Privacy Policy

The data controller is A.D.O. Medical S.r.l., registered office at Via del Tipografo 2/2, 40138 Bologna (BO), Italy, VAT no. IT03946191206. ADO Beauty is a brand of A.D.O. Medical S.r.l.

For any request regarding your personal data you can write to info@adobeauty.it or call +39 051 302471.

Identification and contact data you provide when registering or placing an order: first name, last name, email, phone, shipping and billing addresses.

Tax data for invoicing, if you provide it: company name, VAT number, tax code, SDI recipient code and certified email (PEC).

Order and payment data: purchased products, amounts, payment method and status, order status and related invoices. Payment card data is processed directly by Stripe and never transits through nor is stored on our systems.

The intended use of the order that you state at checkout (professional activity or personal use) and the requests you send us through the contact form, the quote and back-in-stock forms, and return or withdrawal requests.

Technical browsing data (IP address, device and browser type) and data collected through cookies, described in the Cookie Policy.

Data marked as mandatory in the forms is needed to fulfil the order or answer the request: without it we cannot proceed. The rest is optional.

Managing orders, payments, shipping and support: the legal basis is performance of the contract (Art. 6.1.b GDPR). The same applies to the information, quote and return requests you send us (pre-contractual measures or performance of the contract).

Tax and accounting obligations, including issuing and retaining invoices: the legal basis is a legal obligation (Art. 6.1.c GDPR). This includes checking the VAT number of another EU country on the VIES service.

Technical cookies necessary for the website to work: they do not require consent because they are strictly necessary to provide the service you request (Art. 122 of Italian Legislative Decree 196/2003). Statistical and marketing cookies: only with your prior consent (Art. 6.1.a GDPR), which you can withdraw at any time.

Fraud prevention and payment security: our legitimate interest and that of payment service providers (Art. 6.1.f GDPR). On the same basis we record the technical data needed to protect the website from abuse and unlawful access.

We do not send promotional communications, we do not carry out profiling and we do not take decisions based solely on automated processing.

The website uses essential technical cookies and, with your prior consent, statistical and marketing cookies. Full details, with durations and purposes, are in the Cookie Policy, where you can also manage or withdraw consent at any time.

Your data may be processed, on our behalf and as data processors, by providers that support us in delivering the service: Stripe (payment processing), OVHcloud (servers the website runs on, in the European Union), Cloudflare (network and secure storage of invoices and backups) and Zoho (email, data centres in the European Union).

Stripe also processes some data as an independent controller, to prevent fraud and to comply with its own legal obligations: details are in Stripe's privacy policy.

We share the necessary data with the carriers that deliver the order, with the advisers who assist us with tax and accounting obligations and, when you enter a VAT number of another EU country, with the European Commission's VIES service that checks it.

With your prior consent to the relevant cookies, we may also use Google: for Google Analytics as our data processor, for Google Ads as an independent controller.

Data is not disclosed nor transferred to third parties for their own purposes.

Some providers (for example Stripe, Google and Cloudflare) may also process data in the United States. The transfer is based on the European Commission's adequacy decision for providers certified under the EU-US Data Privacy Framework and, in other cases, on the Standard Contractual Clauses approved by the European Commission.

Account data is kept while the account remains active. When the account is deleted, profile data is erased or anonymised.

Order and invoice data is kept for 10 years, as required by tax and civil law, even if the account is deleted. Beyond that period it is kept only if needed for ongoing legal proceedings.

Requests sent through the contact, quote or back-in-stock forms that do not lead to an order are kept for 24 months. Return requests follow the order they refer to.

Data collected through cookies is kept for the durations stated in the Cookie Policy.

Proof of your cookie choices (consent given, refused or withdrawn) is kept for 24 months in a register that contains neither your name nor your email address; after that period it is deleted.

As a data subject you have the right to access your data, request its rectification or erasure, restrict or object to processing, and receive your data in a structured, machine-readable format (portability).

You also have the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal, and to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it). You can also contact the supervisory authority of the European Union country where you live or work.

From your account, in the Privacy section, you can download a copy of your data and request account deletion by yourself.

Alternatively you can write to us at info@adobeauty.it: we will reply without undue delay and in any case within one month of the request.

We may update this notice to reflect changes in the law or in the services offered. The updated version will always be available on this page, with the date of last update.