We hereby inform you that the EU Regulation 679/2016 on the protection of natural persons with regard to the processing of personal data, as well as the free circulation of such data, known as the General Data Protection Regulation (hereinafter, the "GDPR" or the "Regulation"), provides for the protection of individuals with respect to the processing of personal data. Pursuant to the aforementioned regulation, data processing must be characterised by the principles of correctness, lawfulness and transparency and the protection of your confidentiality and rights. This constitutes the disclosure provided to data subjects pursuant to Art. 13 of the GDPR.

Data controller

With reference to processing activities related to the organisation, management and promotion of Milano Beauty Week, an event organised by Associazione Nazionale Imprese Cosmetiche - Cosmetica Italia (hereinafter “MBW” or the “Event”), for which they jointly determine the processing purposes and means described below in this disclosure,

serve as Joint Data Controllers and, pursuant to Art. 26 of the GDPR, have signed a joint data controller agreement that governs their respective responsibilities as regards compliance with the obligations in the Regulation.

In this disclosure, Cosmetica Italia, Cosmoprof and Equipe International will be jointly referred to as the "Joint Data Controllers".

Each of the Joint Data Controllers has appointed a Data Protection Officer (DPO) or Data Protection Contact Person, who can be contacted at the following addresses:

The main content of the aforementioned joint data controller agreement is available at the offices of the Joint Data Controllers, and can be requested by writing to the e-mail addresses provided above.

Type of data processed

The identification and contact data that you provide by filling in the registration form for the MBW newsletter are processed.

The processing activity in question neither regards special categories of personal data, as identified by Art. 9(1) of the GDPR, nor personal data relating to criminal convictions and offences, as indicated in Art. 10 of the GDPR.

Processing purpose, legal bases and nature of data provision

The personal data you provide will be processed for the following purposes:

a) Subscription to the Milan Beauty Week newsletter

If you request subscription to the newsletter, the data you provide will be processed by the Joint Data Controllers to send the newsletter by e-mail, which contains information on the current edition of the Milano Beauty Week and updates on upcoming editions of the Event. The data will be processed to fulfil your newsletter subscription request. You can unsubscribe from the newsletter at any time by clicking the "Unsubscribe" option at the bottom of each e-mail, or by sending an e-mail to privacy@cosmeticaitalia.it. You will also find the information necessary to exercise your rights in the following paragraph, “Rights of data subjects".

If data for the purposes indicated above is not provided, it will not be possible for us to proceed with your subscription to the newsletter.

b) Additional purposes of direct marketing by e-mail, telephone calls, paper mail, SMS carried out independently by each Data Controller

With your express consent, which is given freely, is optional and always revocable, Cosmetica Italia, Cosmoprof and Equipe International, as independent Data Controllers, will be able to use your contact details for their own direct marketing purposes, such as for sending information and promotional material referring to its products, services, or events, direct sales and its own market research. These activities will be carried out by e-mail, telephone calls, SMS, and traditional mail.

The legal basis for this processing activity is your consent, which is given freely and always revocable. You may withdraw your consent at any time to the processing of your data for the purposes referred to in (c) with reference to all or some of the communication channels indicated above, and all or some of the processing activities of the Data Controllers. You can exercise these rights by contacting the Data Controller(s) of reference, using the methods and channels indicated in the following paragraph "Your rights".

Your consent for the purposes of direct marketing indicated in (b) is optional, and refusal does not in any way condition your subscription to the Milano Beauty Week newsletter.

Processing methods

Your personal data will be processed with and without the aid of electronic tools, according to logics and procedures consistent with the above-mentioned purposes and in compliance with the GDPR, including profiles of confidentiality and security.

Communication of your personal data to third parties

Personal data is accessible to our duly authorised and trained staff as necessary, and is sent to third parties when communication is required by laws and regulations applicable to legitimate third party recipients of the communications, such as authorities and public bodies for their respective institutional purposes, and the police.

Your personal data is also shared with our suppliers of services and spaces, such as, self-employed collaborators, also in associated form, companies specialised in data processing, advertising, and services of a technical, IT and organisational nature functional to the above-mentioned purposes, etc. We only provide these entities with the data necessary to perform the agreed upon services, and they act as our Data Processors on the basis of duly formalised instructions.

Disclosure of Personal Data to Sponsors

On the basis of your express consent, which is freely given, optional and always revocable, Cosmetica Italia will be able to communicate your identifying and contact data to sponsoring companies of Milano Beauty Week operating in the banking, food, chemical, automotive, fashion, lighting, and style sectors, so that the latter can process your data, subject to their privacy policy in compliance with Art. 13 and 14 of the GDPR. Your consent for the communication of data to the categories of subjects indicated is optional, and your refusal does not in any way affect your subscription to the Milano Beauty Week newsletter.

Transfer of data outside of the European Union

Your personal data is not transferred outside of the European Union.

Storage of personal data

For the purposes of newsletter subscription, your data are stored by the Joint Data Controllers for a period of time that is proportionate to the purpose, and does not exceed the achievement of this purpose.

For marketing purposes, the data are stored by independent Data Controllers for the time strictly necessary for the pursuit of their purposes, in accordance with applicable legislation.

In cases where Joint Data Controllers and/or independent Data Controllers must fulfil a legal obligation or exercise or defend one's right in court, they are authorised to store the data for a different time period.

Your rights

You have the right to ask Cosmetica Italia to access your personal data, to rectify, integrate, or cancel them, and limit their processing at any time, also as regards the processing activities carried out under the Joint Data Controller regime indicated above in (a). You also have the right to object to the processing of your data at any time, as well as the right to data portability. To exercise the aforementioned rights and additional rights provided for in Articles 15 and following of the GDPR, Cosmetica Italia acts as a contact person for data subjects in order to manage their requests. To this end, data subjects may contact Cosmetica Italia at the following addresses:

Pursuant to Art. 26(3) of the GDPR, data subjects will be able to exercise their rights with each Joint Data Controller. To exercise the aforementioned rights, the data subject may also write to the following addresses:

***

For processing activities for marketing purposes indicated above in (b), carried out independently, you may exercise the aforementioned rights provided for in Articles 15 and following of the GDPR and easily revoke your consent by contacting the relevant Data Controller via the following methods and channels:

If you believe that your rights have been violated, you can contact the competent Privacy Authority, without prejudice to the possibility of directly contacting the Judicial Authority.