Privacy Policy

1. Introduction

LooksArt (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your information when you use the website www.looksart.eu (the “Website”) and the mobile application (the “App”), together referred to as the “Services”.

We process your data in accordance with the General Data Protection Regulation (EU) 2016/679 (the “GDPR”), the Italian Personal Data Protection Code (D.lgs. 196/2003) and other applicable EU law.

2. Data controller

The data controller is:

LOOKSART S.R.L.S
Registered address: VIA VITTORIO SPINAZZOLA 38 – 00164 – ROMA (RM), Italy
Email: privacy@looksart.com
VAT number: 18184491001

For any matter relating to your data, please write to the address above.

3. What data we collect

We may collect the following categories of personal data:

• Account data: name, email, password, profile details.
• Purchase data: purchase history, payment confirmations (processed securely through third-party payment providers — we do not store card details).
• Usage data: logs, IP address, device type, operating system, activity in the app.
• Location data (optional): when location services are enabled, we may use GPS or network data for location-based tours.
• User content: material you upload (for example, in reviews or during tours).
• Communication data: messages sent through in-app feedback, forms or email.

4. How we use your data

We process personal data for the following purposes, on the legal bases set out in the GDPR:

1. Providing the Services — registration, access to tours, running the app (Art. 6(1)(b): performance of a contract).
2. Processing purchases and payments (Art. 6(1)(b)).
3. Improving the Services — analysing usage and feedback (Art. 6(1)(f): legitimate interest).
4. Service notifications — updates, changes to terms, security notices (Art. 6(1)(c)).
5. Optional marketing messages — only with your explicit consent (Art. 6(1)(a)).
6. Security and compliance — fraud prevention, legal compliance, Digital Services Act requirements (Art. 6(1)(c)).

5. Legal bases for processing

We rely on the following legal bases under the GDPR:

Consent — for optional features (newsletters, location-based tours, cookies).
Contract — where processing is necessary to provide the Services you requested.
Legal obligation — where required by EU or Italian law.
Legitimate interest — to improve the service, prevent fraud and maintain security, where this does not override your rights.

6. Data retention

• We keep personal data only for as long as is necessary for the purposes set out above.
• Account data is kept while the account is active. When an account is deleted, we delete or anonymise the data within 30 days, except where we are required to keep it for legal or accounting purposes.
• Some purchase data may be kept for up to 10 years in accordance with Italian tax and accounting law.

7. Sharing your data

We do not sell your data. We may share it with:

• Service providers — hosting, cloud services, analytics, payment systems.
• Public authorities — where required by law.
• Partners — with your consent (for example, joint tours or events).

All third-party processors are bound by GDPR-compliant agreements.

8. International data transfers

If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards, such as:

• European Commission adequacy decisions, or
• Standard Contractual Clauses (SCCs).

9. Your rights (Art. 15–22 GDPR)

As a data subject you have the right to:

• access your data;
• correct inaccurate or incomplete data;
• erase your data (the “right to be forgotten”);
• restrict processing in certain cases;
• object to processing (for example, for marketing);
• data portability in a structured, machine-readable format;
• withdraw your consent at any time (without affecting the lawfulness of processing carried out before);
• lodge a complaint with the Garante per la Protezione dei Dati Personali (the Italian supervisory authority) or your local authority.

Please send requests to privacy@looksart.com. We will respond within 30 days.

10. Cookies and tracking

Our Website and App use cookies and similar technologies.

• Essential cookies are necessary for the service to work.
• Analytics cookies help us improve the experience (only with your consent).
• Marketing cookies (where used) require explicit consent.

You can read more in our Cookie Policy.

11. Data security

We apply appropriate technical and organisational measures to protect your data, including encryption, secure servers and restricted access. That said, no system is completely secure, and you acknowledge that using the internet involves certain risks.

12. Children’s data

Our Services are not addressed to children under 16. If we become aware that a child’s data has been collected without parental consent, we will delete it immediately.

13. Changes to this policy

We may update this Policy from time to time. Changes are published on the Website and in the App with an updated “Last updated” date. If the changes materially affect your rights, we will notify you in advance.

14. Contact

For any questions, or to exercise your rights under the GDPR:

LOOKSART S.R.L.S.
VIA VITTORIO SPINAZZOLA 38 – 00164 – ROMA (RM), Italy
Email: privacy@looksart.com

Questions about this document: brand@looksart.eu