Data Controller
Dolce & Gabbana Beauty S.r.l
VAT NUMBER: 12201610966
Via Carlo Goldoni, 10 – 20129
Milan (MI)
+39 02.21.10.11.11
e-mail: amministrazionedgbeauty@dolcegabbana.it
(“Company”).
Data Protection Officer (DPO)
The DPO can be contacted at dpo.beauty@dolcegabbana.it.
Categories of Personal Data Processed
The Company may process the following personal data:
- image of the face or other identifying elements captured while using the Photo Booth service;
- first name, last name, e-mail address and phone number provided by the user in order to receive the photo;
- technical data strictly necessary to deliver the requested service.
No biometric data are collected or processed through the Photo Booth service.
Source of Personal Data
Personal data are provided directly by you while using the Photo Booth service and entering your contact details in order to receive the photo.
Purpose of Processing
The personal data you provide will be processed at your request in order to allow you to take a picture through the Photo Booth and receive it via the selected delivery channel (e-mail and/or phone number).
If necessary, to ascertain, exercise or defend the Data Controller rights in court.
Legal Basis for Processing
Execution of a request by the data subject to provide the requested service. (Art. 6.1(b) GDPR).
Legitimate interest of the Data Controller to exercise or defend a right of the Data Controller in court. (Art. 6.1(f) of the GDPR).
Data Retention Period
Images and related contact details will be stored on AWS/Google Cloud/Booth Events/Solodigitalis app systems for a period not exceeding 30 minutes from collection, after which they will be automatically deleted.
For any complaint or dispute, for the entire duration of the complaint and/or out-of-court and/or court proceedings, until the expiry of the time limits for judicial protection and/or appeal.
After the above retention periods the data will be destroyed, deleted, or anonymized, consistent with the technical procedures for deletion and backup.
Provision Data
The provision of data is necessary to offer you the Services you have requested.
Categories of Data Recipients
Personal Data may be disclosed to entities operating as autonomous Data Controllers, such as public authorities, or processed, on behalf of the Company, by entities that provide services functional to the pursuit of the above purposes, designated as data processors.
Subject Authorized to Process
The data may be processed by employees of the company functions assigned to the pursuit of the above purposes, who have been expressly authorized to process the data and have received appropriate operational instructions.
Transfer of Personal Data to other countries
Personal data collected for the above purposes may be stored on AWS/Google Cloud/Booth Events/Solodigitalis app cloud servers located in the USA. Data transfers to these servers will be based on the EU-US Data Protection Framework.
Rights of the Data Subject – Complaint to the Supervisory Authority
By contacting the Privacy Office via e-mail at privacy@dolcegabbana.it, interested parties can:
- to request from the data controller access to data concerning them, their deletion, rectification of incorrect data, integration of incomplete data, and restriction of processing;
- oppose processing in cases of legitimate interest of the data controller for reasons related to the situation.
Data subjects also have the right to claim the data controller with competent supervisory authority.