The Company REVEALTH srl wishes to inform the interested parties object of the treatment, that the personal data referring or referable to the interested party, are treated by the Writer in full compliance with the current legislation on data processing and the confidentiality obligations that have always inspired us.

"Personal data processing" means any operation or set of operations, carried out even without the aid of electronic instruments, concerning the collection, registration, organization, storage, consultation, processing, modification, the selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, cancellation and destruction of data, even if not recorded in a database.

Pursuant to article 13 of the GDPR (EU Regulation 679/2016), in relation to the personal data that we process following the establishment of reciprocal contractual and working relationships, we disclose the following information.

Data controller

The "Data Controller" for all legal purposes is REVEALTH srl with registered office in via Bazzanese, 32/7, 40033 Casalecchio di Reno (BO), which can be contacted at the email address revealthsrl@gmail.com.

Purpose of the treatment

The personal data that the interested party provides through the "contact" page of the site

www.omniaskinlab.com

are acquired and processed mainly:

- to send material of a training or informative nature to the email address indicated;

- for processing analysis for statistical purposes.

In relation to any subsequent commercial commitments, the data of the interested party provided in the manner described above or provided subsequently, may be processed for contractual requirements and the consequent fulfillment of legal and fiscal obligations, as well as for automated profiling activities; this treatment will take place for the entire duration of the commercial/contractual relationship and also subsequently, for the fulfillment of legal obligations and for administrative and fiscal purposes.

As part of the purpose for which personal data is collected, the Company REVEALTH srl carries out the processing of said data according to the principles of correctness, lawfulness, transparency and protection of the confidentiality of the rights of the interested party.

Nature of the contribution

Personal data is always collected from the interested party.

The provision of said data, necessary for the purposes described, is indispensable for the complete execution of the communication, marketing, commercial and contractual activity; any refusal to provide such data could lead to the failure or partial realization of the Company's services.

Methods of treatment

Data processing takes place according to the principles of correctness, lawfulness and transparency, through the use of tools and procedures suitable for guaranteeing security and confidentiality and can be carried out both through paper supports and through the aid of electronic instruments.

The treatment is carried out with the use of appropriate security measures to minimize the risk of unauthorized access to data by third parties, their destruction and / or deterioration, and to guarantee confidentiality, pursuant to art. 32 of the GDPR.

Retention of personal data

Personal Data will be kept only for the time necessary for the purposes for which they are collected, respecting the principle of minimization referred to in article 5, paragraph 1, letter c) of the GDPR as well as the legal obligations to which the Data Controller is required. More information on storage and processing times is available from the Data Controller.

Data communication

Personal data will not be disclosed in any way, while they may be communicated by us:

- to the persons in charge, duly appointed, of their treatment within the Company;

- to bodies and associations connected to the Company;

- to subjects who need to access such data for auxiliary purposes to the relationship between our Company and the interested party, within the limits strictly necessary to carry out the auxiliary tasks entrusted to them, such as for example : credit institutions, administrative consultancy (accountant).

Special categories of personal data

When sending curriculum vitae, pursuant to articles 26 and 27 of the Privacy Code and articles 9 and 10 GDPR 2016/679, the interested party could voluntarily provide, to the undersigned Company, data that can be classified as "particular categories of personal data" (i.e. those data that reveal "racial or ethnic origin, political opinions, religious beliefs or philosophical, or trade union membership… genetic data, biometric data intended to uniquely identify a natural person, data relating to health or sex life or sexual orientation of the person”). This category of data may be processed by the Company only with the consent of the interested party, expressed in writing.

Rights of the interested party

The subject interested in the treatment may exercise the rights referred to in articles at any time. 15-22 of the GDPR:

1. obtain confirmation as to whether or not personal data concerning you are being processed and, in this case, to obtain access to personal data and all the information required by art. 15 of the GDPR;

2. obtain the rectification of inaccurate personal data concerning you without unjustified delay. Taking into account the purposes of the processing, you have the right to obtain the integration of incomplete personal data, also by providing a supplementary declaration;

3. obtain the cancellation of your personal data without unjustified delay;

4. obtain the limitation of the treatment when one of the hypotheses foreseen by the art occurs. 18 of the GDPR;

5. receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning the interested party provided to the undersigned Company;

6. object at any time, for reasons related to your particular situation, to the processing of your personal data pursuant to article 6, paragraph 1, letters e) of) of the GDPR. In this case, the company will refrain from further processing the personal data unless there are binding legitimate reasons to proceed with the processing which prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or defense of a right in court;

7. not be subjected to a decision based solely on automated processing, which produces legal effects concerning you or which significantly affects your person in a similar way. This right does not apply in cases governed by art. 22, paragraph 2 of the GDPR;

8. contact the Supervisory Authority to complain if you believe that your data has been processed unlawfully.