The company LOOKALIKE S.r.l. recognizes the importance of protecting individuals with regard to their personal data and, for this reason, considers their safeguarding a fundamental element of its operations.
This policy explains how we collect, use and protect the Personal Data of all users (the "Users") who access Lookalike through the mobile application downloaded on smartphones or tablets and through the website https://company.lookalike.shop/it (the "Platform"). The processing of Personal Data shall be inspired by lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality and accountability according to the general principles defined in Article 5 of the GDPR.
It should be noted in advance that Lookalike refers via a link to third-party Partner websites where Users can purchase products or fashion items. In such cases, in addition to the contents of this privacy policy, the data protection provisions applied by those third-party websites will apply, and the User is encouraged to review them. For definitions, Users are invited to consult our Terms and Conditions.
The data controller is Lookalike S.r.l., with registered office in Via del Gonfalone 3, 20123 Milan (MI), P.I./C.F. 11814320963, pec lookalikesrl@pec.it (the "Data Controller").
who can be reached at the company's address in Via del Gonfalone 3, 20123 Milan (MI) and by e-mail at dpo@lookalike.shop.
The Personal Data collected include Personal Data provided voluntarily and automatically collected Usage Data. Personal Data provided voluntarily includes the following.
The Personal Data collected includes:
Prohibited Data: as established in the Terms and Conditions, it is forbidden to provide Lookalike with any content that violates prohibitions and limitations set out in the Terms and Conditions (especially regarding uploaded images and the prohibition of processing Personal Data, whether of the User or third parties, through this function).
The Controller processes Personal Data only for individuals aged 18 years or older and assumes no liability for any false statements provided during registration and account creation. The Data Controller asks data subjects to keep the information provided up to date. The data subject declares and guarantees that all the data provided is accurate and truthful, and does not refer to any other person.
Personal Data are processed for the following purposes:
The Personal Data provided by the User, within the limits where consent has been given where required, may be disclosed by the Data Controller to the categories of recipients listed below. The entities to whom the Data Controller discloses the Data act, in accordance with legal requirements, as autonomous controllers when they determine the purposes and means of processing, as data processors pursuant to Article 28 of the GDPR when they process Personal Data on behalf of the Controller, or as persons authorized to process data pursuant to Article 2-quaterdecies of the Italian Privacy Code (Legislative Decree 196/2003 as amended by Legislative Decree 101/2018) when acting internally within the organization under the control and direction of the Controller.
Without prejudice to belonging to one of the above categories, Personal Data may be shared with the following entities.
Lookalike may share the User's Data at the time of the transfer to third parties of rights and obligations relating to the contractual relationship between the User and Lookalike in accordance with the Terms and Conditions, in particular in the case of transfer of a business sector, merger through the foundation of a new company, merger by absorption, demerger or any change of control affecting Lookalike. Before such an event, Lookalike will inform the User separately about the details of the sharing of his Data and will ask for his consent, where legally necessary. In any case, Personal Data will only be communicated to entities that have committed to confidentiality or have an appropriate legal obligation of confidentiality. As specified in the previous paragraph, regarding the purpose of art. 3 lett. lett f), moreover, the Data may be communicated and/ or assigned for promotional purposes, with consent for this purpose, to subjects operating in the sectors listed therein and, in any case, to the following subjects.
Personal Data are kept only for the period necessary for the purposes for which they are processed or within the terms provided by applicable national and community laws, rules and regulations.
For the pursuit of the purposes under article 3 letters a), b) and e) Personal Data may be kept for the entire duration of the contract as well as for the following 10 years in order to verify any pending litigation or to comply with any possible legal obligation.
In relation to the purpose referred to in Article 3 letter c) Personal Data shall be stored until the revocation of consent and/or the exercise of the right to object and, in any case, for a period not exceeding 24 months from the collection reserving the right, before the expiry of this term, to ask the User to renew consent and/or update the data.
In relation to the purpose of art. 3 letter. d) Lookalike will process the user's data until the revocation of consent and / or the exercise of the right to object and, in any case, not later than 12 months after collection, reserving the right, before the expiry of this period, to ask the User the renewal of consent and / or updating of data.
For the purpose of art. 3 lett. f) Personal Data processed for marketing purposes may be stored for 24 months from the date on which we obtained your last consent for this purpose, reserving the right to the Data Controller, prior to the expiry of this period, to ask the User to renew the consent and/or update the data.
Thereafter, we will delete the Personal Data in accordance with our Data Retention and Deletion Rules or retain it in connection with an additional legal basis that still exists.
The processing of Personal Data is carried out by means of paper, computer and/or telematic tools, with organisational methods and logics strictly related to the indicated purposes.
The Data Controller undertakes to use adequate security measures in order to minimise the risks of loss or destruction of data, unauthorised access or unauthorised processing without, however, being able to guarantee that the measures adopted exclude any risk of unauthorised access or dissemination of data. Users are therefore advised to use access points equipped with anti-virus software or systems for secure web browsing.
For certain processing activities of Personal Data, Lookalike may transfer such Data to external parties located in countries that do not belong to the European Union (EU) or to the European Economic Area (EEA) (hereinafter, "Third Countries"). The list of Third Countries will be updated from time to time and/or available upon request; the legitimacy of such transfer is, in any case, carried out in compliance with the appropriate and adequate safeguards for the purposes of the transfer itself and in particular in compliance with the general principle for transfer set out in Art. 44 GDPR, the existence of an adequacy decision of the European Commission pursuant to Art. 45 GDPR, of adequate safeguards pursuant to Article 46 GDPR - including the standard data protection clauses adopted by the Commission in accordance with the examination procedure referred to in Article 93(2) GDPR - and in the presence of one of the specific situations of derogation referred to in Article 49 GDPR, including the explicit consent to the transfer by the Data Subject. Some third countries have been authorised by the European Commission because they provide protection similar to that of EU data protection legislation and therefore no additional legal safeguards are required. In the case of foreign countries that have not obtained such authorization, adequate guarantees will be adopted pursuant to art. 46 GDPR. The list of third countries will be updated from time to time and/ or available on request, please contact us at dpo@lookalike.shop, if you want to ask to view a copy of the specific protections applied to the export of Data.
For the pursuit of the purposes set forth in Article 3 letter a), the provision of Personal Data is optional; however, since the processing of Personal Data is necessary in order to access and use the services offered by the Platform, failure to provide Personal Data will make it impossible for the User to access and/or navigate the Platform and/or register and use the services reserved for Users.
For the pursuit of the purposes set out in Article 3 letter b) the provision of Data is mandatory, as its processing is necessary to allow the Data Controller to fulfil legal obligations imposed on it. Any refusal to provide the Data for this purpose will make it impossible for the User to use the Platform.
For the purposes referred to in Article 3 letters c) and d) the provision of data is absolutely optional. The non-disclosure of Personal Data for the purpose of generic marketing and/or profiling and/or the non-provision of consent to such processing and/or the revocation of such consent and/or the exercise of the right to object do not have any consequence on the User's ability to register with the Platform. The interested party may also freely revoke consent at any time, without prejudice to the legitimacy of the processing carried out prior to the revocation, and object to the marketing or profiling processing by sending an email to: dpo@lookalike.shop
Lookalike operates a so-called fan page on the social media platform Facebook. Facebook and Lookalike are exclusively and jointly Holders for the processing of the so-called "Insights data" (Art. 26 (1) paragraph 1 GDPR) insofar as these data are used for the creation of the so-called "Page Insights data" and only for the data collection steps from the fan page of Lookalike until transmission to Facebook. For the other data processing, Lookalike and Facebook are separately holders of the respective processing. Within the scope of their shared ownership, Lookalike and Facebook have concluded an agreement ("Appendix on the controller for Page Insights") which is available at the following link https://www.facebook.com/legal/terms/page_controller_addendum.
The purpose of processing the data of visitors to our fan page is to make the page available and to provide a statistical evaluation of the use of the page. This evaluation is made anonymous for Lookalike. The legal basis for the data processing is Art. 6 para. 1 lit. f) of the GDPR.
Pursuant to Articles 15 et seq. of Regulation (EU) 2016/679, the User may exercise the following rights: (1) request access to their Personal Data under Article 15 of the GDPR; (2) obtain the rectification and/or completion of the Data under Article 16 of the GDPR; (3) request and obtain the erasure of the Data pursuant to and within the limits of Article 17 of the GDPR, unless one of the exceptions provided for in paragraph 3 of the same article applies; (4) request and obtain restriction of processing under Article 18 of the GDPR; (5) obtain data portability under Article 19 of the GDPR, which allows the User to receive the Personal Data provided to the Controller in a structured, commonly used and machine-readable format and – under certain conditions – transmit them to another controller without hindrance; (6) withdraw consent under Article 7, paragraph 3 of the GDPR, without affecting the lawfulness of processing based on consent given before withdrawal; (7) receive clear, transparent and easily understandable information on how Personal Data is used and on the exercise of rights, which is why the Controller provides the information contained in this document (Article 13 GDPR).
The exercise of rights is not subject to any formal constraints and is free of charge. All rights may be exercised by sending an appropriate request to the Data Controller at the following e-mail address: dpo@lookalike.shop The data subject also has the right to lodge a complaint with the Supervisory Authority. For more information, it is possible to consult the official website of the Italian Data Protection Authority: www.garanteprivacy.it
The User has the right to object at any time, on grounds relating to his or her particular situation, to the processing of Personal Data concerning him or her carried out pursuant to Article 6 par. 1 lett. f) GDPR having as legal basis the legitimate interest of the Data Controller. The Data Controller shall refrain from further processing the Personal Data unless it demonstrates the existence of compelling legitimate grounds for processing which override the interests, rights and freedoms of the Data Subject or for the establishment, exercise or defence of legal claims.
In case the Data are processed for direct marketing or profiling purposes, the Data Subject is also entitled to object at any time to the processing of Personal Data concerning him/her carried out for such purposes. In this case, the Personal Data shall no longer be processed for such purposes.
The request to object should be made by sending an appropriate application to the Data Controller at the following e-mail address:dpo@lookalike.shop
The Data Controller may need, in consideration of regulatory changes or changes to its services, to update this policy by inserting the modified version of the same on the Platform. We therefore invite Users to periodically view the relevant section of the Platform in order to check and be aware of the updates that have been made and, where necessary, to communicate the changes directly to Users.