Legal
Privacy Policy
GI PICCO’S COSMETICS S.R.L. (“Gi Picco’s Cosmetics”, “we”, “us” or “our”) is committed to protecting the privacy and personal data of users who visit and interact with this website. This Privacy Policy describes how personal data is collected, used and protected in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data protection legislation.
Last updated: September 2026
1. Data Controller
The Data Controller is GI PICCO’S COSMETICS S.R.L.
Full company and registered office details are provided at the end of this Privacy Policy.
2. Personal Data We Collect
Depending on how users interact with the website, we may collect different categories of personal data.
Data provided voluntarily by users
When users contact Gi Picco’s Cosmetics through the project enquiry form, email or other communication channels available on the website, we may collect:
- name;
- company name;
- email address;
- telephone number;
- selected project type (Makeup, Skincare or Other);
- information relating to a business or product enquiry;
- any other personal data voluntarily included in a message or communication.
Browsing and technical data
During normal operation, the IT systems and software procedures used to operate the website may automatically collect certain technical information relating to website access and navigation.
This may include IP addresses, browser and device information, requested resources, date and time of access and other technical information necessary for the operation and security of the website.
Further information regarding cookies and similar technologies is provided in the Cookie Policy.
3. Purposes and Legal Bases of Processing
Personal data may be processed for the following purposes:
Responding to enquiries
Personal data provided through the project enquiry form, email or other communication channels may be processed in order to respond to requests for information, product enquiries, commercial enquiries or requests relating to Gi Picco’s Cosmetics’ services.
The legal basis for this processing is the performance of pre-contractual measures taken at the user’s request and, where applicable, the legitimate interest of the Company in responding to communications addressed to it.
Business and pre-contractual activities
Where an enquiry concerns the development of a product, quotation, sample, collaboration or potential business relationship, personal data may be processed in order to manage the relevant pre-contractual and commercial activities.
The legal basis is the performance of pre-contractual measures taken at the request of the data subject and, where applicable, the performance of a contract.
Website operation and security
Technical data may be processed to ensure the proper functioning, maintenance and security of the website, prevent misuse or fraudulent activity and investigate technical or cybersecurity incidents.
The legal basis is the legitimate interest of Gi Picco’s Cosmetics in ensuring the security and proper operation of its website and IT systems.
Compliance with legal obligations
Personal data may also be processed where necessary to comply with obligations imposed by applicable laws, regulations or competent authorities.
The legal basis for such processing is compliance with a legal obligation to which the Data Controller is subject.
4. Nature of Providing Personal Data
Providing personal data for general website browsing is not required, except for technical information that may be automatically processed as part of normal website operation.
Where certain information is marked as mandatory in the project enquiry form, providing such information is necessary in order for Gi Picco’s Cosmetics to process and respond to the relevant request.
Failure to provide mandatory information may make it impossible for the Company to respond to or process the user’s request.
5. How Personal Data Is Processed
Personal data is processed using appropriate electronic and organisational procedures designed to protect it against unauthorised access, disclosure, alteration, loss, destruction or unlawful use.
Gi Picco’s Cosmetics adopts appropriate technical and organisational measures taking into account the nature of the data, the purposes of processing and the risks associated with such processing.
Access to personal data is limited to authorised personnel and service providers who require access for the performance of their duties.
6. Recipients of Personal Data
Project enquiries are transmitted through FormSubmit to info@gipiccos.it. Personal data may otherwise be accessed or processed, where necessary, by:
- authorised employees and collaborators of Gi Picco’s Cosmetics;
- IT, hosting and website management providers;
- technical and professional service providers;
- consultants and professional advisers;
- public authorities or other entities where disclosure is required by law.
Processor obligations
Where third-party providers process personal data on behalf of Gi Picco’s Cosmetics, they will be appointed as data processors where required by Article 28 GDPR.
Personal data will not be sold to third parties.
7. International Data Transfers
Where possible, personal data is processed within the European Economic Area (“EEA”). However, some service providers used in connection with the website or related digital services may process personal data in countries outside the EEA.
Where such transfers occur, Gi Picco’s Cosmetics will ensure that they are carried out in accordance with the requirements of the GDPR, including, where applicable, on the basis of an adequacy decision adopted by the European Commission, Standard Contractual Clauses or other safeguards recognised under applicable data protection legislation.
8. Data Retention
Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations.
Retention periods may be extended where necessary for the establishment, exercise or defence of legal claims.
- data relating to general enquiries will be retained for the period necessary to manage and respond to the request and for any subsequent related communications;
- data relating to potential or existing business relationships may be retained for the duration of the relationship and for the additional period required by applicable legal, accounting and tax obligations;
- technical and security data will be retained for the period reasonably necessary to ensure website operation, security and fraud prevention, subject to any longer retention required by law.
10. Data Subject Rights
Under the GDPR, users may exercise, where applicable, the following rights regarding their personal data:
- the right to obtain confirmation as to whether personal data concerning them is being processed and to obtain access to such data;
- the right to request the rectification of inaccurate or incomplete personal data;
- the right to request the erasure of personal data in the circumstances provided by law;
- the right to request restriction of processing;
- the right to object to processing where applicable;
- the right to data portability where applicable;
- the right to withdraw consent at any time where processing is based on consent;
- the right to lodge a complaint with the competent supervisory authority.
Exercising your rights
In Italy, the competent supervisory authority is the Garante per la protezione dei dati personali.
Requests concerning the exercise of data protection rights may be sent to the email address below.
11. Automated Decision-Making
Unless otherwise expressly stated, Gi Picco’s Cosmetics does not use personal data collected through this website for automated decision-making processes that produce legal effects or similarly significantly affect users.
12. Third-Party Websites
The website may contain links to external websites, platforms or services operated by third parties.
Gi Picco’s Cosmetics is not responsible for the privacy practices or content of third-party websites. Users are encouraged to review the relevant privacy policies before providing personal data through external services.
13. Changes to This Privacy Policy
Gi Picco’s Cosmetics may update this Privacy Policy from time to time to reflect changes in applicable legislation, website functionality, services or data processing activities.
Any updated version will be published on this page together with the date of the latest revision. Users are encouraged to review this Privacy Policy periodically.
14. Contact and Company Information
For any questions regarding this Privacy Policy, the processing of personal data or the exercise of data protection rights, please contact:
GI PICCO’S COSMETICS S.R.L.
Operational Headquarters: Viale dell’Industria 43 20037 Paderno Dugnano (MI) – Italy
VAT No. / Tax Code: 00831590153
Registered Office: Via Andrea Appiani 12 20121 Milan (MI) – Italy