Privacy Policy
We, Santa Maria Novella Japan K.K. have established the following privacy policy (hereinafter referred to as the "Policy") regarding the handling of personal information of the user (hereinafter referred to as "You") for the services (hereinafter referred to as the "Service") provided on the Santa Maria Novella website in Japan (the "Site").
Article 1 (Personal Information)
Personal information (hereinafter referred to as "Personal Information") as defined in the Japanese Personal Information Protection Law, and refers to information about a living individual that can identify the specific individual by name, date of birth, address, telephone number, contact information, or other description contained in the information, as well as information that can identify the specific individual by itself, such as appearance, fingerprints, voice print data, and health insurance card insurer number. During the use of the Site we process your browsing data and Personal Information that You provide.
Browsing data are processed for the following purposes: to verify the proper functioning of the Site and the services offered. The legal basis for the processing is the legitimate interest of the Data Controller in the proper functioning of the Site. The provision of browsing data is necessary for accessing the Site. When there is a legal obligation browsing data may also be used for the investigation of criminal offences by the Judicial Authorities.
Article 2 (Method of Collecting Personal Information, etc.)
When you make purchases online or at our points of sale (including accessing the Site by scanning the QR code) or when you make a request to our Customer Service as well as when you browse the Site and/or subscribe to our newsletter, we processes your Personal Information such as, for example: name and surname, address, contact information (e-mail address and/or telephone number), address, tax code/VAT number, data relating to payment instruments, data relating your purchase. The Personal Information you voluntarily provide are processed for the purposes described below.
Article 3 (Purpose of collecting and using personal information)
The purposes for which we collect and use personal information are as follows
1. manage your requests, such as - purely by way of example - replying to queries received by the Customer Service and registration on the Site/creation of an account. The legal basis for the processing is the execution of pre-contractual measures taken at the request of the data subject. The provision of data is necessary in order to allow us to respond to requests;
2. manage your purchase order, including the administrative management of the contract, the shipment of products, the management of payments, credits and any disputes and the prevention of fraud as well as the fulfilment of all obligations imposed by applicable laws and regulations. The legal bases for the processing are the performance of a contract to which the data subject is a party and the fulfilment of legal obligations incumbent upon us. The provision of data is necessary for the proper management of the contractual relationship;
3. provide information, only by email, about other products and/or services as well as promotional, commercial and marketing activities concerning products similar to those that have been purchased. The legal basis is legitimate interest. If you want to block this kind of email you can click the appropriate button at the bottom of our emails with which we send our emails, or you can write to privacy@jp.smnnovella.com;
4. personalization of the communications considering language and geographical area of residence (obtained using the address entered during your registration). The legal basis is our legitimate interest to send communication that you can understand and activities you can follow. The provision of data is optional;
5. shopping cart abandonment. The products placed in the cart remain visible and available for 14 days. In this situation, until you complete the purchase you can receive by e-mail a notification reminding you of the possibility to complete an interrupted purchase. The legal basis is the Data Controller’s legitimate interest to increase sales. You can always oppose such processing by exercising your rights. The provision of personal data is optional.
In addition, with your consent, your personal data may be processed for the following purposes:
6. marketing, i.e. to contact you and/or to send you (by post, telephone, e-mail, social network, MMS or SMS messages and other forms of electronic communication) information and promotional communications, including of a commercial nature, newsletter, advertising material, catalogues and invitations to events, relating to our products and our services. If you decide to block our marketing communication, you can always unsubscribe using the appropriate button at the bottom of our emails with which we send the communication, or you can write to privacy@jp.smnovella.com; moreover, if you decide not to receive marketing calls, you can be registered at Telephone Preference Service;
7. profiling, i.e. to send you information and promotional communications, including of a commercial nature, advertising material, catalogues and invitations to events, relating to our products and our services according to your interests and preferences.
The legal basis for the processing is the consent of the data subject. The provision of data is optional. Finally, we would like to point out that, with your consent, we
may store the data from online purchases relating to the payment method you have indicated in order to facilitate subsequent purchases.
Within the scope necessary to achieve the purposes of collection and use as stipulated in the preceding paragraph, we may outsource the handling of personal information (including collection, storage, sending of advertisements, and information analysis) to a third party (including businesses located outside Japan), and in such cases, we may provide personal information to the third party.
We will only outsource to third parties that meet our selection criteria and have taken the safety management measures we have required, and we will conduct necessary and appropriate supervision of the outsourcing party by concluding appropriate contracts with them, etc.
Article 4 (Technology for Customizing this Site)
We use a variety of technologies to automatically collect information about your use of the Site or our web advertisements or when you access our social networking sites or mobile and other applications (e.g., Cookie, your web request, Internet Protocol address, browser type, browser language, date and time of your request, etc.) and to customize the Site to better meet your needs. language, the date and time of your request, etc.) and to customize the Site to better meet your needs. When browsing the Site or accessing the Site by scanning the QR code, cookies are used as explained in the Cookie Policy.
Article 5 (Change of Purpose of Use)
The Company shall change the purpose of use of personal information only when it is reasonably deemed that the purpose of use is relevant to the purpose of use before the change.
In the event of a change in the purpose of use, the Company shall notify you or publicly announce on this website the purpose of use after the change by the method prescribed by the Company.
Article 6 (Processing methods and retention times)
The Company has adopted specific security measures to prevent loss, unlawful or incorrect use of and unauthorised access to data.
Personal Information are stored for the time strictly necessary to achieve the purposes for which they were collected. In particular:
• for the management of your requests, the storage time is equal to the time necessary to process the request plus any additional period required by law;
• for the management of your purchase order the data processed for this purpose will be kept for up to ten years from the fulfilment of the purchase order;
• provide information, the data relating your purchases in order to send you communications on similar products will be records for 36 months from the date of your purchase;
• for personalize communications based on the language and geographical region of residence, personal data will be processed for this purpose until the personal data will be processed to carry out information activities and for marketing purposes;
• marketing, your personal data will be processed for this purpose for 36 months from the date on which you have given your consent;
• profiling, your personal data will be processed for this purpose for 36 months from the date on which you have given your consent;
• shopping cart abandonment, the products included in the cart remain visible and available for 14 days.
For more detailed information, please write to the following e-mail address privacy@jp.smnovella.com.
Article 7 (Joint Use of Personal Information)
We may jointly use personal information as follows.
For the purpose of:
- provide information about other products and/or services only by email
- marketing
- profiling
- personalization of the communications considering language and geographical area of residence
Officina Profumo Farmaceutica di Santa Maria Novella S.p.A. and Santa Maria Novella Japan K.K. are Joint Controllers. For further details on Joint Controller‘s arrangement you can click here.
You can contact the Officina Profumo Farmaceutica di Santa Maria Novella S.p.A. at the following addresses:
- via e-mail: privacy@smnovella.com
- by post: Officina Profumo Farmaceutica di Santa Maria Novella S.p.A. Via della Scala 16, 50123 - Florence, Italy.
You can contact the Santa Maria Novella Japan K.K. at the following addresses:
- via e-mail: privacy@jp.smnovella.com
- by post: Forum Building, 2-24-11 Minami-Aoyama, Minato-ku, Tokyo, Japan
Pursuant to Article 37 of the Regulation UE 679/2016 (“GDPR”) and Guidelines on the Act on Protection of Personal Information of Japan (“APPI”), Officina Profumo Farmaceutica di Santa Maria Novella S.p.A. has also appointed a Data Protection Officer ("DPO").
You can contact the DPO at the following addresses:
- via e-mail: dpo@jp.smnovella.com
- by post: Officina Profumo Farmaceutica di Santa Maria Novella S.p.A., Via della Scala 16 - 50123 Florence, to the attention of the Data Protection Officer.
Article 8 (Provision of Personal Information to Third Parties)
We will not provide personal information to third parties without your prior consent, except in the following cases:
• When required by law
• When it is necessary for the protection of the life, body, or property of an individual and it is difficult to obtain the consent of the individual
• When it is especially necessary to improve public health or promote the sound growth
of children and it is difficult to obtain the consent of the person concerned.
• When it is necessary to cooperate with a national agency, a local government, or an individual or entity entrusted by either a national agency or local government to execute affairs prescribed by law, and in which obtaining the consent of the individual is likely to impede the execution of the affairs concerned.
We may provide Personal Information (excluding information requiring special consideration) to a third party if we have notified or announced the following matters in advance and if we have notified the Personal Information Protection Committee. Personal Information (excluding Personal Information requiring special consideration) to a third party.
The purpose of use must include provision to a third party
• Data items provided to third parties
• Means or method of provision to third parties
• Stopping the provision of personal information to third parties at the request of the individual
• How to accept the person's request
Notwithstanding the provisions of the preceding two paragraphs, in the following cases, the recipient of such information shall not be considered a third party.
• When we outsource all or part of the handling of Personal Information within the scope necessary to achieve the purpose of use
• Cases in which personal information is provided as a result of the succession of business due to merger or other reasons
The Personal Information are shared, with particular reference to management and conservation, with Recipients, appointed as Data Processors pursuant to Article 28 of the GDPR and Article 27, para 5, item 1 of the APPI, which could be found outside the European Economic Area, in particular in Canada and in the United States. This transfer is done in accordance with and within the limits provided for by the applicable legislation, particularly Articles 44 et seq. of the GDPR and Article 28 of the APPI. The transfer of data to such Countries is in compliance with the suitable guarantees of the standard contractual clauses, pursuant to Article 46 par. 3 lett. a) GDPR and Article 16, item 1 of the APPI Enforcement Regulation.
Furthermore, the Data may be transferred abroad, within and/or outside the European Union, to external companies/companies of the SMN Group, for the pursuit of the purposes indicated above, in accordance with and within the limits provided for by the applicable legislation, particularly Articles 44 et seq. of the GDPR and Article 28 of the APPI.
For more detailed information, please write to the following e-mail address privacy@jp.smnvella.com.
Article 9 (RIGHTS OF THE DATA SUBJECT)
As provided for in Article 13 of the GDPR and Articles 33 to 35 of the APPI (where applicable), the User may at any time:
a) request from the Data Controllers access to and rectification or erasure of personal data or restriction of processing concerning the User;
b) object to the processing of personal data;
c) exercise the right to data portability;
d) withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
e) lodge a complaint with a supervisory authority.
The rights described above in letters a), b), c) and d) may be exercised by submitting a request to the Data Controllers at the following addresses without following any specific formalities:
You can contact Santa Maria Novella Japan K.K. at the following addresses:
- Via e-mail: privacy@jp.smnovella.com
- By post: Santa Maria Novella Japan K.K., Forum Building, 2-24-11 Minami-Aoyama, Minato-ku, Tokyo, Japan.
You can contact Officina Profumo Farmaceutica di Santa Maria Novella S.p.A. at the following addresses:
- via e-mail: privacy@jp.smnovella.com
- by post: Officina Profumo Farmaceutica di Santa Maria Novella S.p.A. Via della Scala 16, 50123 - Florence, Italy.
To stop receiving communications or to change your contact preferences, please write to privacy@jp.smnovella.com, providing your full name, the e-mail address at which you wish to be contacted and, in specific justified cases, a copy of your identification document, so that your request can be handled correctly. In addition, to unsubscribe from the newsletter service, click on the "unsubscribe" link at the bottom of each communication you receive, at any time.
Please when you send a request of your rights, you include “My Rights” in the subject line and provide a clear explanation of which right you are exercising and your country of residence in the body of the email.
Your rights and our responses will vary based on your state or country of residency. Please note that you may be located in a jurisdiction where we are not obligated, or are unable, to fulfill a request. In such a case, your request may not be fulfilled.
Article 10 (Right to object)
For processing based on legitimate interest or for marketing and profiling purposes, you have the right to object which can be exercised by writing to privacy@jp.smnovella.com. You can write to this email address in order to stop commercial communication from the Data Controller. In addition, to unsubscribe from the newsletter service or stop receiving marketing communications, click on the "unsubscribe" link at the bottom of each communication you receive, at any time.
Article 11 (Changes to Privacy Policy)
The contents of this policy may be changed without notice to you, except as otherwise provided by law or otherwise in this policy.
Unless otherwise specified by the Company, the revised Privacy Policy shall take effect from the time it is posted on the Site.
Article 12 (Minors)
If you are a minor, you may browse the Site, but you may not provide us with any personal information (for example, you may not register or purchase any products on the Site). If we become aware that you are a minor, we will not collect personal information from you, and if we become aware that we have received personal information from a Site visitor who is a minor for any reason, we will delete such personal information from our records.
Article 13 (How we protect personal information)
We have put in place reasonable safeguards to protect the personal information you provide from unauthorized use, alteration, or destruction. If you have any questions about our security, please contact us at privacy@jp.smnovella.com.
Article 14 (Links to Other Websites)
In order to provide information to our customers, this website may contain links to the websites of other companies. Such third-party websites are separate websites that are unrelated to the Site operated by the Company. When you access such third-party websites, you are subject to the privacy policies of such websites. We assume no responsibility for your use of such third-party websites.
Last Update: 15.07.2025