Dear Customer,

This document has been specially drafted in order to inform you about the processing of your personal data that will be implemented on this website in order to provide you with the service and / or product you requested. The company:

  • High Beauty S.R.L., headquartered in Perugia, Via Giacomo Pantaleoni N. 11, Tax Code and registration number at the Perugia Companies Register 03744440540;

  • NOHOW S.R.L., limited liability company with only one associate, headquartered in Perugia, Via Giacomo Pantaleoni N. 11, Tax Code and registration number at the Perugia Companies Register 03378740546, R.E.A. N. PG-285066;

  • MDV&CO S.R.L., limited liability company with only one associate, headquartered in Perugia, Via Giacomo Pantaleoni N. 11, Tax Code and registration number at the Perugia Companies Register 03368870543, R.E.A. N. PG-284365;

  • MDV SERVICE S.R.L., headquartered in Perugia, Via Giacomo Pantaleoni N. 11, Tax Code and registration number at the Perugia Companies Register 03634340545, R.E.A. N.PG-303414 (from now on: the Co-Owners”);

have signed a co-ownership agreement concerning the respective obligations relating to the processing of personal data as defined pursuant to Article 4, paragraph I, no. 1) of the European Regulation 2016/679 concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data (from now on and before: "GDPR").



We inform you that the processing of your data is carried out in compliance with the GDPR and the current regulatory provisions on the processing of personal data.
We inform you that the treatment in question is based on the principles established under Article 5 of the GDPR, in particular on the principles of correctness, lawfulness, transparency and protection of confidentiality and rights of the subject whose data are treated.
Depending on the service you requested, the personal information you provide is processed by the Co-owners for the following purposes:

  1. compliance with obligations imposed by laws or regulations;

  2. browsing on this website;

  3. access to your reserved area, after registering and completing the appropriate form;

  4. any request for contact or request for information formulated by you by filling in the specific form;

  5. sale and delivery of the product requested by you, by storing and transferring your personal data;

  6. sending promotional communications through digital contact channels;

  7. analysis of your habits and consumption choices, aimed at sending customized commercial offers based on the products of your possible interest;

  8. performance of statistical analysis.

The processing activity carried out by the Co-owners as per the preceding letters b); c); d) and / or e) is necessary for the provision of the services requested by you. Your consent for the aforementioned purposes is optional, but failure to provide such consent will not allow you to use the services requested.
As successively indicated, among the other rights that the GDPR and the current law recognizes you, you will have at any time the right to revoke any consent given. In this case, the Co-holders cannot continue to use your personal data for the purpose in relation to which you have revoked your consent.



Your personal data will be processed using paper, computer and electronic means, with methods that guarantee security and confidentiality in accordance with the provisions of article 32 of the GDPR.
We inform you that your data will be processed for the period strictly necessary to achieve the purposes for which they were collected, and in any case for a period not exceeding ten years as provided for in accounting records pursuant to Article 2220 of the Civil Code.



To achieve the purposes described in point 1 above, the Joint Data holders may need to communicate your personal data to the following categories of third parties:

  1. Authorities and supervision and controlling bodies;

  2. individuals who have been appointed by the Joint Data Controllers pursuant to Article 28 of the GDPR as the data controllers or the natural or legal person who processes personal data on behalf of the Joint Data Controllers;

  3. subjects that provide services for the management of the digital and non-digital communication system;

  4. subjects of which the Co-owners in various capacities make use of for the provision of the requested service.



We inform you that your personal data will be processed by the Contitolari exclusively within the national territory. The data supplied by you will therefore not be transferred by the joint owners to third countries located within or outside the European Union and / or international organizations.



By forwarding the request directly to the respective registered offices of the Co-owners before indicated or using the following e-mail address You may exercise, at any time, pursuant to articles 15 to 22 of the GDPR, the right to:

  1. request confirmation of the existence or not of your personal data;

  2. obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom your personal data have been or will be communicated and - when possible - the storage period;

  3. obtain the correction and cancellation of your personal data;

  4. obtain the limitation of the processing of your data;

  5. obtain the portability of the data, that is, receive it from a data controller, in a structured format, commonly used and readable by an automatic device, and transmit it to another data controller without hindrance;

  6. object to the processing at any time and also in the case of processing for direct marketing purposes;

  7. oppose an automated decision-making process relating to natural persons;

  8. ask the joint owners to access the data and to correct or cancel the data or limit the processing that concern them or to oppose their processing, in addition to the right to data portability;

  9. revoke the consent at any time without jeopardizing the lawfulness of the processing based on the consent given before the revocation;

  10. to lodge a complaint with a supervisory authority.