Privacy Policy

The purpose of this Privacy Policy is to describe how the personal data of users of Cosmet services are processed .

This is information provided to those who purchase Cosmet services or connect to the website and the pages or third-level domains linked to it. The procedure under the current legislation provides for the protection of persons and other subjects with respect to the processing of personal data; in this regard, we would like to inform users that the "European Regulation 2016/679 on the Protection of Individuals with regard to the Processing of Personal Data and on the free movement of such data" (so-called GDPR) provides for the protection of individuals with regard to the processing of personal data as a fundamental right.

In accordance with Article 13 of Regulation (EU) 2016/679, users are informed that such processing will be based on the principles of fairness, lawfulness and transparency, protecting the confidentiality and rights of the subscriber. The processing of personal data that Cosmet intends to carry out is for the purpose of concluding, managing and executing contracts for the provision of the requested services; to organize, manage and execute the provision of services also by communicating the data to third party suppliers or companies in the Cosmet group; to comply with legal obligations or other obligations required by the competent Authorities. The processing will be carried out using computerized/manual methods; the data collected will also be used by Cosmet for the full and proper execution of the contract and will be made known to third parties for the defense of rights as well as in fulfillment of obligations required by law or regulations and upon request by the competent Authorities, and their processing will be based on the principles of fairness, lawfulness and transparency, protecting the confidentiality and rights of the Client and third parties.

The data controller is Cosmet with registered office in Via Europa n. 44, 20083 Vigano di Gaggiano (Mi) - Italy, which, in accordance with Article 29 of Legislative Decree 196/2003, and in compliance with Regulation (EU) 2016/679, has no obligation to appoint a D.P.O.

At any time, the Client may contact the Data Controller (Cosmet) by contacting the offices of the Data Controller to exercise his or her rights, as provided by current legislation.

Postal Address: Via Europa n. 44, 20083 Vigano di Gaggiano (Mi) - Italy
Phone: 02 9086389

Browsing and access data

The computer systems and software procedures used to operate Cosmet services acquire, in the normal course of operation, certain personal data that are transmitted implicitly in the use of Internet communication protocols. These are data related to telematic traffic that, by their nature, cannot be immediately associated with identified data subjects, but which, through processing or association with data held by third parties, could make it possible to identify users/visitors of the site (e.g. IP addresses). This data is used only for anonymous statistical information regarding the use of the service or to verify the correct functionality of the service. These data are kept by Cosmet for the period strictly necessary and in any case in accordance with the relevant regulations in force. The customer expressly acknowledges the existence of the log of connections (LOG-data relating to telematic traffic), compiled and kept by Cosmet in the terms and manner established by law. The aforesaid logbook constitutes full and incontrovertible evidence of the facts and acts performed by the Customer itself before Cosmet and/or Third Parties; it has the character of absolute confidentiality and may be produced and/or provided only upon request of the Persons expressly indicated by Law. Cosmet shall take all necessary technical and organizational measures to ensure the confidentiality of connection records.


On Cosmet's websites, including those developed by it on behalf of Clients, "cookies" (temporary markers) are used to enable faster access to them. A "cookie" is defined as an informational data, active only for the duration of the individual user-session, which will be transmitted from the website to the user's computer in order to allow for quick identification. The user can always request the deactivation of cookies by changing the browser settings, such deactivation, however, may slow down or prevent access to certain parts of the site. The session cookies used avoid the use of other computer techniques potentially detrimental to the privacy of users' browsing and do not allow the acquisition of personal data identifying the user.

Data provided by users

If the Customer intends to register in the database ofCosmet, in order to access the services provided by it, he/she will have to fill in a "form" in which he/she will give his/her express consent to the processing of data. The communication of data will be essential but not mandatory, and any refusal will have no consequences but may result in failure to timely fulfill the obligations assumed by Cosmet for the provision of the requested service.

Third-party sites and services

On Cosmet's web pages you may find hyperlinks to other websites, proposed to provide a better service to its users. Cosmet is in no way responsible for the content of websites that users may access through its site. The existence of a link to another site does not therefore imply approval or acceptance of responsibility by Cosmet regarding the content of the new site accessed, including in relation to the policy adopted for the processing of personal data, as well as its use.

Information security

All information collected is stored and maintained in secure facilities that restrict access to authorized personnel only. The facilities are continuously maintained to check for security breaches and to ensure that all information collected is safe from intrusion by any third party intending to take possession of it without authorization. Cosmet complies with all security measures described by applicable and current laws and regulations in the European Union, and takes all appropriate measures in accordance with currently state-of-the-art criteria to ensure and guarantee the confidentiality of users' personal data and minimize, as far as possible, the dangers posed by unauthorized access, removal, loss or damage to users' personal data. Right of access to personal data and other rights (Art. 7 D.Lgs 196/2003 - DIR.95/46/CE): The interested party has the right to obtain confirmation of the existence or non-existence of personal data concerning him/her, even if not yet recorded, and their communication in intelligible form. The interested party has the right to obtain information on: a) the origin of the personal data; b) the purposes and methods of processing; c) the logic applied in the case of processing carried out with the aid of electronic instruments; d) the identification details of the data controller, data processors and the designated representative; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, data processors or persons in charge of processing. The interested party has the right to obtain: a) the updating, rectification or, when interested, the integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed; c) attention that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except where this proves impossible or involves the use of means manifestly disproportionate to the protected right. The interested party has the right to object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning him/her, even if pertinent to the purpose of collection; b) to the processing of personal data concerning him/her for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication. Contacts All requests should be addressed to Cosmet P.I. and C.F. 02229550997, with registered office in Via Europa n. 44, 20083 Vigano di Gaggiano (Mi)- Italy.

This page is visible, by means of a link present on all pages of the Site in accordance with Article 122 second paragraph of Legislative Decree 196/2003 and following the simplified procedures for information and acquisition of consent for the use of cookies published in the Official Gazette No. 126 of June 3, 2014 and its register of provisions No. 229 of May 8, 2014.