Privacy Policy
PRIVACY POLICY
Eywa Hard Fun S.r.l. Benefit Corporation, a limited company with a share capital of 700 000, 00 euro, registered in the Milan trade and companies register under no. 210 31 86, with headquarters located at via Milani 6A Milan (hereinafter “EYWA”) is the data controller of personal data collected on the www.eywabeauty.com website , in shops and counters in the sense of regulations applying to personal data, in particular Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter the "GDPR").
1. What is personal data?
Personal data is any information about an identified physical person or a physical person that can be identified directly or indirectly via an identification number or one or more elements particular to them, such as their last name, first name, date of birth, customer number, order number, photo, etc.
2. When can we collect your personal data?
We can collect your personal data when you:
- create a customer account on our website;
- order goods from our website;
- use our online services;
- agree to receive personalized marketing communications from us by email, SMS or post, depending on your selection;
- answer surveys or satisfaction questionnaires based on your customer experience;
- interact with via our official page on social networks or when we suggest re-use of content that you have published on a social network;
- publish/mention our products on social networks;
- contact our customer service;
- take part in an event we organize;
- browse on the Internet using cookies or similar technology or when you click on advertisements for our products.
During your purchase journey, you will be able to choose between i) logging into your existing EYWA account, ii) creating a new account, or iii) paying as a Guest (or also called Guest Check out). This last purchasing experience is thus summarized as follows. Payment for purchases as a Guest refers to the possibility for any EYWA customer or prospect to make a purchase in our online store without logging into an account. Your information is collected for the process of payment and delivery of items or for EYWA in order to comply with applicable laws. Your information may also be used for analytical purposes by EYWA and for communication purposes via its preferred channel.
3. What personal data might we collect?
- As part of the services we provide, we may need to collect certain data directly from you using electronic forms on our website, mobile apps or in selected stores, or in paper form, for a range of purposes.
Information we might collect includes:
- Your identity;
- Your contact details (e.g. email address);
- Your personal preferences in relation to the products we market or to our website (language);
- Information relating to your orders, their tracking and your purchase invoices;
- Information you may provide for our customer service;
- Specific health data if you notify us of any undesirable side-effects concerning any of our products;
- Your bank details if you place an order via our website;
- Your publications/mentions relating to our products on social networks.
Important: your bank details are encrypted on www.eywabeauty.com servers. Payments are processed via a secured payment platform, involving additional verifications, in order to guarantee the security of purchases made on www.eywabeauty.com, and combat fraud.
The details you provide of your Payment Card when placing an order are always encrypted prior to being transited, using an SSL (Secure Socket Layer) protocol.
Personal data essential to EYWA is marked with an asterisk on all personal data collection forms on our website, as well as off-line in paper form. If you do not fill in these compulsory fields, EYWA will probably be unable to respond to your request and/or provide you with the requested services. Other information is optional and enables us to get to know you better and improve our communications and services with respect to you.
- We may also collect certain data generated by your purchases of products, online, particularly information regarding the amount and type of your purchases.
4. For what purpose is your personal data collected and used?
EYWA processes your data to:
- enable you to create a customer account on our website;
- manage your access to your customer account on the Internet;
- process and manage your online orders and their delivery;
- secure online transactions, prevent fraud, payment incidents and manage debt collection;
- manage customer relations with respect to any requests for information or complaints you may send us via our website, customer service or social network pages;
- manage and optimize your customer experience by improving our knowledge of our customers;
- propose appropriate, tailored services, particularly when we enhance our products and services;
- conduct statistical analyses to develop management, measuring and reporting tools in order to adjust and improve our sales, marketing and product manufacturing;
- analyze your preferences and habits, anticipate your needs based on your customer profile and your posts/remarks about our products on social networks;
- analyze our performance on social networks in order to produce statistical analyses;
- promote our Brand;
- the sending of a generic newsletter: you have the right to object if you no longer wish to receive it;
- subject to your free, specific, informed and unambiguous consent;
- send you personalized information about our offers, news and events on according to the communication media you have selected and preferences you have indicated to us and your consumer profile here if you have a client account, otherwise you can contact our customer service and to use third- party services to personalize your profile;
- manage your participation in the events for which you register.
5. What legal grounds legitimize the processing of your data?
EYWA processes your personal information:
- to perform the contract agreed between yourself and EYWA, to manage your access to your customer account and to process and track your orders;
- within the framework of its legitimate interest for the purposes of marketing management, securing its digital media and combating fraud;
- when you have given your consent for the processing of your data, especially for the purposes of managing our personalized sales prospection, and of your browsing data via cookies, etc;
- within the framework of compliance with our legal obligations, particularly fiscal obligations (conserving purchase invoices) and cosmetic vigilance in regards to Regulation (EU) 1223/2009 of 30 November 2009 on cosmetic products.
6. What are the recipients of your personal data?
Your personal data is processed by EYWA employees. We ensure that only authorized persons within EYWA have access to your personal data when this is necessary for the purpose of managing our commercial relations or meeting our legal obligations.
We may also share your personal data with:
- other EYWA subsidiaries, with some of these entities acting as data processors;
-
subcontractors, such as:
- site hosting and maintenance service providers and the providers of our electronic personal data collection solutions;
- payment service providers;
- anti-fraud service providers;
- logistic service providers;
- marketing solution service providers;
-
analyses providers for the purposes of personalizing content;
Please note that these partners may act as data controllers, in which case they have their own privacy policies. We illustrate some examples in the table below:- Facebook (Privacy policy accessible here);
- Google (Privacy policy accessible here);
- Instagram (Privacy policy accessible here);
- sales prospection and social network communication service providers;
- providers of statistical analysis of our performance on social networks;
- customer service providers;
- service providers for managing cosmetic vigilance alerts;
- event organization service providers.
Lastly, EYWA may need to share your personal data with third parties to meet its legal, regulatory or treaty obligations, or to respond to requests from authorized legal authorities.
7. Transferring data abroad
Some recipients of your personal data may be located abroad, including outside of the European Economic Area.
All data transfers outside of the European Economic Area are subject to appropriate guarantees, especially contractual, technical and organizational guarantees, that comply with applicable regulations relating to the protection of personal data.
8. How long do we keep your data?
We keep your personal data only for the time necessary for the purpose pursued. In general, your personal data is stored in our database, as shown below:
Data subject: Regular customer
Duration: 5 years from the date of the first purchase or account creation
Specificity: This period will be renewed each time you interact with EYWA or your consent to continue to interact at the end of this period
Data subject: Prospect
Duration: 3 years from the date of data collection
Specificity: This period will be renewed each time you interact with EYWA or your consent to continue to interact at the end of this period
Data subject: Client ‘Guest’
Duration: 5 years from the date of first purchase
Specificity: This period will be renewed each time you interact with EYWA
Data subject: customer care
Duration: duration of the processing of the request plus 5 years. For exercises of rights, under GDPR, the request is kept during its treatment plus 6 years
Data subject: cosmetovigilance
Duration: duration of the processing of the request plus 10 years in archive
Data subject: Privileged interlocutors in relation to EYWA
Duration: 10 years from the date of your first contact
Specificity: This period will be renewed each time you interact with EYWA
When we no longer need to use your personal data, it is deleted from our systems and our registers or made anonymous so that it can no longer be identified, subject to retention for archival purposes. Claims and litigation management as well as to meet our legal and / or regulatory obligations and / or to respond to requests from authorities authorized to make the request.
9. What are your rights and how can you exercise them?
EYWA has adopted the data protection and security practices described in this Statement for all individuals concerned. In addition, we have also identified and taken into account the data protection and security measures required at local or regional level. This includes, for example, those required for residents of the European Union / European Economic Area under the General EU Data Protection Regulation (GDPR) 2016/679.
In particular, the GDPR provides the following rights:
- Right to information: you have the right to obtain clear, transparent and understandable information about how we use your personal data and about your rights. You will find all of this information in this Statement;
- Right of access: you have the right to access the personal data that EYWA holds about you;
- Right of rectification: you have the right to have your personal data rectified if it is inaccurate or obsolete and / or to supplement it if it is incomplete;
- Right to erasure / right to be forgotten: you have the right to have your data erased or deleted. However, this right may be limited by a legal reason or our legitimate interest in keeping your personal data;
- Right of opposition: you can at any time request to no longer receive our communications relating to our offers, news and events. You can in particular use the hypertext link provided for this purpose in each email or communication that we send to you. You can also request to receive non-personalized communications about our products and services;
- Right to withdraw consent at any time for data processing based on consent: you can withdraw your consent relating to our processing of your data when this processing is based on consent;
- Right to data portability: you have the right to move, copy or transfer data from our database to another. This right only applies to the data you have provided, and provided that the processing is based on a contract or your consent and carried out using automated processes;
You can exercise these rights directly with EYWA by sending an email to customercare@eywabeauty.com or a non-registered letter by post to via Milani 6A 20133 Milan - Italy.
If, at any time, you no longer wish to receive details of our offers, news and events, you can unsubscribe using the hypertext link provided for this purpose in each email we send you. Or you can send a non-registered letter to via Milani 6A 20133 Milan - Italy.
We would also like to inform you about the contacts of other authorities in Europe that you can find and contact on the website of the European Data Protection Committee: Our Members | European Data Protection Board (europa.eu)
10. Contact details of the Data Protection Officer (DPO)
For all questions relating to the collection and processing of your data by EYWA you can contact the EYWA at customercare@eywabeauty.com or Data Controller, via Milani 6A 20133 Milan - Italy.
Milan, October 10th, 2024.
COOKIE MANAGEMENT
This Notice about cookies applies when visiting the website available at www.eywabeauty.com (hereinafter the “Website(s)”), which belongs to Eywa Hard Fun S.r.l. Benefit Corporation (hereinafter “EYWA”).
The purpose of this cookie policy is to inform you of the source and use of browsing information collected during your visit to the Website and the tools provided to allow you to express your choices about cookies.
WHAT IS A COOKIE?
Subject to your choices, when visiting the Website, a text file may be placed on your device, courtesy of your web browser.
This text file is a cookie. During its validity or registration period, it will allow the sender to identify your device on future visits.
Some cookies are essential for using the Website, others optimize and personalize the contents displayed.
WHO SENDS THE COOKIES ON OUR WEBSITE?
Cookies that may be saved to your device when you visit the Website pages are issued by EYWA and/or third parties. Only the cookie issuer is likely to read or modify the information contained within it.
Cookies sent by EYWA are mainly related to the operation of the Website.
EYWA makes every effort to ensure that third-party cookies are issued and used in compliance with the applicable regulations.
WHAT IS THE PURPOSE OF THE COOKIES ISSUED VIA THE WEBSITE?
Subject to your choices, various cookies may be installed on your device for the purposes detailed below. For the sake of transparency and in as much depth as possible, we inform you of the purposes of the third-party cookies that we are aware of, and the ways in which you can make choices about these cookies. All cookies may be cross-referenced with your customer data in order to personalize your experience, limit commercial interaction, ensure the proper functioning of your loyalty benefits, improve our services and guarantee your satisfaction.
Essential cookies for Website operations
“Essential” cookies are necessary for Website browsing and allow you to use the Website’s main features.
For example, these cookies are intended particularly for:
- saving your choices or desire not to make a choice about tracker cookies;
- service authentication;
- saving the contents of a shopping cart;
- customizing the interface.
Removing them may make it hard to browse the Website or may make it impossible to place an order. These cookies may be installed on your device by EYWA or its service providers.
These cookies enable or facilitate digital communications and/or may be strictly necessary for the provision of an online communication service at your express request. As a result, they do not require your prior consent. Saving or reading such cookies is necessary for provision of the service and will be based on EYWA’s legitimate interest in implementing such processing for the proper use of its Website.
Personalization cookies
Personalization cookies allow us to personalize and improve your user experience. They also allow us to adapt the look of the Website to your device display during your visits.
These Cookies are issued by EYWA and/or by our service providers. The issue and use of cookies by third parties on our Website may also be subject to the privacy protection policies of these third parties.
Such cookies are saved or read, subject to your prior consent. If you refuse these cookies, you will not be able to benefit from the functionalities described in this paragraph.
Analytical cookies
Analytical cookies make it possible to gauge the audience for various Website content, to establish visitor statistics and volumes in order to evaluate and improve our service ergonomics. These cookies include those used to create similar profiles that will be prospected according to your information.
These Cookies are issued by EYWA and/or by our service providers. The issue and use of cookies by third parties on our Website may also be subject to the privacy protection policies of these third parties.
The information communicated to technical service providers is transmitted in the form of aggregate statistics and traffic volumes, excluding any personal information. These statistics are reconciled with the traffic statistics of other websites, as well as with your customer data.
Such cookies are saved or read, subject to your prior consent. Refusing the implementation of or deleting such cookies does not affect your Website browsing but is likely to prevent us from ensuring the best quality of service we wish to offer our visitors.
Sharing cookies (social links)
Our Website may include third-party computer applications that allow you to share Website content with others, or to publish your visit or opinion of Website content to these other persons. This is notably the case for “Share” and “Like” buttons on social networks such as Facebook, Instagram, etc.
The social network providing such application buttons is likely to identify you through this button, if you use the button, and even if you have not used this button but are signed in to the social network when you consult the Website (open session during your browsing). Share buttons will allow you to connect the contents consulted to your user account.
We have no control over the process social networks use to collect information about your Website browsing and associated with the personal data at their disposal. We invite you to consult the privacy protection policies of these social networks.
Advertising cookies
Advertising cookies are not essential for browsing but allow you to see more relevant advertisements personalized to your interests on the Website as well as other websites you may browse. As such, advertising cookies allow, for example, the display of advertising, capping the display (not presenting the same advertising to a user in a repetitive manner), combatting click fraud, billing the display service, the measurement of targets more interested in the advertising to better understand the audience, etc.
Advertising content personalization can also be achieved by using our partner’s technology, to associate your device’s Website browsing information with the data you provided us when you registered.
Saving or reading such cookies is subject to your prior consent. Refusing these advertising cookies has no impact on your use of the Website, nor will it stop advertising on the Website. However, we will be unable to offer you advertising that takes your interests into account.
How long are the cookies kept?
Cookies saved on your device have a maximum lifespan of six (6) months. At the end of this period, personal data collected through the cookies will be deleted.
HOW TO MANAGE COOKIES SAVED ON YOUR DEVICE?
Cookies saved on your device result from the settings you have chosen during your visit, which can be modified at any time under the conditions detailed in this cookie policy.
There are various ways to manage the implementation of cookies, as presented below.
If your device is used by more than one person and operates more than one browser, we cannot be certain that the services and advertisements sent to your device are appropriate for your personal use of your device, rather than of another user of your device. If you choose to share your device and browser cookie settings with others, you are responsible for doing so at your own discretion.
You can express your choices using:
The cookie manager
You can decide whether cookies are saved on your device using the cookie settings tool or in the cookie banner or in the Website footer.
Cookies are managed for cookie purposes.
Your browser settings
You can also configure your browser to accept and save cookies on your device or to reject them.
Each browser has different settings. These are usually described in your browser help menu. We therefore recommend reading it. This will show you how to change your cookie preferences.
For Internet Explorer: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
For Safari: https://support.apple.com/en-euro/guide/safari/sfri11471/mac
For Chrome: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en
For Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
For Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Please note: any choices in your browser settings concerning the acceptance or refusal of cookies will be likely to modify your Internet browsing experience and your access to the Website and certain services requiring the use of these same cookies.
On the Youronlinechoices website
You can connect to the Youronlinechoices website (https://www.youronlinechoices.com/uk/your-ad-choices) built by digital advertising professionals. This website allows you to refuse or accept cookies that may be used to personalize the advertisements shown to you while you browse. This European platform is shared by hundreds of Internet advertising professionals. However, this will not prevent advertisements from being displayed on the websites you visit. It will only block technologies that allow advertising to be tailored to your interests.
