1. Introduction
LooksArt (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website www.looksart.eu (“Website”) and mobile application (“App”), together referred to as the “Services.”
We process your data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Italian Privacy Code (D.lgs. 196/2003), and other applicable EU laws.
2. Data Controller
The data controller is:
LOOKSART S.R.L.S
Registered office: VIA VITTORIO SPINAZZOLA 38 – 00164 – ROMA (RM), Italy
Email: [privacy@looksart.com]
VAT/Tax ID: 18184491001
If you have questions regarding your data, please contact us at the above email.
3. What Data We Collect
We may collect the following categories of personal data:
- Account Information: name, email address, password, profile data.
- Transaction Data: purchase history, payment confirmations (processed securely via third-party payment providers — we do not store credit card details).
- Usage Data: log data, IP address, device type, operating system, app activity.
- Location Data (optional): if you enable location services, we may use GPS or network-based data to provide location-based quests.
- Content Data: user-generated content you upload (e.g., in reviews or during quests).
- Communication Data: messages sent via in-app feedback, contact forms, or email.
4. How We Use Your Data
We process personal data for the following purposes, based on GDPR lawful bases:
- To provide our Services — account registration, quest access, app functionality. (Art. 6(1)(b) GDPR: contract performance)
- To process purchases and payments. (Art. 6(1)(b))
- To improve our Services — analyzing usage and feedback. (Art. 6(1)(f): legitimate interest)
- To send service communications — updates, changes to Terms, security notifications. (Art. 6(1)(c): legal obligation)
- To send optional marketing communications — with your explicit consent. (Art. 6(1)(a))
- To ensure safety and compliance — fraud prevention, legal compliance, Digital Services Act obligations. (Art. 6(1)(c))
5. Legal Bases for Processing
We rely on the following GDPR legal bases:
Consent — for optional features like marketing emails, location-based quests, or cookies (where applicable).
Contract — when processing is necessary to provide the Services you requested.
Legal obligation — where required by EU/Italian law.
Legitimate interest — for service improvement, fraud prevention, or security, provided your rights are not overridden.
6. Data Retention
- We keep your personal data only as long as necessary for the purposes described above.
- Account data is retained while your account is active. If you delete your account, we will delete or anonymize your data within 30 days, except where we must retain it for legal or accounting obligations.
- Some transaction data may be retained up to 10 years in accordance with Italian tax and accounting law.
7. Sharing of Data
We do not sell your data. We may share your data with:
- Service providers — e.g., hosting, cloud services, analytics, payment processors.
- Authorities — when required by law or legal process.
- Business partners — if you consent (e.g., co-promoted quests or events).
All third-party processors are bound by GDPR-compliant contracts.
8. International Data Transfers
If we transfer your data outside the European Economic Area (EEA), we ensure adequate safeguards, such as:
- European Commission adequacy decisions, or
- Standard Contractual Clauses (SCCs).
9. Your Rights (GDPR Articles 15–22)
As a data subject, you have the right to:
- Access your personal data.
- Rectify inaccurate or incomplete data.
- Erase data (“right to be forgotten”).
- Restrict processing under certain conditions.
- Object to processing (e.g., marketing).
- Data portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time (without affecting prior lawful processing).
- Lodge a complaint with the Garante per la Protezione dei Dati Personali (Italian Data Protection Authority) or your local supervisory authority.
Requests may be sent to [privacy@looksart.com]. We will respond within 30 days.
10. Cookies & Tracking
Our Website and App use cookies and similar technologies.
- Essential cookies are necessary for functionality.
- Analytics cookies help us improve user experience (only with your consent).
- Marketing cookies (if used) require explicit opt-in consent.
For more details, see our Cookie Policy.
11. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including encryption, secure servers, and access restrictions. However, no system is fully secure, and you acknowledge that use of the internet carries inherent risks.
12. Children’s Data
Our Services are not directed at children under 16. If we become aware of collecting data from a child without parental consent, we will delete it immediately.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be published on our Website/App with a revised “Last Updated” date. If changes materially affect your rights, we will notify you in advance.
14. Contact Us
For any questions or to exercise your GDPR rights:
LOOKSART S.R.L.S.
VIA VITTORIO SPINAZZOLA 38 – 00164 – ROMA (RM), Italy
Email: [privacy@looksart.com]