1. BASIC INFORMATION ABOUT DATA PROTECTION
- Controller: MESOESTETIC E-COMMERCE, SL
- Purpose: Handling requests of various kinds from the User.
- Legitimate basis: Consent of the data subject and compliance with contractual obligations.
- Recipients: Data Processors.
- Rights: Accessing, rectifying and erasing data, as well as other rights, as explained in the additional information.
- Additional information: You can consult additional and detailed information about Data Protection at our web page: https://www.mesoestetic.com/en/privacy-policy
2. ADDITIONAL INFORMATION
This Data Protection Policy regulates the processing of personal data provided by the User through the Internet portal (hereinafter, the “Portal”) that MESOESTETIC E-COMMERCE, SL makes available to Internet users. This Policy forms an integral part of the Legal Notice that can be accessed at any time from the Portal.
The User guarantees that the data provided are true, accurate, complete and updated, and the User is liable for any damages, whether direct or indirect, that could be caused as a consequence of a breach of that guarantee. In the event that the data provided belong to a third party, the User guarantees that they have informed said third party of the aspects contained in this document and that they have obtained the third party’s authorisation to provide their data to MESOESTETIC E-COMMERCE, SL for the indicated purposes.
The Portal could offer functionalities for sharing content through third-party applications such as Facebook, LinkedIn, Twitter or Instagram. These applications can record and process information related to the User’s browsing on various websites. Any personal information that is collected through these applications could be used by third-party users of the same, and their interactions are subject to the privacy policies of the companies that facilitate those applications.
The Portal could house blogs, forums and other applications or services of social networks for the purpose of facilitating the exchange of knowledge and content. Any personal information that may be provided by the User could be shared with other users of that service, over which MESOESTETIC E-COMMERCE, SL has no control.
In order to offer information or services of interest according to the User’s location, MESOESTETIC E-COMMERCE, SL could access data pertaining to the geolocation of the User’s device in those cases in which the User’s settings allow it.
For the purposes of technical security and systems diagnostics, MESOESTETIC E-COMMERCE, SL could, anonymously or aggregately, record the IP address (the device’s Internet access identification number, which allows devices, systems and servers to recognize each other and communicate between each other). This information could also be used for analytical purposes related to web performance.
2.1. WHO IS THE DATA CONTROLLER OF THE USER’S PERSONAL DATA?
IDENTITY: MESOESTETIC E-COMMERCE, SL recorded in the Register of Companies of Barcelona in Volume 26634, Folio 142, and holder of C.I.F (Tax ID Code) B-66.959.370.
POSTAL ADDRESS: Carrer de la Tecnologia, 25, 08840, Viladecans (Barcelona)
TELEPHONE: 902 26 20 31
2.1.1. WHAT TYPE OF DATA DO WE PROCESS ABOUT THE USER?
MESOESTETIC E-COMMERCE, SL processes the following user data: Identification data. Email.
2.1.2. FOR WHAT PURPOSE DO WE PROCESS THE USER’S PERSONAL DATA?
MESOESTETIC E-COMMERCE, SL processes the information provided by the User for the purpose of handling requests of various kinds made by the User. Depending on the nature of the request, the purpose will be to manage the following:
- Consultations and requests for proposals (RFPs) sent through the contact form that is set up for this purpose. Registration as a new User of MESOESTETIC E-COMMERCE, SL for purchasing products online.
- Participation through comments on social networks such as Facebook, LinkedIn, Twitter and Instagram.
- Participation through comments on blogs.
- Communication through the Newsletter to receive new product promotions.
- Electronic communications of an informative nature depending on the User’s interests.
MESOESTETIC E-COMMERCE, SL may prepare a commercial profile based on the information provided. No automated decisions will be made based on that profile.
In the event that the User registers in the Portal through the social login, MESOESTETIC E-COMMERCE, SL will only access the User’s personal data for which the User has given their consent when configuring access to the social network in question. Any information provided in relation to said social applications could be accessed by members of the corresponding social network. Said actions will be governed by the privacy policies of the service providers. MESOESTETIC E-COMMERCE, SL does not have any control over and is not liable regarding said entities or the use that may be made of the User’s information.
2.2. INFORMATION ABOUT THE DATA PROCESSING FOR SENDING COMMUNICATIONS FROM MESOESTETIC E-COMMERCE, SL
The data that are used or provided in informative and/or promotional communications are processed by MESOESTETIC E-COMMERCE, SL for purposes consisting in the electronic transmission of information and communications about services, activities, publications, contests, promotions and surveys of MESOESTETIC E-COMMERCE, SL and of all other companies of the Mesoestetic group – mesoestetic s.l., mesoestetic Pharma Group s.l. – in addition to official distributors of the same, both in Spain and in other countries that are within and outside of the European Union; or for the purpose of monitoring and optimising marketing campaigns through the use of technologies; and for the purpose of profiling for commercial purposes.
The consent for sending said communications may be revoked at any given time in each one of the communications received using the mechanism provided for such purpose.
The data storage criteria will be based on the statement against processing made by the User. In any event, the User may exercise the rights of access, rectification, restriction, erasure, portability and objection by sending a request to the postal address indicated above or by using the following email address: firstname.lastname@example.org.
2.3. FOR HOW LONG WILL WE STORE THE USER’S PERSONAL DATA?
In general, the personal data provided will be stored during the necessary period of time for handling the User’s request or as long as erasure of the data is not requested by the User.
2.4. WHAT IS THE LEGITIMATE BASIS FOR PROCESSING THE USER’S PERSONAL DATA?
The legal basis for processing the data is the legitimate basis due to express consent, compliance with contractual obligations and legitimate interest due to the creation of a commercial relationship with the User.
2.5. TO WHICH RECIPIENTS WILL THE USER’S PERSONAL DATA BE DISCLOSED?
In cases in which the User might request proposals of services (through the web page), their data will be provided to the data processors of MESOESTETIC E-COMMERCE, SL.
In cases that are justified according to a User’s request, essentially for informative activities and for the purpose of creating a commercial relationship, identification data may be provided to other entities associated with the network of MESOESTETIC E-COMMERCE, SL (including all other companies of the Mesoestetic group – mesoestetic s.l., mesoestetic Pharma Group s.l. – as well as to official distributors of the same, both in Spain and in other countries that are within and outside of the European Union), and they may be provided to those located outside of the European Economic Area for the mere purpose of handling a request linked to the country of destination. Likewise, the data may be transferred to public administrations and bodies for compliance with obligations directly required of MESOESTETIC E-COMMERCE, SL.
2.6. WHAT ARE THE USER’S RIGHTS WHEN THEY PROVIDE US WITH THEIR PERSONAL DATA?
The User has the right to obtain confirmation about whether or not MESOESTETIC E-COMMERCE, SL processes personal data related to the User; the right to access the User’s personal data; the right to request rectification of inaccurate data; and, if applicable, the right to request erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected. Under certain circumstances, the User may request the restriction of processing of their data, in which case the data will only be stored for exercising or defending against claims. Under certain circumstances and for reasons related to the User’s particular situation, the User may object to the processing of their data. MESOESTETIC E-COMMERCE, SL will cease to process the data, barring compelling legitimate reasons or for the purpose of exercising or defending against possible claims. The User may pose any questions they deem appropriate in relation to this Policy, as well as exercise their rights under the legally provided terms, for which they must send a letter via postal mail to MESOESTETIC E-COMMERCE, SL, Carrer de la Tecnologia, 25, 08840, Viladecans (Barcelona), or by sending an email to email@example.com, thereby indicating the corresponding request and attaching a copy of their DNI (National Identity Document) or other document that proves their identity.