facebook
instagram
youtube
whatsapp
phone

Explore the beauty without limits

Follow us on

Support

CUSTOMER SERVICE

 

Contacts

 

Shipping times

 

Payment methods 

 

F.A.Q

LEGAL AREA

 

Privacy Policy

 

Cookies Policy

 

Terms of Use

 

Terms and Conditions of Sale

 

Returns and Refunds

 

Disputes

Kristine KM Marti

 

Enhance your beauty with our selection of high-quality makeup. Find your perfect look with us, where every product is a touch of elegance that turns every day into an opportunity to shine.

logo km.jpeg

Privacy Policy (last revised 05/09/2023)


Privacy Policy for Users

 

Kristine Marti di KM via Gattamelata, 38 20149 – Milano (MI) - P.iva 03043630346- REA MI - 2691924 (hereinafter, also the “Data Controller” or the “Controller”), as the controller of the personal data of users (hereinafter, the “Users”) who browse, register and use the services available on the website https://www.kristinemarti.it (hereinafter, the “Site” and the “Services”) provides the following privacy information pursuant to art. 13 of EU Regulation 2016/679 of 27 April 2016 (hereinafter, the “Regulation”, or also the “Applicable Regulations”).

 

The company appointed as external data controller for the data collected and used here is Kristine Marti di KM via Gattamelata, 38 20149 – Milano (MI) - P.iva 03043630346 (hereinafter, also the “Data Controller” or the “Controller”)

The Services on the Site are reserved for adults in accordance with current legislation. The Data Controller will therefore not use personal data relating to minors unless the parents or those exercising parental responsibility have given their consent. Upon request by Users, the Data Controller will promptly delete all personal data in the event that it has been inadvertently collected and relating to minors. The Data Controller takes the utmost account of the right to privacy and protection of personal data of its Users. For any information in relation to this privacy policy, Users may contact the Data Controller and/or the Data Processor at any time, using the following methods:

 

By Kristine Marti at KM

By sending a registered letter with return receipt to the headquarters of the Data Controller (Via Gattamelata, 38 - Milan (MI); 
By sending an email to the address: customercare@kristinemarti.it


For the Owner:

By sending a registered letter with return receipt to the headquarters of the Data Controller (Via Gattamelata, 38 - Milan (MI)); 
By sending an email to the address: customercare@kristinemarti.it


Purpose of processing 
The personal data of Users will be lawfully processed by the Data Controller pursuant to art. 6 of the Regulation for the following processing purposes:

contractual obligations and provision of the Services (contractual legal basis), to allow the purchase of products and the performance of the Services, as well as to execute the Conditions of Use of the Site, which are accepted by the User when using the Services and fulfill specific requests of the User, or to ensure the assistance of the assistance/customer care service. The User's data collected by the Data Controller for the purposes listed above include: name, surname, telephone number, e-mail, full address, as well as all personal information of the User possibly and voluntarily published (e.g. company, province/region). Unless the User gives the Data Controller specific and optional consent to the processing of their data for further purposes, the User's personal data will be used by Kristine Marti for the exclusive purpose of ascertaining the identity of the User (possibly also by validating the e-mail address), thus avoiding possible scams or abuses, and contacting the User for service reasons only (e.g. sending notifications relating to the Services). In any case, specific summary information will be progressively reported or displayed on the pages of the site set up for particular services on request. Without prejudice to what is provided elsewhere in this privacy policy, under no circumstances will the Data Controller make the personal data of the Users accessible to third parties;


administrative-accounting-defense purposes in court (legal basis legitimate interest of the Data Controller), or to carry out organizational, management, administrative, financial and accounting activities, such as internal organizational activities and activities functional to the fulfillment of contractual and pre-contractual obligations, as well as fraud prevention; if necessary, to ascertain, exercise or defend the rights of the Data Controller in court;


legal obligations (legal basis legal obligation), or to fulfill obligations established by law, by an authority, by a regulation or by European legislation. Access to certain functions of the site, such as online purchases, necessarily requires the provision of the requested personal data. Failure to provide the same would make it impossible for the User to proceed with said functions and access the related Services. The personal data that are necessary for the pursuit of the processing purposes described in this paragraph 1 are indicated with an asterisk within the corresponding forms.


Further processing purposes 
With the free and optional consent of the User (legal basis of consent), some personal data of the User may also be processed by the Data Controller for other purposes, such as sending the newsletter (email account) and registering a User account (name, surname, address, email, in addition to the optional gender, company, telephone number, Province/Company) which will allow, in addition to sending the periodic newsletter - which will contain information in relation to news and promotions present within the Site and/or initiatives of the Data Controller - also the use of data for marketing purposes, promotional activities of products and events, competitions and games, as well as for commercial communications also based on previous purchases of the User (and on the study of his/her preferences in order to improve his/her experience and propose personalized offers), as well as for market studies and statistical analyses. The aforementioned communications may be sent via automated or traditional contact methods. In case of consent, the User may revoke it at any time by making a request to the Owner in the manner indicated in the following paragraph 5. The User may also easily oppose further sending of promotional communications by clicking on the appropriate link for the revocation of consent, which is present in each email containing the newsletter. Once the consent has been revoked, the Owner will send the User an email to confirm the revocation of consent.

 

Processing methods and data retention times 
The Data Controller will process the Users' personal data using manual/paper and computer/telematic tools, with logic strictly related to the purposes themselves and, in any case, in a way that guarantees the security and confidentiality of the data, with technical and organizational measures aimed at preventing unauthorized access, disclosure, modification or unauthorized destruction of the data, taking into account the state of the art and the costs of implementing such measures, as well as the nature, object, context and purposes of the processing, as well as the risk of varying probability and severity for the rights and freedoms of natural persons. The Users' personal data will be stored for the time strictly necessary to carry out the primary purposes illustrated in the previous paragraph 1, or in any case as necessary for the protection of the interests of both the Users and the Data Controller. In particular, the data collected for the contractual purpose will be retained until the termination and exhaustion of the contractual relationship, without prejudice to the permanence of conservation of those strictly necessary data that must be, even subsequently, used to comply with the administrative, fiscal and legal legal obligations and related duties; taking into account the foregoing, the processing will in any case have a duration no longer than that necessary for the purposes and purposes for which the data were collected; upon the expiration of such needs and the completion of the aforementioned duties, the processing will cease definitively and entirely. In the case referred to in the previous paragraph 2, the personal data of the Users will be retained for the time strictly necessary to carry out the purposes illustrated therein. In any case, the processing will cease if a request for cancellation is received, also as a function of the manifest revocation of consent and/or after 3 years have passed since the last interaction with the brand. Only the data relating to the details of purchases will be retained for marketing purposes and analysis of preferences for 24 months from registration.

Scope of communication and dissemination of data 
The personal data of Users may be disclosed to employees and/or collaborators of the Data Controller and the Data Processor in charge of managing the Site and all services connected to the provision of the Services. These subjects, who have been duly authorized to do so, will process the data of Users exclusively for the purposes indicated in this information notice and in compliance with the provisions of the Applicable Regulations. The personal data of Users may also be disclosed to third parties who may process personal data on behalf of the Data Controller as external data processors - in addition to the Data Processor identified here as Kristine Marti of KM - such as, for example, suppliers of IT and logistics services functional to the operation of the Site and/or the Services, suppliers of outsourcing or cloud computing services, professionals, consultants, subjects responsible for setting up and managing marketing and sending emails. Users have the right to obtain a list of any data controllers appointed by the Data Controller, by making a request to the Data Controller concerned in the manner indicated in the following paragraph 5. Furthermore, the personal data of Users may be communicated by the Data Controller and/or the Data Processor, to the extent that this is necessary and essential to execute contractual obligations, to third-party independent data controllers, such as platforms and managers of payment services and logistics services necessary for the delivery of goods sold through the Site. These independent controllers will process the User's data exclusively for the purposes of correctly fulfilling orders relating to the Services. With regard to the possible transfer of personal data to non-EU countries, the Data Controller does not currently have the intention to do so, but if this is necessary to meet the purposes set out in this policy, it will do its utmost to ensure transfers to countries with respect to which there are guarantees of adequacy regarding the processing of data (e.g. adequacy measures issued by the European Commission, or certifications based on the provisions of the Privacy Shield for data transfers between the EU and the USA), or to use equivalent means, such as the standard clauses provided by the European Commission. Furthermore, the Data Controller may disclose information about the User: (i) if it is required to do so by law or legal process; (ii) to public security authorities or other government officials, (iii) when it believes that disclosure is necessary or appropriate to prevent physical harm or financial loss or in connection with an investigation of suspected or actual fraudulent or illegal activities, iv) to other companies of the Group. The personal data collected will not be disclosed.

 

Rights of the Interested 
Parties Users may exercise the rights guaranteed to them by the Applicable Regulations by contacting the Data Controller using the following alternative methods:

By sending a registered letter with return receipt to the headquarters of the Data Controller (Via Gattamelata, 38 - Milan (MI); 
By sending an email to the address: customercare@kristinemarti.it


Users are granted the following rights:

access to the data processed (Article 15 of the Regulation);
the rectification of the same, including integration and updating (Article 16 of the Regulation);
the deletion of the data (Article 17 of the Regulation); where the requirements are met, the limitation of the related processing (Article 18 of the Regulation);
notification, to the recipients to whom the Data Controller has transmitted the data, of the rectifications or cancellations or limitations of the processing carried out (Article 19 of the Regulation);
the portability of the data (Article 20 of the Regulation);
opposition to the processing of the data, with regard to the types of processing necessary for the performance of a task of public interest or connected to the exercise of public powers with which the controller is invested, or based on the legitimate interest of the controller, provided that the latter does not demonstrate the existence of compelling legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the interested party or for the ascertainment, exercise or defense of a right in court (Article 21 of the Regulation).
the withdrawal of consent, without prejudice to the lawfulness of the processing based on the consent given before the withdrawal;
For any problem regarding the processing of the data collected, the Data Controller is available for any discussion. In any case, for the purposes of protection in this regard, Users will have the right to lodge a complaint with the Authority for the protection of personal data, whose details and contacts can be found on the website www.garanteprivacy.it. The Data Controller is not responsible for updating all the links that can be viewed in this Policy, therefore whenever a link is not working and/or updated, Users acknowledge and accept that they must always refer to the document and/or section of the websites referred to by that link. Our Site may provide links to other websites for convenience, information and/or easier use by the User. These websites may operate independently from us. Linked sites may have their own privacy notices or policies, which we strongly recommend checking if you visit linked websites. To the extent that the linked websites visited are not owned or controlled by the Owner, the Owner is not responsible for the content of the sites, the use of the sites or the privacy practices of the sites. The Site uses Cookies. To learn more and to view the detailed information, the User can consult the Cookie Policy.

Kristine Marti di K.M. via Gattamelata, 38 20149 – Milano (MI) -  P.iva 03043630346 - REA MI - 2691924