Femme Fatale Back to main page

Privacy Policy

Last updated: March 2026

This privacy notice describes how we process the personal data of users who visit the website prenota.salonefemmefatale.it, in accordance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree (D.Lgs.) 196/2003, as amended by Legislative Decree (D.Lgs.) 101/2018.

1. Data Controller

Femme Fatale S.r.l.s.

Registered office: Suor Maria della Croce Di Gregorio, 25 — 91014 Castellammare del Golfo (TP)

Operational headquarters: Via San Paolo della Croce, 10 — 91014 Castellammare del Golfo (TP)

VAT No.: IT 02853540819

Phone: 333 807 7839

Email: commerciale.femmefatale@gmail.com

2. Data Collected

Through the contact form on the website, we collect the following personal data, voluntarily provided by the user:

Identification data: name, phone number, email address.

Browsing data: IP address, browser type, pages visited, date and time of access. This data is collected in aggregate and anonymous form through analytics and profiling cookies, only with the user's prior consent.

3. Purposes of Processing

Personal data is processed for the following purposes:

a) Responding to contact requests: the data entered in the form is used exclusively to contact the user back and schedule an appointment at the salon. Legal basis: consent of the data subject (Art. 6, par. 1, let. a, GDPR).

b) Analysis and measurement of advertising campaigns: through Google Ads profiling cookies, anonymous data is collected on user interaction with advertising campaigns (clicks on phone buttons, WhatsApp, form submissions). Legal basis: consent of the data subject (Art. 6, par. 1, let. a, GDPR), expressed through the cookie banner.

4. Methods of Processing

Data is processed using electronic and digital tools, with methods strictly related to the purposes indicated above, and in any case in a manner that ensures the security and confidentiality of the data.

Contact form data is sent through FormSubmit (formsubmit.co), a third-party service that forwards data via email to the Data Controller. FormSubmit does not retain user data on its servers beyond the time necessary to send the email.

5. Disclosure and Transfer of Data

Personal data will not be disseminated or sold to third parties for commercial purposes. It may be shared with:

FormSubmit (formsubmit.co) — for forwarding contact form data via email.

Google Ireland Limited — for the operation of analytics cookies and advertising conversion tracking (Google Ads), only with the user's prior consent.

6. Data Transfer Outside the EU

Some of the services used (Google Ads, FormSubmit) may involve the transfer of data to servers located in the United States. Such transfers are carried out in compliance with the safeguards provided by the GDPR, in particular on the basis of the Standard Contractual Clauses (SCC) adopted by the European Commission and, where applicable, the EU-US Data Privacy Framework.

7. Data Retention Period

Personal data provided through the contact form will be retained for the time strictly necessary to handle the request and in any case no longer than 12 months from collection, unless otherwise required by law.

Data collected through cookies is retained in accordance with the timeframes set out in the Cookie Policy.

8. Rights of the Data Subject

As a data subject, pursuant to Articles 15-22 of the GDPR, you have the right to:

Access: obtain confirmation of whether your data is being processed and access your personal data.

Rectification: request the correction of inaccurate or incomplete data.

Erasure: request the deletion of your data ("right to be forgotten").

Restriction: request the restriction of processing.

Portability: receive your data in a structured, commonly used, and machine-readable format.

Objection: object to the processing on legitimate grounds.

Withdrawal of consent: withdraw your consent at any time, without affecting the lawfulness of the processing based on consent given prior to its withdrawal.

To exercise your rights, you can contact us by writing to commerciale.femmefatale@gmail.com or by calling 333 807 7839.

9. Complaint to the Supervisory Authority

You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at www.garanteprivacy.it if you believe that the processing of your data violates the GDPR.

10. Cookies

For detailed information on the use of cookies, please refer to our Cookie Policy.

11. Changes to This Privacy Notice

The Data Controller reserves the right to make changes to this privacy notice. We recommend checking this page periodically to stay informed about how your data is processed.