If you are reading this policy, that implies that you have landed on our website. We provide you with this information so that you know how we process your personal data when you –browse our website or when you interact with us through it, e.g. when you write to us via the ‘Contact’ section. On all these occurrences, and in many more, we may process some of your personal data. We do so in accordance with EU Regulation 679/2016 (GDPR) and in accordance with the Italian Privacy Code as amended by Legislative Decree no. 101/2018.  

Who is the Data Controller for your personal data?
The Data Controller for your personal data collected through this website is LCS S.p.A. (SM2486), with main offices in Faetano in the Republic of San Marino (RSM), Strada del Marano, 95 Faetano, (hereinafter, the ‘Data Controller’). You can contact the Data Controller writing an e-mail to info@lcbeauty.sm, calling us at 0549-873201 or writing to us by post. In accordance with Art. 38 of Regulation (EU) 2016 /679 and with Art. 28 of San Marino’s Law no. 171/2018, a Data Protection Officer (DPA) has been appointed by the Data Controller. The DPA is company Consulenti Privacy S.r.l., with main offices in Via Valentini n. 11, fiscal code and VAT number 04391970409, ph.: 0541 1798723, e-mail address: dpo@iconsulentiprivacy.it. In accordance with Art. 27 of Regulation (EU) 2016 /679, LCS S.p.A. has appointed company Coswell S.p.A. with main offices in Funo di Argelato (BO), via P. Gobetti n. 4 (VAT number 00708541206) as its Representative within the territory of the European Union, representing a Data Processor which is based outside the EU.  

Why do we process your personal data and when do we collect them?

BROWSING DATA In the course of their normal operation, IT systems and software procedures used to operate this site gather certain personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of the computers and terminals used by users, URI/URL addresses of the resources requested, the time of the request, the method used to send the request to the server, the size of the response file, the number code indicating the status of the response from the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment.
Can we do so without your consent? Yes, as the data are necessary for Internet communication and to enable you to use this website (Art. 6f) of the GDPR).
How long do we keep this data? Browsing data do not persist for more than seven days - except where there is a need for judicial authorities to investigate certain criminal offences.  

COOKIE DATA
As a Data Controller, when you browse our website we collect some of your data for analytics as well as for processing your information, your preferences, and browsing experiences. To do so we use technologies such as cookies, whether they are first-party or third-party cookies.
Can we do so without your consent? In part. The collection of data which are useful for the proper functionality and security of our website occurs using technical cookies and is made on the basis of our legitimate interest (Art. 6f) of the GDPR). The collection of personal data using first-party and third-party cookies, which are not strictly necessary, will only take place with your express consent (Art. 6a) of the GDPR). We will inform you in that respect via a banner located at the bottom of the website when you log on for the first time. From the banner you may choose analytically which cookies you want to install. You can find more information on what cookies are, their function, etc. in our Cookie Policy.
How long do we retain these data? Browsing data is not retained for more than seven days (except in cases where the Judicial Authority requires it for criminal investigations).
  CONTACTS / CONTACT US
 If you decide to contact us via the form on our website, we will process your personal data and your e-mail address
.
Can we do so without your consent? Yes, because we are following up on your request (Art. 6b) of the GDPR).

How long will your personal data be retained? We will retain your personal data for 30 days from the time of your latest request.

How will we process your personal data?
 Your personal data will be processed using instruments and procedures capable of ensuring safety and confidentiality. Processing may occur both through our website and through other electronic tools - e.g. in-house management systems - and sometimes even with the aid of printed documents and forms. In addition to the Data Controller, in some cases other people involved in the organisation of this website - i.e. administrative and sales staff, system administrators, etc. - or external people - e.g. third-party technical service providers, hosting providers, IT companies, communication agencies, data entry agencies - who, in the cases provided for by the law, we will appoint as Data Processors, may have access to your personal data. The full list of Data Controllers is available contacting info@lcbeauty.sm.  

Where are your personal data located?
 We process personal data within the European territory. We have selected partners which allow us to keep the data within the Union, in accordance with the requirements of the EU Regulation. However, your browsing data, i.e. your IP address, may be transferred outside the European Union, particularly to the United States by means of the installation of cookies, including, but not limited to, through the use of Google.  

Who accesses your data?
 Your data may be made accessible to the Data Controller’s employees and collaborators in their role as data processors and/or system administrators and/or other entities, including, but not limited to, professional firms, consultants, software houses providing business software, etc., which perform outsourced activities on our behalf in their role as external data processors. Under no circumstances will we disseminate your personal data.  

What are your rights?
 As a data subject, you will have several rights. For example, under certain circumstances, the right to have access to your personal data and the rectify or delete them, the right to restrict the processing of such data or to object to such processing. To find out more about your rights, consult articles 15 and following of the Regulation. If you want to exercise your rights, you can write to us or call us using the contacts indicated above at the beginning of this notice.  

Right to lodge a complaint
 If you feel that our processing violates your rights in any way, you can lodge a complaint with the Data Protection Authority through the procedures on the websitewww.garanteprivacy.it. A complaint form template is available on the following page https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/4535524.  

Privacy of children This website is aimed at a general audience; however its services are intended for persons of 18 years of age or older. We do not solicit, collect, use or disclose online any personal data from persons under the age of 18. Should we become aware that we have personally collected data from a child, we will delete them immediately.