Pursuant to Article 13 of EU Regulation 2016/679 (GDPR), this notice explains the processing of your personal data under the Glam Affiliation programme, of which the controller is M.C.G. Consulting Srl (Tax Code/VAT No. 02724720996).
1. Purposes of processing
- Profiling (Article 4 GDPR), through the collection and categorisation of data freely provided on the basis — by way of example and not exhaustively — of consumption preferences, habits, needs and/or physical characteristics (hair colour and shape, complexion, face shape, etc., defined by the Regulation as biometric data), for the purpose of providing you with a high-quality, personalised service – subject to your explicit consent;
- Direct marketing, through the sending of newsletters via e-mail or SMS regarding the Controller's products and services – subject to your explicit consent.
2. Categories of data processed
First and last name; residential address; e-mail address; telephone number; social media contacts (Facebook, Instagram, TikTok and others) and biometric data concerning physical characteristics relating to the face and hair, subject to your explicit consent.
3. Processing methods
Processing will be carried out manually, in a partially automated manner and in an automated manner. Please note that profiling activities may take place in an automated manner. All technical, IT, organisational, logistical and procedural security measures required under Article 32 GDPR and Legislative Decree 196/03 will be adopted.
4. Nature of the data provided
The provision of data is optional and requires your explicit consent. Any refusal may compromise the proper continuation of this specific activity known as "Glam Affiliation", which provides for a service based on the provision of the requested data. In any case, refusal, even partial, will not cause you any detriment on the part of our salon.
5. Parties who may access the data
- employees and staff of the Controller, acting as persons in charge and/or processors and/or system administrators;
- third-party companies or other parties (marketing companies, credit institutions, professional firms, consultants, insurance companies, etc.) that carry out outsourced activities on behalf of the Controller, acting as external data processors.
Your data will not be transferred to other EU Member States or to third countries outside the EU.
6. Your rights (Article 15 GDPR)
- obtain confirmation of the existence of personal data concerning you;
- obtain information on the source, purposes, methods and logic of processing, and on the recipients;
- obtain the updating, rectification, completion, erasure, anonymisation or blocking of data;
- object, in whole or in part, to the processing or to the sending of advertising communications.
Where applicable, you also have the rights under Articles 16-21 GDPR (rectification, erasure, restriction, portability, objection) and the right to lodge a complaint with the Data Protection Authority.