Privacy policy
EU Regulation 679/2016 - General Data Protection Regulation (GDPR)
With the present policy, PREMI S.p.A. (hereinafter referred to as "PREMI", "we", "us", or "our"), a company belonging to the Berlin Packaging Group operating in the fragrance, skincare, pharmaceutical and make-up sectors, intends to inform users visiting the website “www.stocksmetic.com” (hereinafter the "Website") about its policy adopted with regard to the protection of personal data, emphasizing its commitment and attention to the protection of the privacy of the Website visitors. We kindly ask you to carefully read this privacy policy (the “Privacy Policy”), which applies both when you access the Website and decide to simply browse through it using our services, without purchasing any products, and when you decide to make purchases. Simple navigation within the Website is free and does not require registration, with exception of some areas in which the user may freely and expressly provide a series of data concerning him or her in order to access specifically identified services (e.g. to create his/her own account and make purchases in the online shop, subscribe to the newsletter or request information through the "Customer Service" section, etc.). Where, therefore, you intend to provide your personal data in order to access such further services, you will be expressly informed in accordance with EU Regulation 679/2016 General Data Protection Regulation (the "Regulation") of the purposes and methods of use of your data by PREMI as well as of your right to request the erasure of your data or its update at any time.
Pursuant to Article 13 of the Regulation, PREMI provides you with the following information.
a. Identity and contact details of the data controller
The Website is operated by PREMI S.p.A., with registered office at Via Gera 16/18, 20060 Gessate (MI), Italy, Tax Code and VAT Number 09313920960, telephone +39 02 95929880, e-mail: privacy.eu@berlinpackaging.com, in its capacity as data controller pursuant to the Regulation.
b. Types of personal data processed
No registration is required to access the Website. There are, however, sections of the Website that require registration or the use of a username and password (e.g. to register in the reserved area), or services for the use of which it is necessary to provide personal data (e.g. to proceed with the online shop, to access newsletter services, to contact us, etc.) [1] such as name, surname, e-mail, shipping address, telephone number.
With reference to data relating to navigation within the Website, see also point g. below concerning the profiling tools used by the Website.
c. Purposes and legal basis of processing
Data are collected and processed for purposes strictly related to the use of the Website, its services and the purchase of products online. The purposes for which the data are used are set out in detail in the specific notices provided by the Website in all cases of data collection. We therefore ask you to read the information notices that from time to time illustrate the characteristics of the processing operations that will be carried out by PREMI (e.g. to subscribe to the newsletter service, to access your account, to send requests through the "Customer Care" section, etc.). In particular, your data will be processed in order to manage your orders and to guarantee you the use of the services (including after-sales services) requested through the Website, to fulfil the related legal obligations, to respond to your possible requests, as well as, based on your prior consent, to carry out marketing activities and analysis of your preferences. Based on your prior consent, these communications may include email tracking tools (such as tracking pixels), described further in section g. Consent to tracking activities is collected separately from consent to receiving marketing communications, following the procedures outlined in the information notice dedicated to the newsletter, and may be withdrawn at any time, independently of your subscription to commercial communications.
Your data will be processed in full compliance with the data protection legislation [2].
d. Optional provision of personal data
Providing personal data is generally optional. Only in certain cases may the failure to provide data result in the impossibility of accessing specific services and obtaining what may be requested (e.g., registration - and the provision of personal data, email address, delivery/billing address, credit/debit card details or bank details, and telephone number - is necessary to proceed with the online purchase of products); consequently, failure to provide such data may prevent PREMI from allowing access to the Website's services or from responding to users' requests.
Data that are necessary from time to time are indicated in the data collection forms available on the Website - for example by means of an asterisk (*) - and the consequences of failure to provide such data are set out in the specific privacy notices on the data collection pages.
e. Data processing methods and scope of disclosure
Data may be processed both electronically and on paper (e.g. for the management of purchases on the Website). PREMI guarantees the lawful and correct processing of the personal data provided through the Website, in full compliance with the legislation in force, as well as the maximum confidentiality of the data provided during registration. The data shall not be disseminated and shall be processed by persons expressly authorized to manage the e-commerce Website and the CRM system. For purely organizational and functional reasons, PREMI has appointed a number of service providers functional to the management of the Website as external data processors for the processing of users' personal data for purposes strictly connected and related to the provision of the services provided. A full list of external data processors can be obtained by contacting privacy.eu@berlinpackaging.com.
The data may also be made available to the other companies in the Berlin Packaging group as well as to companies that provide us with services [1] useful for the management of your purchases and related services.
f. Links to other websites
This notice is provided only for the Website (https://www.stocksmetic.com) and not for any other websites that may be consulted by the user through links. PREMI cannot be considered responsible for personal data provided by users to external parties or to any websites linked to our Website.
g. Profiling and/or personalization tools
PREMI does not carry out any promotional and/or advertising activities without the user's prior express consent.
The Website uses "cookies", both technical (i.e. to facilitate navigation and use of the Website) and profiling (i.e. to analyze users and their behaviour and preferences, and to provide them with personalized advertising).
For a detailed explanation of the cookies used by the Website and how to deactivate them, please read our Cookie Policy.
Within the scope of email marketing and newsletter activities, PREMI may utilize technologies that enable the collection of information regarding message openings and interactions with the sent communications (for instance, through the use of tracking pixels or similar technologies).
Subject to the user's consent, such information is associated with the user's profile and used to analyze the effectiveness of email campaigns, divide contacts into homogeneous groups (segmentation), assign an interest score, send automated communications based on user interactions and measure purchases attributable to email campaigns.
If consent is not given, emails will be sent without tracking tools and no information regarding interaction with communications will be collected.
These tools are used exclusively with users who have given their consent or, for contacts acquired prior to April 29, 2026, who have not objected after having received adequate notice, without prejudice to the data subject's right to withdraw consent to tracking at any time, including on a selective basis, as described in the section "Rights of Data Subjects".
h. Who processes your data
Your data will not be disclosed or transferred to third parties for compensation. The personal data entered in the collection forms on the site will be disclosed (limited to their respective sphere of competence) to persons authorized to process the data in the marketing, purchasing, finance and legal departments. The data may also be shared with our business partners as well as with companies that provide us with services [1] useful for handling your requests.
In addition to PREMI, your data may also be processed by the European parent company Berlin Packaging Italy S.p.A. for specific marketing activities planned by the same company.
i. Place of data processing and transfers outside the European Union
Processing related to the services provided by the Website is carried out in the European Union.
Due to the organisational policy of the Berlin Packaging group, to which PREMI belongs, your personal data may be transferred to the United States of America where the servers hosting the group's CRM (customer relationship management) applications are physically located.
The applicable legislation provides that your specific consent to the transfer to third countries is not required as the transfer is made on the basis of the adoption of adequate safeguards as per articles 46 and 47 of the Regulation, such as the adoption of standard contractual clauses approved by the EU Commission and on the basis of the Data Privacy Framework Program ('DPF').
j. Data retention period
Your personal data will be processed for the periods specified in the privacy notices provided when the data are collected [4].
For information regarding retention periods applicable to data collected through profiling tools (e.g., cookies), please refer to our Cookie Policy.
Data collected through email-tracking tools will be retained for the period necessary to achieve the purposes described above and, in any event, for no longer than twelve (12) months from collection. In the event of withdrawal of consent or objection, such data will be deleted or anonymized.
k. Rights of data subjects
By means of a communication to be sent to privacy.eu@berlinpackaging.com, you may at any time exercise your rights [5] as set out in Articles 15 to 22 of the Regulation, including knowing what data we are processing, how and for what purposes we use it, modifying the data you have provided us with or deleting it, asking us to limit the use of your data, requesting to receive or transmit your data, without prejudice to the possibility of changing your consents (if any). You can also always object to the processing of your data, in particular for marketing purposes or the analysis of your preferences.
Regarding email communications subject to tracking, you may withdraw your consent to monitoring activities at any time while continuing to receive the same communications without tracking tools. Such withdrawal may also be exercised through the dedicated link included in each email, separate from the unsubscribe link for marketing communications.
l. Who you can complain to
We remind you that, if you consider that the processing of your personal data violates the provisions of the Regulation, you may always lodge a complaint with the Data Protection Authority (www.gpdp.it), or, if different, with the Data Protection Authority of the Member State in which you habitually reside or work or of the place where the alleged infringement occurred.
m. Applicable law
This Privacy Policy is governed by the Regulation, which ensures that the processing of personal data is carried out with full respect for fundamental rights and freedoms, as well as the dignity of the data subject, with particular regard to confidentiality, personal identity, and the right to protection of personal data.
n. Revision clause
PREMI reserves the right to revise, amend, or simply update, in whole or in part, at its sole discretion, in many manners and/or at any time, without prior notice, this Privacy Policy also in consideration of changes in laws or regulations on the protection of personal data. Any amendments or updates to the Privacy Policy may be notified to users through:
(i) e-mail notifications sent to registered users of the Website; and/or
(ii) publication on the Website’s home page, and will be binding as soon as published and/or communicated.
We therefore ask you to regularly access this section to check the publication of the most recent and updated Privacy Policy or to check your e-mail inbox. The full text of the Regulation can be consulted on the website of the Personal Data Protection Authority (www.gpdp.it).
Footnotes
[1] Whenever PREMI acquires information and personal data it will, from time to time, inform users in advance of the purposes for which such data is required and the way it will be used. Where required, PREMI will obtain the user's specific consent to the relevant use of the data. By way of example, personal data such as first and last name, telephone number, e-mail address, and other information that the user agrees to provide to use the services of the Website by filling in a specific registration form may be requested. PREMI will use the personal data collected on-line solely for the purposes indicated during registration. The data relating to the connection and navigation within the Website (such as the URI-Uniform Resource Identifier addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment) are collected for the sole purpose of obtaining anonymous statistical information on the use of the Website and to check its correct operation and are deleted immediately after processing.
The data could be used to ascertain responsibility in the event of hypothetical cybercrimes against the Website. Except in such circumstances, the data will be deleted after the time required to provide the services illustrated on the Website has elapsed.
[2] Your personal data will be processed:
- pursuant to art. 6, paragraph 1, lett. b) and c) of the Regulation, to manage your orders, provide the services requested through the Website (including after-sales services), comply with related legal obligations, and respond to your requests;
- based on your consent, pursuant to art. 6, paragraph 1, letter a) of the Regulation, for marketing activities and the analysis of your preferences, including the use of email-tracking tools, by both the Data Controller and Berlin Packaging Italy S.p.A..
In any case, the processing will be carried out in compliance with the provisions of the measures currently in force, including any subsequent amendments and supplements, issued by the Italian Data Protection Authority.
[3] Your personal data may be disclosed to:
(i) payment processing companies;
(ii) product shipping and delivery companies;
(iii) legal, tax and audit consultants;
(iv) companies within the Berlin Packaging group
(v) third party companies for the management of the e-commerce website services and for sending the newsletter.
[4] Your personal data provided for the purposes referred to in section c.1 of the Privacy Disclaimer (contractual purposes and implementation of pre-contractual measures) will be stored for as long as is necessary to fulfil the obligations towards you in connection with the business relationship and, in any event, for no longer than ten (10) years after the termination of the contractual relationship.
If you decide to create a customer account by registering in the "My Account" section, your data will be processed for as long as your account remains active. You may close your account at any time, and your request will be handled immediately or, if there is a pending purchase order, as soon as it has been executed. If your account remains inactive for four (4) years, PREMI will contact you to find out whether you wish to maintain or close your account. If you do not wish to keep your account active, it will be closed and your data deleted.
Data relating to your purchase details will, however, be processed anonymously for analysis or promotional purposes
Your bank details are only processed and stored securely by the operator of the payment service you have chosen (Paypal, Bank Transfer and Stripe) for the time stipulated by national law.
Your data, collected through the Website's Customer Service sections, or through the information request forms, etc., of the Site will be processed and stored for the time necessary to properly manage your requests. The processing of your personal data for marketing purposes (including newsletter distribution) may only take place after obtaining your consent.
When this consent is about to expire, PREMI may contact you to find out whether you wish to continue to receive communications and newsletters about new products, services, offers from PREMI or the Berlin Packaging group and, therefore, renew your consent. Your consent to the processing of your data for marketing purposes is also freely revocable at any time.
The data processed for the purpose of sending you answers to your enquiries, communications on PREMI and Berlin Packaging branded products, offers, news and events, marketing communications, will be stored for five (5) years from the date of collection or from the date of your last contact with PREMI for non-contractual reasons.
[5] Articles 15 to 22 of the Regulation grant you specific rights, including the right to:
- obtain confirmation as to whether or not personal data concerning you are being processed;
- obtain access to your personal data and the information referred to in Article 15 of the Regulation;
- obtain without undue delay the rectification of inaccurate personal data concerning you or the completion of incomplete personal data;
- obtain the erasure of personal data concerning you without undue delay;
- obtain the restriction of processing concerning your personal data;
- be informed of any rectification, erasure, or restriction of processing carried out in relation to your personal data;
- receive or transmit to another controller your personal data in a structured, commonly used, and machine-readable format;
- object at any time, on grounds relating to your situation, to the processing of personal data concerning you.
Your right to revoke at any time any processing consents you may have given and to object to our analysis activities remains unaffected.
Furthermore, pursuant to Art. 21 of the Regulation, you shall have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you carried out in pursuance of the legitimate interests of the controller pursuant to Art. 6(1)(f) of the Regulation.