Information on the processing of personal data pursuant to Articles 13 and 14 of regulation (EU) 2016/679 ("GDPR")
Premise
Pursuant to current privacy legislation, the sole owner of the personal data processed in the context of the activities carried out through this site www.pheal.it ("Site"), of which it is the owner, is and remains the company Pheal di Giulia Capra (“Pheal”).
Therefore, Pheal as Data Controller informs you that the data you provide when accessing the Site and interacting with it and/or installing the application for mobile devices will be processed in accordance with the provisions of the following information.
The personal data controller is Pheal di Giulia Capra, a company with registered office in Brescia (Bs) Via Fabio Filzi, 84.
To exercise your rights, you can contact the Data Protection Officer ("DPO") by writing to:
To exercise your rights, you can contact the Data Protection Officer ("DPO") by writing to:
- pheal@pec.it
- Pheal di Giulia Capra, Brescia (BS) Via Fabio Filzi,84
Pheal processes the personal data of its customers for the following purposes:
(a) to register on the Site and/or to download any related App, or to proceed with the purchase of Pheal goods or services through the Site and, therefore, perform any activity connected, in particular, to the selection of products or services , to the pre-contractual phase and to the management of the cart, including the so-called abandoned cart (i.e. reservations not concluded with the purchase), the sending of orders and/or the relative acceptance, the shipment, the delivery and/or the possible exercise of the right of withdrawal and the consequent withdrawal of the goods or any other fulfillment foreseen in the general conditions of sale of Pheal;
(b) to allow the use of services reserved for registered Users as per the conditions of use of the Site in which the supply of goods or services at the request of the Customer is envisaged such as sending messages to receive customer assistance, for the booking of goods and services, for the release of reviews and comments by Users in special online forms;
(c) for the performance of any administrative and accounting activity connected to the registration on the Site and/or related applications, the making of a purchase through the Site, the protection of one's interests in carrying out the business activity for the proper functioning of the Site, as well as to fulfill legal obligations;
(d) for sending communications aimed at the promotion and/or direct sale of products or services similar to those already purchased/used by the Customer (so-called "soft spamming"), without prejudice to the Customer's right to object at any time ;
(e) to send commercial communications on products and services of the Site and/or of Pheal and/or third parties, special offers, promotions and news, coupons, to carry out market research, by means of automated systems, e-mail, sms, mms, fax, or similar, and/or by postal service (so-called "marketing purposes");
(f) for the analysis of preferences and consumption habits and the processing of personal preferences and interests of the Customer through automated systems and the transmission of personalized offers through the Site and any appropriate App (so-called "profiling" purposes );
(g) for the transfer and/or communication of data to third parties operating in the sectors mentioned only indicatively: cosmetics in general, products for beauty, wellness and men's and women's fashion, perfumery and make-up, the beauty sector, so that said third parties can use the data for "their own" marketing purposes or those of third parties in any case falling within the categories indicated above (so-called "communication to third parties" purposes);
(h) for statistical and historical purposes (only with anonymous data).
Personal data is processed with manual and electronic tools and is stored in the appropriate electronic database. The personal data contained in the aforementioned automated information system, as well as those kept in the electronic archives of the Data Controller, are processed in compliance with the provisions of current legislation and the GDPR regarding security measures, in order to minimize the risk of destruction, accidental or fraudulent loss, modification, unauthorized disclosure or access, or treatment not in accordance with the purpose of the collection.
Furthermore, personal data is kept for the time necessary to achieve the aforementioned purposes, as well as to fulfill the legal obligations imposed for the same purposes.
(a) to register on the Site and/or to download any related App, or to proceed with the purchase of Pheal goods or services through the Site and, therefore, perform any activity connected, in particular, to the selection of products or services , to the pre-contractual phase and to the management of the cart, including the so-called abandoned cart (i.e. reservations not concluded with the purchase), the sending of orders and/or the relative acceptance, the shipment, the delivery and/or the possible exercise of the right of withdrawal and the consequent withdrawal of the goods or any other fulfillment foreseen in the general conditions of sale of Pheal;
(b) to allow the use of services reserved for registered Users as per the conditions of use of the Site in which the supply of goods or services at the request of the Customer is envisaged such as sending messages to receive customer assistance, for the booking of goods and services, for the release of reviews and comments by Users in special online forms;
(c) for the performance of any administrative and accounting activity connected to the registration on the Site and/or related applications, the making of a purchase through the Site, the protection of one's interests in carrying out the business activity for the proper functioning of the Site, as well as to fulfill legal obligations;
(d) for sending communications aimed at the promotion and/or direct sale of products or services similar to those already purchased/used by the Customer (so-called "soft spamming"), without prejudice to the Customer's right to object at any time ;
(e) to send commercial communications on products and services of the Site and/or of Pheal and/or third parties, special offers, promotions and news, coupons, to carry out market research, by means of automated systems, e-mail, sms, mms, fax, or similar, and/or by postal service (so-called "marketing purposes");
(f) for the analysis of preferences and consumption habits and the processing of personal preferences and interests of the Customer through automated systems and the transmission of personalized offers through the Site and any appropriate App (so-called "profiling" purposes );
(g) for the transfer and/or communication of data to third parties operating in the sectors mentioned only indicatively: cosmetics in general, products for beauty, wellness and men's and women's fashion, perfumery and make-up, the beauty sector, so that said third parties can use the data for "their own" marketing purposes or those of third parties in any case falling within the categories indicated above (so-called "communication to third parties" purposes);
(h) for statistical and historical purposes (only with anonymous data).
Personal data is processed with manual and electronic tools and is stored in the appropriate electronic database. The personal data contained in the aforementioned automated information system, as well as those kept in the electronic archives of the Data Controller, are processed in compliance with the provisions of current legislation and the GDPR regarding security measures, in order to minimize the risk of destruction, accidental or fraudulent loss, modification, unauthorized disclosure or access, or treatment not in accordance with the purpose of the collection.
Furthermore, personal data is kept for the time necessary to achieve the aforementioned purposes, as well as to fulfill the legal obligations imposed for the same purposes.
Pheal processes the personal data freely entered by the Customer on the Site and/or on any connected App, or entered by the Customer via connection to social platforms (such as, in particular, personal data, tax codes, contact details, telephone and/or fax numbers , e-mail addresses, data contained in comments or reviews, etc.), as well as autonomously generated data of a technical nature (in particular, IP addresses, log files relating to navigation on the Site, purchases made, etc.) .
Pheal will keep, within the terms of the law, the log files and IP addresses used when making an online purchase, in order to prevent and ascertain any fraud in online transactions. With particular reference to social platform plugins, it should be noted that, if voluntarily selected by the Customer, Pheal will collect from these platforms the data necessary for registration on the Site. Pheal has no possibility of defining the purposes and methods of processing User data by said platforms to which it has adhered by accepting their privacy policy and giving specific consents.
Pheal will keep, within the terms of the law, the log files and IP addresses used when making an online purchase, in order to prevent and ascertain any fraud in online transactions. With particular reference to social platform plugins, it should be noted that, if voluntarily selected by the Customer, Pheal will collect from these platforms the data necessary for registration on the Site. Pheal has no possibility of defining the purposes and methods of processing User data by said platforms to which it has adhered by accepting their privacy policy and giving specific consents.
To make a payment on the Site by credit card, the Customer must enter the confidential data of the credit card (card number, holder, expiration date, security codes). These data will be acquired by the payment service provider who will act as independent data controller, without passing through the Pheal server. The data will be acquired in encrypted format and according to the security requirements established by the PCI certification. Pheal will only keep track of the last four digits of the credit card number and the expiration date of the same only and exclusively to prevent any fraud in online payments. The payment service provider uses the TLS Protocol (Transport Layer Security).
The provision of data for the purposes referred to in points (a), (b) and (c) of the art. 2 above is necessary and, therefore, failure to provide the personal data in question will make it impossible for the Customer to conclude the procedures for purchasing, selling, delivering and/or returning the goods, to use the services reserved for registered Users or by the latter requested from time to time as indicated in the conditions of use of the Site, as well as the performance of administrative and accounting activities by Pheal. Consent to the processing of personal data for the aforementioned purposes is not required, in particular, pursuant to art. 6, par. 1, lit. b), of the GDPR and current legislation.
With reference to the purpose referred to in point (d) of the art. 2 above, the consent to the treatment is not necessary in accordance with current legislation, also without prejudice to the right of the Customer to object at any time to the sending of communications according to the methods indicated below.
With reference to the purpose of the processing referred to in points (e), (f), (g), consent to the processing of personal data is purely optional, it being understood that failure to provide it will make it impossible
a) for the Customer to receive information and/or commercial communications relating to products and/or services from Pheal or third parties, including those belonging to the product sectors indicated above, and to benefit from any promotions offered by them,
b) for Pheal to analyze the Customer's consumption habits in order to elaborate and send specific offers based on the Customer's tastes and preferences. The Customer is advised that, according to the law, where he receives promotional communications from third parties, these must release their own information - for which Pheal is not responsible - containing, in addition to the elements required by articles 13 and 14 of the GDPR, also the origin of the personal data communicated to them and that is the indication that they come from Pheal, so that the Customer can also contact Pheal if necessary in order to oppose the treatment pursuant to art. . 21 of the GDPR. Furthermore, third parties must provide the Customer with a suitable contact address (e.g. an e-mail address) at which he can usefully and quickly, economically and effectively exercise the rights referred to in the GDPR.
With reference to the purpose referred to in point (d) of the art. 2 above, the consent to the treatment is not necessary in accordance with current legislation, also without prejudice to the right of the Customer to object at any time to the sending of communications according to the methods indicated below.
With reference to the purpose of the processing referred to in points (e), (f), (g), consent to the processing of personal data is purely optional, it being understood that failure to provide it will make it impossible
a) for the Customer to receive information and/or commercial communications relating to products and/or services from Pheal or third parties, including those belonging to the product sectors indicated above, and to benefit from any promotions offered by them,
b) for Pheal to analyze the Customer's consumption habits in order to elaborate and send specific offers based on the Customer's tastes and preferences. The Customer is advised that, according to the law, where he receives promotional communications from third parties, these must release their own information - for which Pheal is not responsible - containing, in addition to the elements required by articles 13 and 14 of the GDPR, also the origin of the personal data communicated to them and that is the indication that they come from Pheal, so that the Customer can also contact Pheal if necessary in order to oppose the treatment pursuant to art. . 21 of the GDPR. Furthermore, third parties must provide the Customer with a suitable contact address (e.g. an e-mail address) at which he can usefully and quickly, economically and effectively exercise the rights referred to in the GDPR.
The personal data provided by the Customer for the purposes described in art. 2 above, may be brought to the attention of and/or communicated to the following recipients:
- employees and/or collaborators in any capacity of the Pheal company and/or of the companies to which it turns for the performance of administration, accounting and IT and logistical support activities;
- public and/or private subjects, natural and/or legal persons (legal, administrative and tax consultancy firms, shippers and couriers, any IT companies and any other subject, including third-party sellers operating on the Marketplace) which Pheal uses in the carrying out the activities referred to in points (a), (b) and/or (c) of the art. 2;
- to private individuals, natural or legal persons also operating outside the EU territory, without prejudice to the use in contracts stipulated with such third parties of the application of the bilateral agreements in force and/or the standard contractual clauses for the transfer of personal data to them, which Pheal may make use of for carrying out the activities referred to in points (d), (e), (f) of the art. 2 above (for example: companies that send information and/or promotional communications, companies that process the consumption habits of Users, etc.), as well as, with reference to the purposes referred to in point (g) of the 'art. 2, to third parties operating also outside the EU territory in the sectors mentioned in point (g) of article 2;
- to all those subjects (including the Public Authorities) who have access to the data by virtue of regulatory or administrative provisions.
All personal data provided by Users in relation to registration and purchase through the Site and any connected are not subject to disclosure.
Pursuant to articles 15 et seq. of the GDPR and current legislation, the Customer has the right, as well as to lodge a complaint with the Italian Guarantor for the protection of personal data and to revoke any consent given at any time, to:
a) obtain confirmation of the existence or not of personal data concerning him and their communication in an intelligible form, receiving them in a structured, commonly used and readable format with the possibility of transmitting them to another holder ("Right to portability");
b) get infos:
(1) on the origin of personal data, on the purposes and methods of treatment, on the logic applied in case of treatment carried out with the aid of electronic instruments;
(2) on the identification details of the Data Controller, of the Data Processor(s) and of the Data Protection Officer;
(3) on the subjects or categories of subjects to whom the data may be communicated or who can become aware of them in their capacity as designated representative on the territory of the State, managers or designated;
c) get:
(1) the updating, rectification or integration of data concerning him or, in the event of a dispute regarding the correctness of the data, the limitation of the processing of the same for the time necessary for the appropriate checks,
(2) the transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is necessary for the purposes for which the data were collected or subsequently processed,
(3) the attestation of the fact that the operations referred to in the preceding points have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right;
d) oppose, in whole or in part:
(1) to the processing of data concerning him, even if pertinent to the purpose of the collection;
(2) to the processing of personal data concerning him, envisaged for the purposes of commercial information or the sending of advertising material or direct sales or for carrying out market research or commercial communication;
e) obtain cancellation without unjustified delay ("Right to be forgotten") in the event that the data are no longer necessary with respect to the purposes for which they were collected or otherwise processed, have been processed unlawfully or in the event that the Customer requests it or opposes all or part of the treatment;
f) obtain the limitation of treatment in the event that the data:
(1) are processed unlawfully but the Customer opposes their cancellation,
(2) are necessary for the Customer to establish, exercise or defend a right,
(3) an assessment regarding the legitimate reasons for processing by the Data Controller is pending.
The above rights may be exercised with a request to Pheal, as owner, at the e-mail address pheal@pec.it, with reference to the rights under d), also via a specific link (Unscribe function) to any e- e-mail with promotional or informative content sent by Pheal or by accessing, after logging in to the Site, the "My data" section and deselecting the unsolicited treatment.
a) obtain confirmation of the existence or not of personal data concerning him and their communication in an intelligible form, receiving them in a structured, commonly used and readable format with the possibility of transmitting them to another holder ("Right to portability");
b) get infos:
(1) on the origin of personal data, on the purposes and methods of treatment, on the logic applied in case of treatment carried out with the aid of electronic instruments;
(2) on the identification details of the Data Controller, of the Data Processor(s) and of the Data Protection Officer;
(3) on the subjects or categories of subjects to whom the data may be communicated or who can become aware of them in their capacity as designated representative on the territory of the State, managers or designated;
c) get:
(1) the updating, rectification or integration of data concerning him or, in the event of a dispute regarding the correctness of the data, the limitation of the processing of the same for the time necessary for the appropriate checks,
(2) the transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is necessary for the purposes for which the data were collected or subsequently processed,
(3) the attestation of the fact that the operations referred to in the preceding points have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right;
d) oppose, in whole or in part:
(1) to the processing of data concerning him, even if pertinent to the purpose of the collection;
(2) to the processing of personal data concerning him, envisaged for the purposes of commercial information or the sending of advertising material or direct sales or for carrying out market research or commercial communication;
e) obtain cancellation without unjustified delay ("Right to be forgotten") in the event that the data are no longer necessary with respect to the purposes for which they were collected or otherwise processed, have been processed unlawfully or in the event that the Customer requests it or opposes all or part of the treatment;
f) obtain the limitation of treatment in the event that the data:
(1) are processed unlawfully but the Customer opposes their cancellation,
(2) are necessary for the Customer to establish, exercise or defend a right,
(3) an assessment regarding the legitimate reasons for processing by the Data Controller is pending.
The above rights may be exercised with a request to Pheal, as owner, at the e-mail address pheal@pec.it, with reference to the rights under d), also via a specific link (Unscribe function) to any e- e-mail with promotional or informative content sent by Pheal or by accessing, after logging in to the Site, the "My data" section and deselecting the unsolicited treatment.
Updated 01/01/2020
Discover the precious benefits of the products made
with the Vine Sap.
They effectively stimulate the skin in a completely safe way.
They regulate the skin microbiota by nourishing the vitality of the cells.
They increase the hydration and elasticity of the skin by regenerating it.
