Privacy & Cookies

GDPR Policy

This policy is provided pursuant to Art. 13 of the European General Data Protection Regulation EU 2016/679 and applicable national legislation or regulations (“Regulations” or “GDPR”) regarding the protection of individuals with respect to the processing of personal data and the free movement of such data, to those who interact with the services and the website at www.yabebeauty.com (hereinafter also “Site”) and describes the methods for managing and processing the related personal data.

The policy is provided only for the use of services provided by WYM S.r.l. directly or through the Site and not for other services or websites that may be consulted by users via links.

WYM S.r.l. reserves the right to modify this GDPR Policy and related cookie policy in whole or in part. All changes will be effective upon publication of the updated GDPR Policy and cookie policy on the site. Use of the Site or the services following the policy change implies acceptance of such changes.

Data Controller

WYM S.r.l., with headquarters in Località Torresquadrata, 202 – 06059 Todi (PG), email info@yabebeauty.com, certified email wym@pec.it, Tax Code / VAT no. 03854740366 (hereinafter “Controller”).

Type of data processed

data provided by the user through the Site such as name and surname, date and place of birth, address, telephone number, Tax Code, email, and data relating to the services activated or requested

browsing data: the computer systems responsible for the operation of the Site acquire some personal data transmitted through secure protocols. This collection is in no way aimed at identifying the user, but this could happen through processing and association with data held by third parties. This category of data includes IP addresses, browser identifiers, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the numerical code indicating the status of the response given by the server (e.g., success, error), and other parameters relating to the user’s operating system and computer environment. This data is used solely for statistical purposes and for monitoring correct operation.

Purposes of processing

Provision of the requested service

Personal data provided by users who use the Site’s services (newsletter subscription, filling out forms) are used for the sole purpose of performing the service or provision requested.

Providing data is mandatory, and failure to enter information marked as mandatory will make it impossible to use the service requested through the Site. The legal basis for processing is the execution of a specific request and/or a contract, or the legitimate interest of the Controller.

Direct marketing

With explicit consent, YA.BE may process user data for marketing activities, including those of specific interest relating to its own products or services or those of partners with whom it has partnership agreements, market research or studies, and sending the newsletter.

Data may be processed through profiling activities based on the area of origin or specific areas of interest in order to send communications based on preferences.

In this case, the legal basis for processing is consent, which is optional, meaning that lack of consent does not affect the execution of the contract or the specific request.

Without prejudice to the right to opt-out and unsubscribe, the Controller may in any case process data to send communications and promotions by email for products or services similar to those previously purchased, as provided for by the Regulations.

Communication methods

The personal data collected will only be processed by authorized personnel who need to have knowledge of it in relation to their activity, or by external parties who perform services on behalf of the Controller (for example, computer system management, communication agencies, and companies) or who collaborate with the Controller and who may act as data processors or independent controllers.

Processing methods

Personal data is processed using computer tools suitable for guaranteeing the security and confidentiality of the data itself and in compliance with security measures deemed appropriate by the Controller pursuant to Art. 32 GDPR.

Data may be processed electronically, including automated means, with or without the use of electronic tools (including email, fax, telephone, and any other remote communication technology) according to principles of correctness, lawfulness, and transparency.

Data may be transferred to a third country based on adequacy decisions by the European Commission or based on adequate guarantees provided for by current legislation. The personal data collected will not be disseminated.

Retention period

The personal data collected will be kept for a period of time no longer than necessary to achieve the purposes for which they were collected and for the maximum time provided for by law (10 years in the case of purchases of products or services on the Site).

Data processed for marketing purposes will be processed and stored (unless you opt-out or revoke consent) for a period consistent with the interest shown by the person to whom the data refers toward the Controller’s initiatives, who will periodically verify the continued existence of such interest.

Regarding technical data managed by the Site, such as cookies, the retention period is defined by the technical characteristics of the cookies themselves.

Rights of data subjects

By sending an email to privacy@yabebeauty.com, you can exercise all the rights provided for by the Regulations, including i) knowing the origin of the data, the purposes and methods of processing and communication ii) rectification (to update and correct data) iii) erasure of data (right to be forgotten) iv) restriction (to limit processing) iv) portability (receive the data provided and transmit it to another controller) v) withdrawal of consent given and opposition to processing.

In case of processing in violation of the Regulations, it is possible to lodge a complaint with the Data Protection Authority. The contact details for the Authority are available at the following address http://www.garanteprivacy.it/home/footer/contatti.


Cookie policy — extended information

Upon first access to the Site, the user will be informed of the use of cookies and this policy, which must be accepted to continue browsing. Acceptance of this cookie policy and browsing the Site without disabling cookies implies authorization by the user to use this type of cookies. This policy will always be available on the Site.

Below, information is provided on “cookies”, what type of cookies are used, how you can deactivate them, and how to disable third-party cookies.

What are cookies

Cookies are small text files that the sites visited by the user send to their device (smartphone, computer, tablet) where they are stored to be retransmitted to the same sites at the next visit in order to improve the access experience.

Cookies can also be from sites or web servers other than the one you are browsing (so-called “third-party” cookies) in the presence of links (also through images or sounds) to web pages of other domains.

Based on their characteristics and use, cookies can be divided into different categories: technical, profiling, first-party, and third-party.

Which cookies YA.BE uses

Technical cookies (for which consent is not required):

Session or navigation cookies that allow access to the services available for each type of user and to load any interface customizations and site features

CategoryCookie
Ya-bewordpress_logged_in_# · woocommerce_cart_hash · woocommerce_items_in_cart · woocommerce_recently_viewed · wp_woocommerce_session_# · wordpress_sec_# · displayCookieConsent

Functional or personalization cookies (cookies used to recognize and remember preferences and allow access to a version of the site based on certain predefined criteria such as the language used).

CategoryCookie
Ya-be_icl_current_language

Web Beacons: These are small images, also known as “pixel tags” or “clear GIFs”, that the controller may include in its site, services, apps, messages, and tools. They generally work with cookies to identify users and their activities.

CategoryCookie
Facebook_fbp

Analytics cookies: the Site uses Google Analytics, a web analysis service that uses cookies to analyze how users use the Site. The information generated by these cookies will be transmitted to Google and stored on Google’s servers in the United States. Google will use this information for the purpose of tracking and examining the user’s use of the Site, compiling reports on Site activities, and providing other services relating to Site activities. Google may also transfer this information to third parties where required by law or where such third parties process the aforementioned information on Google’s behalf. Google will anonymize the user’s IP address and will therefore not associate it with any other data held by Google. For more information, please consult the following link https://support.google.com/analytics/answer/6004245. The user can selectively disable Google Analytics by installing the opt-out component provided by Google on their browser: https://tools.google.com/dlpage/gaoptout.

CategoryCookie
Google_ga · _gid

Third-party profiling cookies

By browsing the Site, the user may receive third-party cookies, including profiling ones. These are cookies used to track the user’s navigation on the web and create profiles in order to send promotional messages in line with the preferences previously expressed by the user. For more details or to deny consent to third-party cookies, you can click on the links in the following sections.

Social Plugins: these are cookies installed by social buttons (Facebook, Twitter, etc.). Their use is optional. When the user uses one of the plugins mentioned above, by pressing the reference icon button, the Site will contact, through the user’s browser, the servers where the social sharing services mentioned are managed, communicating to them the data that the user intends to publish and share through their social profile (for which the user remains solely responsible) and informing them (the servers) of the pages the user has visited. Please note that to exclude this possibility, the user must avoid sharing content using the plugin buttons listed above. For further details regarding the use and collection of data through social plugins and to know how the data thus collected and transmitted are processed (and for what purposes), please consult the privacy and legal policy issued by the owners of the services in question.

Cookie duration

Some cookies (session cookies) remain active only until the browser is closed or the logout command is executed. Other cookies “survive” the closing of the browser and are also available in subsequent visits by the user. These cookies are called persistent and their duration is set by the server at the time of their creation. By browsing through the pages of the Site, you can interact with sites managed by third parties that can create or modify persistent and profiling cookies.

Cookie management

The user can decide whether or not to accept cookies using their browser settings. Total or partial disabling of cookies could compromise the use of the Site’s features, but not prevent browsing. The setting can be defined specifically for different sites and web applications. Below are the web resources that illustrate how to proceed for each of the main browsers: Chrome, Firefox, Internet Explorer, Opera, Safari. For an overview of how to act for the most common browsers, you can visit cookiepedia.

More information can be requested by writing to the Controller at the email address privacy@yabebeauty.com.


Publication date: 2019-08-02 Revision date: 2025-09-08