Today's offers

According to the Regulation (EU) 2016/679 on personal data protection (hereinafter “GDPR”), WYCON SPA with legal head office in Piazza IV Novembre, 4 - 20124 Milan, P.I. 02317910186, hereby informs all concerned people about the types of data it collects, how it uses such data and those with whom it shares it. It also describes concerned people rights according to the data processed.

A. Data Controller and Data Processor

The data controller (hereinafter the “Data Controller”) is the company WYCON S.P.A. with legal head office in Piazza IV Novembre, 4 - 20124 Milan, P.I. 02317910186. The data processor, whose position is defined by the Article 28 of the GDPR (hereinafter the “Data Processor”), is the company Splio Italia SRL with legal head office in via Emilio Motta 10, 20144 Milan, Italy.

B. Categories of Personal Data processed

Data processing concerns data derived from the browsing of the site through cookies and/or other tracking systems, and personal data communicated by the concerned person to register for services and/or participation in initiatives promoted by WYCON S.P.A. and/or by third parties as co-promoters. 

C. Cookies

The website uses cookies and similar technologies to provide certain functionalities, to understand and measure their performances and to offer targeted advertising. For more information about cookies and how to modify cookie settings, please refer to the appropriate section at the following link:


D. Purposes of processing personal data

Personal data will be processed for the purposes listed below, which do not require the consent of the concerned person:

1) contractual, administrative and accounting purposes for service registration and participation in initiatives promoted by WYCON S.P.A. on its website and in Wycon Cosmetics branded stores, for the performance of and access to all related ancillary services, as well as for any other accounting, tax, administrative or other processing required by law in relation to participation in the aforementioned initiatives. (Legal basis of processing: Contract performance)

Furthermore, the Data Controller shall process the data for the following purposes, with the prior consent of the concerned person:

2) direct marketing by sending (even automatically) by mail, email, or advertising text messages and/or information material to promote products and services marketed by WYCON S.P.A. and/or by third parties; (Legal basis of processing: Consent)

3) profiling through the reading and analysis of purchasing behaviours and the use of data relating to purchases, in order to improve the product range and carry out specific promotions of products and product ranges which match the concerned person’s profile and needs as far as possible, and market research regarding satisfaction surrounding the initiatives and product portfolio on sale and the services marketed by WYCON SPA and/or by third parties. (Legal basis of processing: Consent)

Finally it shall be processed for: 

4) any management and compilation of data forms available on the website to request information, make reports and contact the Data Controller, and to manage and respond to such requests. (Legal basis of processing: Performance of the contract and pre-contractual measures).

E. Processing, Transfer and Storage of Personal Data

In relation to the aforementioned purposes, the processing of data shall take place with the use of manual, computerised and electronic instruments, directly and/or through third parties, with instruments suitable to guarantee the security and confidentiality of the communicated informations, in compliance with the law. The concerned person’s data shall be available to employees of the marketing and market analysis office, as well as employees of the administrative and accounting departments. The Data Controller, subject to explicit prior consent, may provide the concerned person’s personal data to the following subjects: third-party suppliers/contractors of goods or services (for example, a mailing company); parent companies, controlled by or associated with WYCON S.P.A. for administration-accounting purposes; companies associated with services or commercial initiatives promoted by WYCON S.P.A.; third-party companies that carry out marketing and/or promotional activities. These subjects shall provide adequate guarantees of competence and knowledge of the current legislation regarding the protection of personal data. Personal data are processed in the offices of the Data Controller and the Data Processor within the European Union. If them will be transferred to countries outside the European Union, the concerned person shall be informed accordingly.


F. Obligatory or optional nature of the provision of data

The provision of data is always optional, but without it, and for the purposes referred to in paragraph 1) the concerned person shall not participate in initiatives promoted by WYCON S.P.A. and make use of the services associated with them, while for the purposes referred to in points 2) and 3), while being able to participate, it shall not make use of some of the benefits specifically reserved for it or receive information on initiatives of interest to them. For the purpose referred to in point 4) the provision of data is optional, and if no such provision is made, we would not be able to respond to requests and/or reports made by the concerned person.

G. Rights of the data subject

The law grants the concerned person a series of rights including the right of access to data, the right of reply, the right to delete it, the right to limit its processing, the right to object to processing for reasons related to a particular situation and the right to data portability which you may exercise at any time by writing to WYCON S.p.A. at the address WYCON S.p.A. Via Interporto di Nola - Interporto di Nola- Lotto C3 - 80035 - Nola (NA) - Italy. In addition, the concerned person is entitled at all times to withdraw the consent provided, and is entitled to lodge a complaint with the Guarantor for the protection of personal data.

H. Data retention period

The data processed for the purposes referred to in points 2) and 3) shall be kept for the period laid down by law, while the data collected to administrative and accounting purposes shall be maintained until the statutory limitation period has expired.

I. Data Protection Officer

You can contact the Data Protection Officer (DPO) for all matters relating to the processing of your personal data and the exercise of the rights deriving from the GDPR at the e-mail address