Privacy policy
Welcome to the website of WS BEAUTY LIGHT LUXURY COSMETICS for the cosmetic brand WONDER STORIES, located at the URL www.wonder-stories.com (hereinafter the "Site").
Please read carefully this Privacy Policy, which applies to each access to the Site, even independently of the purchase of products marketed therein.
Please recall that this Privacy Policy is governed by European Regulation no. 2016/679 (the "Regulation").
The Regulation ensures that the processing of personal data is carried out with respect for the fundamental rights and freedoms, as well as the dignity of the data subject, with particular reference to confidentiality and personal identity
1. Personal data controller.
WS BEAUTY LIGHT LUXURY COSMETICS, VAT PARTITY 10078901211 with registered office in ITALY, is the autonomous owner of the processing of personal data of users who browse the Site, including navigation data, marketing and profiling data, as well as data related and connected to sales made through the Site and related pre- and post-sales activities.
We remind you that you can always exercise YOUR rights (including requesting the full list of named data processors) by writing to the following e-mail address: customercare@wonder-stories indicating in the subject line "privacy policy."
2. Type and purpose of the processing performed on the Site - Legal basis of the Processing
Different types of personal data are collected and processed through the Site, for different purposes and in different ways. More specifically:
(a) Personal data inherent to navigation, processed both in order to allow the proper functioning of the Site, and for marketing, or advertising purposes. In this regard, we invite you to read the WONDER STORIES Cookie Policy present on the Site;
(b) Personal data provided voluntarily by the user (e-mail address, telephone number, personal data, password provided through the completion of the registration form), or otherwise conferred during the iteration of the Site and/or through interaction with customer care made available by WONDER STORIES and processed to respond to user requests and offer the services, assistance and information requested about the products and the Wonder Stories cosmetic world. It should be noted that registration and access to the Site or to your customer account via social profile involves the communication of certain data (First Name, Last Name, E-mail and any other data relating to the user and present on the social itself, which will still be listed to the user before his confirmation of wanting to proceed with authentication via social). In any case, this communication will only take place following the explicit confirmation of the willingness to proceed expressed by the user before logging in. In some cases, socials require certain feedback and information about the use of the log-in. Please refer to the relevant WONDER STORIES privacy documentation on the social for more information;
(c) Personal data provided by the user as part of the processes of purchasing products on the Site for the conclusion of transactions and for activities functional and instrumental to the sale, as well as for any necessary pre- and post-sales assistance;
(d) Personal data, biographical and contact information, processed by WONDER STORIES - against express consent - for marketing purposes, i.e. to send the user (through traditional tools and through telematic tools such as, newsletters, e-mail, sms, mms and smart messages) information and updates on products, sales, promotional campaigns, marketing campaigns, events and other initiatives promoted by Wonder Stories or its business partners;
(e) Personal data concerning purchases and any preferences expressed, processed by WONDER STORIES - against express consent - for purposes of studying consumption habits and choices, in order to make products, initiatives and individual commercial proposals more responsive to the tastes and needs of its customers;
(f) Personal and contact data communicated by WONDER STORIES - against express consent - to third parties belonging to the Cosmetics, Luxury Goods, Lifestyle & Fashion categories for their own marketing activities.
With the exception of navigation data, which is governed by the Cookie Policy, the processing of personal data is based on:
1. The legitimate interest of WONDER STORIES to provide the services of the Site and to respond to any customer requests, with reference to points (a) and (b);
2. The fulfillment of the sales contract and the obligation to fulfill pre- and post-contractual obligations, for all activities referred to in point (c);
3. The consent, if any, provided by the user for the purposes mentioned in point (b) - with exclusive reference to Social login - and points (d), (e) and (f);
3. Source of personal data
The personal data collected by WONDER STORIES are provided directly by the user (through registration on the Site or as part of the sales process), except for the browsing data mentioned in point 2 (a) above, the data collected when registering and logging in via social profile, as mentioned in point 2 (b) above, and the sales data mentioned in point 2 (e) above.
4. Study of users' consumption habits and choices
As indicated in point 2 (e) above and with the express consent of the user, WONDER STORIES may process the user's personal data for the purpose of studying consumption habits and choices in order to make Wonder Stories products and initiatives more responsive to the tastes and needs of its customers.
With the help of automated tools, WONDER STORIES will process data regarding the value and frequency of purchases, as well as the type of products purchased. Data pertaining to consumption and preferences may be collected not only by tracking purchases made both on the Site and in WONDER STORIES' physical stores, cosmetics stores, or beauty store partners, but also through the user's interaction with WONDER STORIES and any information the user may voluntarily provide. This study has the sole objective of proposing to customers and users products, services and initiatives that are more responsive to their tastes and needs. It is specified in this regard that the study of user and customer behavior will take place in a way that is not invasive of the personal sphere. You will always be able to request clarification about the logic applied to this processing and the modification of the results obtained by contacting WONDER STORIES at the contact details indicated on www.wonder-stories.com.
As indicated in point 2 (a) above and with your express consent, WONDER STORIES may also process your personal data, using automated tools, to study cookies in order to verify your navigation on the Site and propose products and services in line with your browsing activity.
5. Methods of processing of personal data carried out by Wonder Stories
Personal data collected through the Site of WONDER STORIES are processed using methods and tools mainly computer and telematics, adopting the necessary security measures to minimize the risk of destruction or loss, even accidental, of the data themselves, of unauthorized access or treatment that is not allowed or does not conform to the purposes of collection indicated in this Privacy Policy.
However, such measures, due to the nature of the online medium of transmission, cannot absolutely limit or exclude any risk of unauthorized access or loss of data. To this end, we recommend that you periodically check that your computer is equipped with appropriate software devices to protect network transmission of data, both incoming and outgoing (such as up-to-date antivirus systems) and that your Internet service provider has taken appropriate measures to secure network data transmission (such as firewalls and spam filters).
6. Mandatory or optional nature of providing data
With the exception of browsing data (the provision and collection of which is governed by the "Cookie Policy"), the provision to WONDER STORIES of personal data collected through the Site either to respond to requests and queries from users, or for marketing purposes, the study of consumer habits and preferences and for communication to third parties is free, optional and optional. Failure to provide it does not limit the use of the Site, however, it may make it impossible for WONDER STORIES to respond to requests for information and queries, or to send information material, updates, newsletters and invitations to WONDER STORIES events.
The provision of personal data, in particular personal data, e-mail address, postal address, telephone number and bank details (in case of payment by credit card) is necessary with regard to the conclusion of the contract for the purchase of products through the Site. Therefore, in case of failure to provide them, it may be impossible to conclude the purchase through the Site.
Some of the said data could be, moreover, indispensable for the provision of other services rendered on the Site and related to the sale (pre- and post-sale services, such as, for example, the customization service, etc..) or to fulfill obligations arising from laws or regulations (tax compliance and anti-money laundering legislation). Failure to provide data may therefore constitute, depending on the case, a legitimate and justified reason for not executing the contract of.
Where necessary, the compulsory or optional nature of the communication of data will be indicated from time to time, affixing an appropriate character (*) to the information necessary for the provision of services and the purchase of products on the Site. Failure to indicate personal data indicated as optional or optional, will not result in any limitation or disadvantage to the user.
7. Categories of recipients of personal data
WONDER STORIES discloses personal data of users of the Site only within the limits permitted by law and in accordance with the following. In addition to what is stated in 2 b. above (i. e. at Social login), personal data may be known to:
- employees and consultants of WONDER STORIES, who will act as authorized subjects of the processing for the internal organization of business activities;
- companies of the same Group, which will operate as appointed data processors in order to perform contractual activities and services as well as carry out specific marketing activities (such as inviting you to events, sending you discounts, promotions, etc.); and
- companies that perform for WONDER STORIES, as data processors, specific technical and organizational services related to the Site (logistics services, IT services, customer care services and marketing services).
Personal data may also be known by:
- third parties, solely to execute the contract for the purchase of products on the Site (such as the credit institution for the execution of remote electronic payment services by credit/debit card);
- to law enforcement or judicial authorities, in accordance with the law and upon formal request by such entities, or if there are reasonable grounds to believe that the disclosure of such data is reasonably necessary to investigate, prevent, or take action regarding suspected unlawful activities or to assist governmental control and supervisory authorities defend against any claims or allegations from third parties, or protect the security of your website and company; or exercise or protect the rights, property, or safety of GGDB, its subsidiaries, affiliates, customers, employees, or any other person.
Your data will not be disseminated and will be transferred abroad only by ensuring adequate levels of protection and safeguards for the protection of such data, in accordance with applicable regulations. The data centers used by WONDER STORIES to process the data collected, are located on the territory of the European Union. In order to enable the processing of data for contractual and marketing purposes by the companies of the same Group, the data will be transferred to the relevant countries (including countries outside the EU). In this regard, WONDER STORIES has entered into Standard Contractual Clauses with subsidiaries based in countries outside the EU, in accordance with national and supranational data protection regulations. Personal data may be transferred to IT service providers also having offices and datacenters located in countries outside the EU. It should be noted that, also in this regard, WONDER STORIES has entered into the necessary Standard Contractual Clauses with the suppliers in order to protect the personal data subject to transfer (checking in advance the security of the measures used by the suppliers as duly appointed data controllers).
8. Data Retention Period.
Personal data collected for sales purposes shall be retained for a period not exceeding 10 years after purchase, in accordance with tax and civil law and subject to special needs of legal defense that may require retention for a longer period. Data provided by the user to request assistance, information and feedback are kept for the time necessary to provide the requested feedback and any subsequent activity of any further iteration with customer necessary to fully handle the request and / or problem.
Personal data provided for marketing and profiling purposes are retained for the period necessary due to the specific processing and up to a maximum of 7 years, also based on the particular business sector (luxury products) and in consideration of the interest shown by the customer to receive updates regarding products and events organized by GGDB.
To find out the retention period and persistence of cookies, we invite you to view Cookie Policy of WONDER STORIES.
9. Rights granted by the Privacy Act to the user
The user always has the right to obtain from WONDER STORIES:
(i) confirmation of the existence or otherwise of personal data concerning him/her, even if not yet registered, and their communication in intelligible form;
(ii) information about the origin of their personal data, the purpose and method of processing, the logic applied in case of processing carried out with the aid of electronic instruments, the identification details of the data controller and data processors, the indication of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them as, for example, data processors or persons in any case authorized to process the data;
(iii) the updating, rectification or, when interested, the integration of personal data;
(iv) the cancellation, transformation into anonymous form or blocking of personal data processed in violation of the law, including those that do not need to be kept in relation to the purposes for which the data were collected or subsequently processed, as well as certification that the above operations have been brought to the attention of those to whom the data were communicated, except where this proves impossible or involves a manifestly disproportionate to the protected right;
(v) the portability of their data;
(vi) the limitation of the processing of data concerning him/her.
You also have the right to object in whole or in part, for legitimate reasons, to the processing of your personal data, even if pertinent to the purpose of collection, and to revoke the consent previously given. The right to object and the revocation of consent may also be exercised specifically, with regard to one or more methods of sending marketing communications.
The rights listed above may be exercised by contacting WONDER STORIES, writing to customercare@wonder-stories specifying "privacy" in the subject line.
Finally, we remind you that you always have the right to lodge a complaint with the competent Supervisory Authority (Data Protection Authority).
10. Wonder Stories Privacy Policy
WONDER STORIES, will process your personal data (master data and email address) to allow you to take full advantage of the online service. The legal basis of the processing lies in the performance of a service you have requested; The provision of your data for any online service is mandatory for the performance of the service. The data collected will be kept for the period of time strictly necessary for the above purpose. The Data may be known to employees, consultants and suppliers of WONDER STORIES. Data may be transferred to third countries, in full compliance with applicable regulations, ensuring adequate levels of protection and safeguards for the protection of such data.
At any time you may exercise the rights recognized by the privacy regulations including the right to:
1) obtain information about the Data processed, the purposes and methods of processing;
2) obtain rectification and updating of your Data; 3) object for legitimate purposes to the processing of your Data, as well as request the right to be forgotten and Data portability;
4) access their Personal Data; obtain the cancellation or rectification of the same or the limitation of the processing as well as object to the processing; obtain the transmission of the data to another Data Controller;
5) file a complaint with the competent Control Authority.
We remind you that you can always contact our DPO at the customercare address provided above of the same document always indicating in the subject line "privacy" to exercise the above rights.