Privacy Policy

1. Data Controller Information

The Data Controller responsible for processing your personal and business data across our enterprise platform is:

2. Categories of Information Collected

To facilitate contract manufacturing negotiations, formulation R&D requests, and commercial operations, we collect the following data categories:

• Voluntarily Provided Commercial Information: Corporate contact details including name, business email, telephone number, job title, and company name submitted during request for quotation (RFQ) or product sample inquiries.
• Technical & Formulation Specifications: Product requirements, raw material preferences, custom blacklist criteria, and custom packaging parameters shared for feasibility studies.
• Automated Navigation Data: Technical logs captured during platform browsing, such as IP addresses, browser specifications, operating system details, access timestamps, and resource request URIs for server stability and cybersecurity.
• Cookies and Analytical Identifiers: Technical identifiers utilized to optimize browsing performance and analyze aggregated visitor statistics. Detailed settings are available in our Cookie Policy.

3. Legal Bases and Processing Purposes

Data processing is conducted strictly under lawful GDPR parameters for the following operational purposes:

• Contractual & Pre-Contractual Execution: Fulfilling requests for cosmetic bulk production quotes, formula development proposals, sample dispatch, and executing OEM/ODM beauty contract agreements.
• Regulatory & Compliance Obligations: Adhering to EU Cosmetics Regulation (EC) No 1223/2009, Good Manufacturing Practices (ISO 22716), statutory tax regulations, and regulatory authority mandates.
• Legitimate Business Interests: Maintaining platform cybersecurity, conducting system diagnostics, optimizing global supply chain logistics, and safeguarding corporate intellectual property.
• Commercial Communications: Distributing technical bulletins, industry trade show announcements, and corporate updates to registered B2B clients who have requested information.

4. Security Standards & Quality Controls

In alignment with our ISO 9001, ISO 14001, ISO 45001, and ISO 22716 certifications, Ancorotti Cosmetics employs strict physical, administrative, and technical safeguards. Electronic data is secured via modern encrypted infrastructure to prevent unauthorized access, accidental loss, data modification, or unlawful disclosure. Confidential client formulas and intellectual property are subject to strict non-disclosure safeguards.

5. International Data Transfers & Disclosures

Serving cosmetic brand clients across 50 countries, Ancorotti Cosmetics processes data within the European Union. Where international logistics, legal reporting, or cloud services necessitate data transfer outside the European Economic Area (EEA), such transfers are governed by European Commission Standard Contractual Clauses (SCCs) or adequacy decisions to ensure continuous GDPR-compliant data protection. We do not sell or monetize personal or commercial client data.

6. Data Retention Period

Personal and commercial information is retained only as long as necessary to fulfill the operational purposes for which it was gathered, or to satisfy legal retention periods (up to 10 years for statutory commercial, accounting, and regulatory compliance records under Italian law). Technical access logs are routinely deleted or anonymized.

7. Your Rights Under GDPR

Pursuant to Articles 15 through 22 of Regulation (EU) 2016/679, data subjects possess the following enforceable rights:

• Right to Access: Obtain confirmation of data processing and request a copy of personal records held.
• Right to Rectification: Request correction of inaccurate or incomplete corporate contact information.
• Right to Erasure ("Right to Be Forgotten"): Request deletion of personal records where legal retention obligations no longer apply.
• Right to Restrict Processing: Request temporary suspension of data handling under statutory conditions.
• Right to Data Portability: Obtain structured, machine-readable exports of provided personal data.
• Right to Object: Object to processing based on legitimate interests or withdraw consent for direct marketing messages at any time.

To exercise your privacy rights or contact our Privacy Office, please email [email protected]. You also maintain the right to file a regulatory complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

Partner with an Established Italian Manufacturer

Ready to develop high-performance cosmetics, custom formulas, or full-service turnkey solutions for your brand? Contact our international specialists today.