natì. il futuro del cosmetico



This document has been drafted in compliance by article 13 of REGULATION (EU) 2016/679 (following settlement) in order to help natural persons to know how personal data are used on (following web site) by Nati’ srl and, if required, to sign off a conscious processing of personal data.

In any case, information and details that yourself provided or otherwise acquired via web site, will be processed in compliance with the provisions of the regulation and confidentiality obligations that inspire the company’s activities.

According to the provisions of the regulation, the data processing by the company will be based on the principles of lawfulness, correctness, transparency, purpose and retention limits, data minimization, accuracy, integrity and confidentiality.

  1. Holder of GDPR treatment:
    The holder of the processing of his personal data is the company. For any information concerning the processing of your personal data by the company, including the list of data processors, you can write to the following address
  2. Personal data object of the treatment:
    When you fill out the form of contract on the site is required to provide us with some of your personal information. In particular, his name, surname and e-mail address. We may also subsequently request your date of birth, tax code, residential and / or domicile address, telephone number.

    In accordance with article 4 of the regulation “personal data” also includes any additional data or information suitable to identify it that you can in any case notify us.

We also report that:

  1. Navigation data and cookies

the computer systems and the software procedures for the operation of the site, acquire, during their normal operation, some data whose transmission is implicit in the use of internet communication protocols.

it is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data, held by third parties, allow users to be identified. this category of data includes IP addresses or domain names of the computers used by users who visit the site, addresses in URI notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc) and other parameters related to the operating system and the user’s computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning, to identify anomalies and / or abuse and are deleted immediately after processing. the data could also be used to ascertain responsibility in case of hypothetical computer crimes against the site and / or third parties. On the site are used, moreover, cookies, both own and third parties, to improve the services offered by the same. For more information or to refuse consent to their use consult the site’s cookie policy

  1. Personal data provided voluntarily

this privacy policy is also intended for the processing of your personal data voluntarily provided by you through the site

  1. Personal data of third parties provided voluntarily

it may occur that you communicate personal data of third parties to you to the company. With respect to these hypotheses, he is appointed as an independent data controller, assuming all the legal obligations and responsibilities. In this sense, you give the company the widest indemnity with respect to any objection, claim, request for compensation for damage from treatment, etc. that it should reach the company from third parties whose personal data are applicable.

  1. third-parties websites

the site could include links to third-party websites with respect to the company. if you access other websites through the links provided on the site, the operators of these websites (third parties outside the company) may be able to collect some of your personal data. such personal data will be treated according to the privacy regulations of these sites, which may differ from this privacy policy. we therefore recommend that you check the privacy regulations published on the websites of these third parties, to correctly understand the procedures they have adopted for the collection, processing and disclosure of your personal data. The company denied any responsibility for any violation of the applicable law on the processing of personal data, performed by such third parties sites, even if reached through the site

  1. 3)Purpose of the treatment

your personal data will be processed, with your consent where necessary, for the following purposes:

  1. To find specific requests made by the company
  2. fulfill any obligations under applicable laws, regulations or community legislation, or satisfy requests from authorities.
  1. 4)Legal office of the treatments
    The legal office of the processing of your personal data for the purposes referred to in Article 3 letter a) is Article 6 (1) (b) of the Regulation (“Processing is necessary for the execution of a contract of which the data subject is a party or for the implementation of pre-contractual measures taken at the request of the same”) as they are necessary in order to find specific requests made by the company. The provision of your personal data for this purpose is optional, but any failure to provide it would make it impossible for the company to meet your requests. the purpose referred to in Article 3 letter. b) represents a legitimate processing of your personal data pursuant to art. 6 (1) (c) of the regulation (the processing is necessary to fulfill a legal obligation to which the data controller is subject).

Once the personal data have been provided, the processing is necessary to fulfill the legal obligations to which the company is subject.

  1. 5)Recipients of personal data

Your personal data may be shared, for the purposes referred to in Article 3, with:

  • subjects that typically act as data controllers, or: individuals, companies or professional firms that provide assistance and advice to the company. the subjects with whom it is necessary to interact / delegate to perform technical maintenance activities on the site, including the maintenance of network equipment and electronic communications networks. 
  • subjects, bodies or authorities that are obliged to communicate their personal data in accordance with the law or orders of the authorities themselves.
  • persons authorized by the company to process personal data necessary to carry out activities strictly related to the site, whether they are committed to confidentiality or have an appropriate legal obligation of confidentiality. (es. company employees) (recipients).

6) Personal data transferring

Your personal data is stored on servers and processed by the company within the European economic area.
Some of your personal data are shared with recipients that could be found outside the European economic area. the processing of personal data by these recipients takes place, in any case, in compliance with the regulation. the transfers can be based on an adequacy decision, on the contractual clauses standards approved by the European commission or on another suitable legal basis. More information about this can be requested at the following address:

7) Processing methods and retention time of  personal data

your personal data will be processed electronically or in any case automated, computerized and telematic, or through manual processing with logic strictly related to the purposes for which your personal data were collected and, in any case, in such a way as to guarantee security in any case of the same.

Your personal data processed for the purposes referred to in Article 3 letter. a) will be kept for the time strictly necessary to achieve the same purpose.

your personal data processed for the purposes referred to in Article 3 letter b) will be kept for the time provided for by the specific obligation or applicable law.

More information about the processing of your personal data, the period of storage of personal data and the criteria used to determine this period can be requested at the following address

8) Rights of the interested parties

In accordance with articles 15 and following of the regulation, you have the right to request the company, at any time, access to your personal data, rectify or cancel them or oppose their treatment. You have the right to request the limitation of processing in the cases provided for in Article 18 of the regulation, as well as to obtain, in a structured format, in common use and readable by automatic device the data concerning you, in the cases provided for in Article 20 of the regulation. 

Requests must be sent in writing to the following address:

In any case, you are always entitled to lodge a complaint with the competent supervisory authority (guarantor for personal data protection), pursuant to Rule 77 of the Rules of Procedure, if you believe that the processing of your personal data is contrary to the law in force. 

9) Modifications

This private policy is effective from 25 May 2018.

The company reserves the right to modify or simply update the content, in part or completely, also as a result of changes in the applicable legislation. The company will inform you of such changes in good time so that you can read carefully the new privacy policy and possibly give / deny your consent to the processing of your personal data.