In accordance with EU Regulation No. 2016/679 "GDPR" and local privacy laws, Dolce&Gabbana Beauty S.r.l.(hereinafter "Data Controller") provides you with the following information regarding the collection, use,disclosure, or processing of your personal data.

The Data Controller is Dolce&Gabbana Beauty S.r.l., located at Via Goldoni 10, 20129 Milan, Italy.

Purpose and Legal Basis for Processing

Personal data will be processed for the purpose of managing the reporting of safety information related to cosmetic vigilance activities. The data you provide will therefore be processed for:
The data you provide will therefore be processed for:

• Timely identification of unknown adverse effects and quantification of their frequency and impact;
• Contacting you for additional information about the reported effect;
• Assessing the causal relationship between cosmetic use and the observed adverse effect;
• Improving and/or updating the safety information already known;
• Notifying the competent authority of the Member State under Regulation (EC) No. 1223/2009 about such information, only in case of serious adverse effects affecting consumers of the cosmetic product.

The treatments mentioned above are necessary to fulfill a legal obligation established by current regulations on cosmeto vigilance.

Data Retention Period

The data will be retained for the time necessary to fulfill legal obligations. In any case, personal safety-related information will be kept for up to 10 years.
After the retention period expires, the personal data will be automatically deleted or permanently anonymized in an irreversible manner.

Provision of Data

Providing data is necessary to achieve the purpose of managing the reporting of safety information. Failure to provide the data will prevent the achievement of the above purposes but will not affect the possibility of completing the purchase.

Recipients of Personal Data

The data may be processed by:

• Dolce & Gabbana Beauty staff;
• Dolce & Gabbana Beauty partners who assist in the management of safety information reporting (e.g., casualty assessment).

• Entities acting as Data Controllers, such as supervisory and control authorities or other public entities legally authorized to request data, such as judicial and/or public security authorities;
• Third parties, independent Data Controllers, particularly professionals or legal or fiscal consulting firms.

A full list of recipients of personal data can be requested by writing to: privacy@dolcegabbana.it or to the postal addresses indicated in this notice.

Data Transfer Outside the European Union

Your data will be processed and stored in Italy and will not be transferred to any non-EU countries.

Data Subject Rights under the GDPR

Under applicable laws, you may at any time request information about the personal data collected, used, or processed by the Data Controller, and request access to such personal data, request its integration, correction, or deletion, request the limitation of processing, and object to the processing of your data.

• The types of personal data processed
• Decisions made based on automated processing
• The criteria used to determine the retention period of personal data
• The measures taken to mitigate risks in case of a data breach.

To exercise the above rights and/or submit requests or complaints regarding the processing of personal data, you can send a request to the Data Controller by writing to the email address privacy@dolcegabbana.it or to the postal addresses and contact details indicated in this notice.

Additionally, you may file a complaint with the competent supervisory authority.

Data Protection Officer (DPO)

The Data Protection Officer is available at the following email address: dpo.beauty@dolcegabbana.it.