirm that consent has been revoked.

6) Communication, dissemination and transfer of personal data

Personal data may be shared exclusively for technical, administrative, and legal purposes with professional firms that provide assistance and consultancy in accounting, tax, administrative, legal, fiscal, and financial matters.

Personal data will not be disclosed to third parties without the interested party’s consent, except as required by law.

In the event that the Data Controller discloses personal data to third-party companies operating on the Data Controller’s behalf under specific contractual relationships, the transfer will be limited to strictly necessary personal data, tied to the purposes for which the data was collected, and all appropriate measures will be adopted to ensure an adequate level of data protection, in full compliance with applicable legislation.

7) Rights of interested parties

The interested party has the right to exercise all the rights recognized by the GDPR and further specified in Articles 15 to 23 of the same regulation.

The data subject has the right to request from the data controller access to the personal data held by the latter, rectification, erasure, or portability of the same, or restriction of processing concerning him or her, or to object to the processing of personal data.

The interested party may exercise his/her rights towards the Data Controller by sending a communication.

Please note that any corrections, deletions, or limitations on processing carried out at the request of the interested party, unless this proves impossible or involves a disproportionate effort, will also be communicated by the Data Controller to each of the recipients to whom the data has been transmitted.