As stipulated in European Union Regulation no. 679/2016 (hereinafter “GDPR”) and in particular Art. 13, below we provide you with the information required by law regarding the processing of your personal data. Note to minors: We do not intentionally process data from minors under the age of 14, however if you are 14 or younger, please get permission from your parent/guardian before providing your personal information. The website www.marietbeauty.com (hereinafter the “Site”) is owned and operated by Magnolia di Marilisa Amodio, with registered office in Casamassima, Italy, Via Sammichele 83-85 P.IVA 07640910720

Magnolia di Marilisa Amodio complies with applicable data protection laws and constantly strives to improve the protection of its customers. This Privacy Policy informs you about the processing of your personal data in relation to the website www.marietbeauty.com, how it is handled and how services are made available through the Site

1. DATA CONTROLLER

The data controller of personal data is pursuant to Art. 26 GDPR – European Privacy Regulation:

– Magnolia di Marilisa Amodio, with registered office in Casamassima, Italy, Via Sammichele 83-85 P.IVA 07640910720

To contact the data controller you can write to: info@marietbeauty.com or send a registered letter to: Magnolia di Marilisa Amodio, with registered office in Casamassima, Italy, Via Sammichele 83-85 to the attention of Ms. Marilisa Amodio

1. WHAT IS PERSONAL DATA?

Personal data is information that relates to an identified or identifiable natural person, such as first name, last name, gender, e-mail address, telephone number, date of birth, and mailing address.

1. WHAT PERSONAL DATA ARE PROCESSED?

3.1 Data entered by the user

If you create your own personal user account, fill in the registration fields on the Site, or give us your consent, we process the personal data so provided, particularly the data as defined in Section 2.

3.2 Navigation data

The computer systems and software procedures used to operate this website acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected in order to be associated with identified data subjects, but which by its very nature could, through processing and association with data held by third parties, allow Users to be identified. This category of data includes IP addresses or domain names of the computers used by Users, addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the operating system and computer environment of the user. These data will be recorded in an anonymous and aggregate form and will be used, again in aggregate form, for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its proper functioning and are deleted, again in aggregate form, immediately after processing. The data could be used to ascertain liability in case of hypothetical computer crimes against the site.

1. WHEN DO WE PROCESS YOUR DATA?

We process your personal information when you create your personal user account, when you order products through our website, or when you sign up for our newsletter. Unless otherwise specified in the following provisions, the legal basis for this data processing is Article 6 paragraph 1 (b) and (a) GDPR (execution of a contract and consent).

1. PURPOSE OF DATA PROCESSING

5.1 Account

To make purchases on our site, you must create a personal account (hereinafter referred to as “user account”). You can store personal information in the user account, and facilitate shopping in our online store. To create a personal user account we need your personal details, first and last name and, as appropriate, address and phone number. In addition, users must provide their e-mail address and a password of their choice. The e-mail address provided by users also serves as login information for the user account. In addition, users can store their personal information within the user account and then conveniently store in the online store. Information can be updated at any time in the personal area of the user account (“User Profile”). Upon registration, the User will be asked to enter personal data, some of which – from time to time expressly identified as such – will be mandatory and essential to confer for the purposes of registration (e.g. the e-mail address at which to receive Newsletters). Other data may or may not be provided, at the User’s discretion, and failure to provide such data is in no way detrimental to registration, but may allow the User only partial use of the Services. Of course, users can delete their user accounts at any time without giving reasons. The easiest way to do this is to send an e-mail to info@marietbeauty.com. The legal basis for this data processing is Article 6 paragraph 1 b) GDPR (performance of a contract).

5.2. Order processing in our online store

Regarding the ordering of products in our online store, the processing of your personal data is intended to enable and optimize the fulfillment of your order, including payment and delivery. When payment is made by credit card, we receive the payment ID and the last four digits of the credit card number from our payment service provider. We need this for authentication and allocation of your order and thus for your security. Personal data required for payment are collected directly by the payment service provider. The legal basis for the above data processing is Art. 6 para 1 b) GDPR (performance of a contract) and Art. 6 para 1 f) GDPR (legitimate interest, based on our interest in offering you a secure credit card payment option). Among other things, we also check all previous orders placed from your customer account. The system also checks if the delivery address is different from the billing address, if it is a new delivery address, or if the order is to be delivered to an intermediate center. After choosing the payment service provider, you will be asked for the information needed to use that service. This payment information is forwarded directly to the respective payment service provider and is not stored by Magnolia di Marilisa Amodio. We save billing and delivery address information in your user account so that you do not need to enter it the next time you make a purchase. This data can be changed at any time in the future.

5.3 Newsletters

We offer all users of our community (users of www.marietbeauty.com) the opportunity to receive our newsletter. To activate it, users can register with their e-mail address on the appropriate page. Users may revoke their consent at any time without giving reasons. The easiest way to do this is to click on the “Unsubscribe” link found in each newsletter. The Newsletter may also contain advertising banners, advertisements and offers from both the Company and third parties. The legal basis for this process is Article 6(1)(a) GDPR (consent).

5.4 Contact via contact form

If you send us requests for information using the contact form, we will process the information you provide, including your contact information, in order to process the request. In case of subsequent requests, this additional data will also be stored. The legal basis is Article 6.1 (b) GDPR (fulfillment of contract – processing of user data is necessary for the fulfillment of the contract to answer questions or requests) as well as Article 6 paragraph 1 (f) GDPR (balancing of interests – based on our interest in processing requests from users of our website). In its capacity as Data Controller, Magnolia di Marilisa Amodio informs that Users’ personal data, subject to their consent, may be processed by Magnolia di Marilisa Amodio for the following purposes: a) sending informative, promotional and advertising material related to Magnolia di Marilisa Amodio’s brands (by way of example but not limited to: sending newsletters, promotions, etc.); b) to elaborate studies and statistical research;) to collect data and information in a general and particular way on consumers’ orientations and preferences and process them through electronic tools in order to identify the products that may be of greatest interest to them, so as to send promotional communications expressly addressed to these products (so-called profiling).

1. MODE AND PLACE OF PROCESSING

Personal data are processed by automated means for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, illegal or incorrect use, and unauthorized access. The database can be accessed only by authorized parties through ways that guarantee its protection and confidentiality, thanks to the adoption of security measures prepared to prevent data loss, illegal or incorrect use and unauthorized access. Despite all measures taken to safeguard Your information we cannot guarantee, in the state of technology, that unauthorized access or misuse of services by third parties can be ruled out.

PLACE OF DATA PROCESSING

Processing related to the Services of this Site takes place at the Data Controller’s offices and is handled only by technical personnel of the Data Controller appointed for this purpose in the capacity of appointee, or by any appointees for occasional maintenance operations. No data from the web service is disclosed or disseminated. Personal data provided by Users who submit requests to join the Services are used for the sole purpose of performing the requested service or performance and are disclosed to third parties only when necessary for that purpose. In its capacity as data controller, Magnolia di Marilisa Amodio may proceed, either directly or through any external data processors indicated on the Site, to save the personal data of Users in special servers and to carry out all other processing operations through the personnel – of the controller and the person in charge – appointed for this purpose in the capacity of appointee, or through any external appointees during maintenance operations.

1. CONTROLLERS

We contract external data processing service providers (e.g., order submission, software newsletters, data centers) to operate our Web site. If necessary, these service providers also process personal data. Service providers are carefully selected and monitored by us. Data are processed only in accordance with our instructions and are also bound by this Data Protection Statement. Only in the presence of an express authorization from the User, Magnolia di Marilisa Amodio proceeds to use his data for the same activities mentioned in the previous point with the help of automated tools without the intervention of an operator and/or for the other purposes from time to time authorized by the User. The updated list of all Data Processors is available at each of the Data Controller’s offices and can be requested at the following e-mail address: info@marietbeauty.com. This list may later be supplemented and/or updated as needed.

1. RETENTION PERIOD

Personal data will be kept only as long as necessary to achieve the purposes stated herein or as required by law (applicable civil, tax and fiscal obligations). The data you enter under Section 3.1 will therefore be deleted no later than 10 years after the expiration of any retention periods provided for by commercial and tax law. Automatically recorded data, as defined in Section 3.2, will therefore be deleted or anonymized after 24 months.

1. YOUR RIGHTS.

As a data subject, under Articles 15-21 of the GDPR you have the right to:

1. (a) obtain confirmation of the processing of Your personal data;

1. b) access to Your personal data and know its origin (when the data is not obtained from You directly), the purposes and purposes of the processing, the data of the persons to whom it is communicated, the period of retention of Your data or the useful criteria for determining it;

1. (c) obtain the updating and rectification of your personal information so that it is always exact and accurate;

1. (d) obtain cancellation in the cases provided for in Art. 17 of the GDPR, of your personal data or request restriction of processing;

1. (e) obtain a copy of your personal information.

You can then find out what personal data we hold about you, their origin and how they are used, request that they be updated, corrected or supplemented, as well as, in the cases provided for by the provisions in force, that they be erased, that their processing be restricted or that you oppose their processing. If you wish, you can request to receive the personal data we hold about you in an electronically readable format and, where technically feasible, we may transfer your data directly to a third party specified by you.

Any requests will be processed no later than one month after receipt, subject to the possibility of extending this period for an additional two months if necessary, taking into account the complexity and number of requests received by the Holder.

1. CHANGES TO THE PRIVACY POLICY

We reserve the right to change this Privacy Policy at any time. We will provide notice of material changes to this Privacy Policy by sending an e-mail to the address you have provided. Such substantive changes will take effect seven (7) days after such notice is provided.

1. USE OF COOKIES

Cookies are small files recorded on your device. Cookies can be used to determine if a connection has already been made between your device and our pages. Only the cookie stored on your device is identified. No personal data is stored in the “Cookies” folder.

This site uses technical cookies, direct or third-party, aimed at ensuring the proper functioning of the site, without which the same navigation would not be possible; analytics cookies are also used, in order to collect information on the number of users and how they navigate the same site. So-called technical cookies are stored on the user’s device with the “Stay logged in” feature, which prevents the user from having to log in again during subsequent visits to our Web site. This feature is not available if you have disabled the storage of such cookies in your browser settings. The cookies described above are all collected and analyzed anonymously and in aggregate. The use of profiling cookies in any form is excluded. We encourage you, however, to carefully read our cookie policy for more information about cookies and similar devices we use, their respective purposes, and other relevant information.

1. WHO CAN YOU COMPLAIN TO?

If you have general questions about the information we collect and how we use it, please contact us by e-mail at info@marietbeauty.com

If you are not satisfied with our response, you can contact the Data Protection Authority (DPA):

Piazza di Monte Citorio, 121 – 00186 Rome

Phone: + 39-06-6967 71 / + 39-06-6967 72917

E-mail: urp@gpdp.it

COOKIE POLICY

Cookies are text strings created by a server and stored on the computer’s hard disk or on any device used by the user to access the Internet (tablet, smartphone, etc.) and then re-transmitted on subsequent Internet accesses by the user. Cookies can then be used to determine if a connection has already been made between your device and our pages. Only the cookie stored on your device is identified. No personal data is stored in the “Cookie” folder. This site uses technical cookies, direct or third-party, aimed at ensuring the proper functioning of the site, without which the same navigation would not be possible; analytics cookies are also used, in order to collect information on the number of users and how they navigate the same site. So-called technical cookies are stored on the user’s device with the “stay logged in” feature, which prevents the user from having to log in again during subsequent visits to our Web site. This feature is not available if you have disabled the storage of such cookies in your browser settings. The cookies described above are all collected and analyzed anonymously and in aggregate. The use of profiling cookies in any form is excluded. We encourage you, however, to carefully read our cookie policy for more information about the cookies and similar devices we use, their respective purposes, and other relevant information.

HOW MANY TYPES OF COOKIES ARE THERE?

There are two basic macro-categories with different characteristics:

technical cookies

third-party cookies.

Technical cookies are generally necessary for the proper functioning of the website and to allow navigation; without them, it may happen that pages are not displayed correctly or some services are not used. For example, a technical cookie is essential to keep you logged in throughout your visit to a website, or to store language settings, display settings, and so on.

Technical cookies can be further distinguished into:

• Browsing or session cookies, which ensure normal navigation and use of the website;
• Functionality cookies, which allow the user to navigate according to a set of selected criteria (e.g., language, products selected for purchase) in order to improve the service rendered to the user;
• analytics cookies, assimilated to technical cookies and used directly by the site operator to collect information, in aggregate form, on the number of users and how they visit the site.

Technical cookies may also be provided by third parties (so-called “third-party cookies”), and may correspond to all the types indicated above managed in an anonymous and aggregate form, or in a form that allows for the identification of website surfers, even if they are occasional. Finally, there are also profiling cookies, which have the task of profiling the user, and are used in order to send advertising messages in line with the preferences expressed by the user while browsing.

WHAT COOKIES DOES THIS SITE USE?

TECHNICAL NAVIGATION COOKIES This site uses technical cookies, direct or third-party, aimed at ensuring the proper functioning of the site, without which the same navigation would not be possible; analytics cookies are also used, in order to collect information on the number of users and how they navigate the same site. The cookies described above are all collected and analyzed anonymously and in aggregate. Legal basis for processing: Technical navigation and functionality cookies find their legal basis for processing in the performance of a contract to which you are a party (use of the site). Data retention period: for the duration of the site browsing session and persistent even after it ends.

ANALYTICAL COOKIES This site uses third-party “Google Analytcs” cookies, a statistical analysis service provided and operated by Google that allows for anonymous analysis of how users visit the site. The information generated by the cookie about your use of the website (including your IP address) is transmitted and stored on Google’s servers. Useful addresses to better understand the Google Analytics privacy policy and find consent collection forms:

– http://www.google.com/analytics/terms/it.html

– http://www.google.com/privacypolicy.html

– https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage#gajs

– https://support.google.com/analytics/answer/6004245

– https://tools.google.com/dlpage/gaoptout

Legal basis for processing: Analytical cookies find their legal basis in consent (via banner, optional and revocable at any time).

Data retention period: for the duration of the site browsing session and persistent even after it ends.

SOCIAL NETWORK COOKIES These are cookies that allow the user’s profile on social networks to interact with this site. These cookies are not essential for the operation of this website. The most common use is for the purpose of content sharing. For the management of information collected by “third parties” is governed by the related that can be verified within the social networks themselves. Below are the web addresses of the different disclosures and how to manage cookies, and how to disable them.

Facebook disclosure: https://www.facebook.com/help/cookies/

Facebook (configuration): log in to your account. Privacy section.

Twitter informative: https://support.twitter.com/articles/20170514

Twitter (configuration): https://twitter.com/settings/security

Linkedin information: https://www.linkedin.com/legal/cookie-policy

Linkedin (configuration): https://www.linkedin.com/settings/

Google+ information: http://www.google.it/intl/it/policies/technologies/cookies/

Google+ (configuration): http://www.google.it/intl/it/policies/technologies/managing/

PROFILATION COOKIES The Site uses profiling cookies with which you can note the preferences detected during each visit and thus create profiles that allow you to send messages that are more closely aligned with your preferences and interests, for example, allowing you to more quickly view the products you are looking for or offer you the most similar item. This Site also allows the use of third-party profiling cookies that serve to make you see our commercial proposals even when you visit other sites (retargeting).

1. First-party profiling cookies: used and installed by the Company to collect information about the user’s browsing habits with the aim of proposing advertising messages as relevant as possible to the user’s interests. This means that they are also used to limit the number of times the user views a given advertisement: for the Company it means communicating more effectively, for the user it means receiving advertisements that are less invasive and closer to his or her preferences. As you navigate through the Site, promotional cookies allow confirmation that you are viewing advertisements, showing you promotional content that may be of interest to you based on what you have previously visited. These cookies also allow, while you are browsing other sites, to show for promotional purposes content that you have recently viewed on the Site. The Site uses promotional cookies on an anonymous basis only: advertising is targeted but it is not identifiable who the user is. The promotional cookies used are permanent, although they remain on the user’s device for a limited time. They require your consent.

1. Third-party profiling cookies: used and installed by third parties to track the user’s web browsing and create profiles on their tastes, habits, choices… These cookies are managed by third-party companies such as TagMan, DoubleClick, AddThis. You can also find social buttons/widgets on the Site, which are those special “buttons” depicting social network icons (example, Facebook and Twitter). These “buttons” allow users who are browsing the site, to reach out and interact with a “click” directly with social networks. By clicking on social buttons/widgets, the social network acquires data about the user’s visit to the Site and simultaneously releases its own profiling cookies. They require your consent.

Below are the web addresses of the different disclosures, how to manage cookies, and how to disable them:

-Selligent: HTTPS://WWW.SELLIGENT.COM/THIRD-PARTY-COOKIES

-Salesforce: https://www.salesforce.com/it/company/privacy/full_privacy/

Legal basis for processing: Analytical cookies find their legal basis in consent (via banner, optional and revocable at any time).

Data retention period: for the duration of the site browsing session and persistent even after it ends.

YOUR RIGHTS WITH REGARD TO COOKIES

If you prefer that Google Analytics not use the collected data in any way, you can change the configuration of each browser differently. It is described in your browser’s help menu, which will let you know how to change your choices about cookies.

Below are the ways offered by the major browsers:

Internet Explorer: http://windows.microsoft.com/it-It/windows7/Block-enable-or-allow-cookies

Safari: http://www.apple.com/it/support

Chrome: https://support.google.com/chrome/answer/95647?hl=it&hlrm=en;

Firefox: http:%20i%

Opera: http://help.opera.com/Windows/10.20/it/cookies.html

Google Analytics cookies can also be rejected by following the procedure outlined by Google https://tools.google.com/dlpage/gaoptout

The site will still remain fully usable even where you have decided to disable the monitoring feature. For a permanent opt-out, the browser must accept permanent cookies. If your browser does not accept permanent cookies, then it is not technically possible to register an opt-out. Please use the features of your browser to disable tracking (see www.allaboutcookies.org in this regard).

To delete cookies from your smartphone/tablet’s Internet browser, you should refer to your device’s user manual.

GOOGLE MAP WIDGET

The site incorporates the Google Map widget with the activity map and this service involves the installation of cookies by Google. Instead, no information is shared by the site in which the widget is embedded. For more information, including on disabling these cookies, please see the following link: https://www.google.com/intl/it_it/policies/privacy/

TRANSFER OF PERSONAL DATA

Data collected using Google cookies may not be transferred outside the European Union, specifically to the United States of America. Data collected using all other cookies will not be disseminated.

EXERCISE OF RIGHTS

If you have general questions about the information we collect and how we use it, or to ask the Company for access to the data concerning you, its deletion, rectification of inaccurate data, supplementation of incomplete data, restriction of processing in the cases provided for in Art. 18 of the GDPR, as well as opposition to the processing in cases of legitimate interest of the company, please contact us by e-mail at info@marietbeauty.com.

You also have the right to withdraw your consent at any time for analytical cookies.

If you are not satisfied with our response, you can contact the Data Protection Authority (Garante per la protezione dei dati personali): Piazza di Monte Citorio, 121 – 00186 Rome Telephone: + 39-06-6967 71 / + 39-06-6967 72917 E-mail: urp@gpdp.it.