Privacy
Last updated: 4 November 2026
Data controller
The data controller is Claudio Benegiamo, Via Monte Velino 18, Milano. If you have any question about this notice, write to contacts@beautypricer.com.
Choosing your country and language
When you open the home page of the site, we send you to the right country by reading the country linked to your IP address and your browser language. We use this data only to decide where to send you, and we do not store it.
Cookies
The site shows you a notice with two buttons, Accept and Reject, with the same weight. We use two cookies of our own, lasting six months: the “cookie_banner” cookie remembers your choice (Accept or Reject) and is a technical cookie; the “Next-Locale” cookie remembers the last country you visited, and we set it only after you select Accept. Until you choose, and if you reject, we do not set it. We do not use profiling cookies. You can change your choice at any time from the “Cookie settings” link at the bottom of the site’s pages, which reopens the notice. If you switch from Accept to Reject, we delete the “Next-Locale” cookie and reload the page. If Vercel’s security system asks you to complete a check, it may set a session cookie lasting about one hour, and only in that case; for this cookie see the Vercel firewall documentation. This applies only to the site’s administrators, who sign in with Google to a restricted area and are registered by another administrator: in our database we keep their email and the technical data of the Google sign-in (the account identifier and the access credentials issued by Google), and Auth.js sets technical session cookies, only in that area.
Fonts
The fonts of the site are served from our own domain: your browser does not send requests to Google to download them.
Visit statistics
Only on the production version of the site, and only after you select Accept, we use Vercel Analytics to get visit statistics. If you reject, or until you choose, the script is not loaded and no statistics request is sent. According to Vercel, it collects date and time, page address, referrer, filtered query parameters, country, region and city, operating system, browser and device type, with no personal identifiers. It does not use third-party cookies: a visitor is recognized by a code (hash) derived from the request, which is discarded after 24 hours. The statistics history is kept for up to 12 months, although Vercel may keep it longer. For details on the data collected, see the Vercel Analytics documentation. On the same conditions, when you click the link to a store we send an event, “affiliate_click”, to Vercel Analytics, with only two values: the slug of the store and the slug of the product (the text identifiers that appear in the site’s addresses). It contains no personal data.
Hosting logs
The site is hosted by Vercel, which records the requests it receives to keep the service running and secure. Logs may include your IP address and your browser’s user agent and are usually kept for one day. For details, see the Vercel logs documentation.
Email correspondence
If you write to the contact address of the site, you give us your email address directly, your name if you include it, and the content of your message; we also receive the message headers, which include the sender’s IP address and server. The site has no accounts, forms or newsletters and sends no automatic replies. The message reaches Amazon Web Services (AWS), in Frankfurt, which saves a raw copy of it, and is forwarded to the controller’s mailbox; the replies we send stay in the mailbox. The purpose is to reply to you, and the legal basis is the controller’s legitimate interest in replying to those who write to it (Article 6(1)(f) GDPR). We keep messages in the mailbox for as long as needed to reply to you and to protect the controller’s rights, and then delete them; the copy at AWS expires within about 30 days in any case, even if you ask for erasure.
Going to the store’s site
When you click the link to a store, your browser goes from our site to Awin, the affiliate network, and then to the store’s site. From there you are on the sites of Awin and of the store, which have their own privacy notices: please refer to them. Our site records the click only as a simple count per offer, with no personal data: the click registry contains only the offer, the product, the store, the country and the language, with no IP address or user agent; what is stated above about the hosting logs applies as usual.
Purposes and legal basis
For choosing your country when you open the home page, for the “cookie_banner” cookie and for the hosting logs, the legal basis is the controller’s legitimate interest in running the site and keeping it secure (Article 6(1)(f) GDPR). For the “Next-Locale” cookie and for the visit statistics, the legal basis is your consent (Article 6(1)(a) GDPR), which you are free not to give and to withdraw at any time from the “Cookie settings” link: the site works anyway.
Recipients and transfers outside the EU
Our provider Vercel acts as a data processor, under a data processing agreement (DPA). Processing also takes place in the United States: Vercel states that it relies on the Standard Contractual Clauses (SCC) and on the EU-US Data Privacy Framework; for details, see the Vercel compliance page. For emails sent to the contact address, Amazon Web Services (AWS) acts as a data processor: it receives them and keeps their copy in Frankfurt. Forwarded emails reach Google (Gmail), the controller’s mailbox: Google states that it participates in the EU-US Data Privacy Framework and relies, where required, on the Standard Contractual Clauses (SCC). The search of the site uses MongoDB Atlas, the database service of the site, as a provider: the text you type in the search bar is sent to it to return the results. The site does not save the text you search for, but it may appear in the hosting logs described above.
Your rights
You have the right to access your data, to have it corrected or erased, to ask for restriction of processing, to receive it in a portable format and to object to processing. To exercise these rights, write to contacts@beautypricer.com.
Complaint to the supervisory authority
If you believe that the processing of your data breaches the law, you can lodge a complaint with the Italian Data Protection Authority (Garante). In the other countries where the site is available in English, the authorities are the Data Protection Commission (DPC) in Ireland and the Information Commissioner’s Office (ICO) in the United Kingdom.
United Kingdom
For visitors in the United Kingdom, the relevant data protection law is the UK GDPR and the supervisory authority is the Information Commissioner’s Office (ICO). Transfers of data to the United States are covered by the UK Extension to the EU-US Data Privacy Framework only where the recipient is certified for it.
Changes to this notice
We update this notice when the processing it describes changes. The version in force is always this page, with the date of the last update at the top.