The purpose of this personal data protection policy is to inform you of the way in which MESOESTETIC E-COMMERCE, S.L. obtains, processes and protects the personal data that you provide or we collect, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (on the protection of natural persons with regard to the processing of personal data and on the free movement of such data) – General Data Protection Regulation, Organic Act 3/2018 of 5 December, on the protection of personal data and guarantees of digital rights, and other regulations concerning the personal data protection.
2.- Data Protection Officer
The controller of the personal data that you provide or that we obtain in other ways is MESOESTETIC E-COMMERCE, S.L. (hereinafter, “MESOESTETIC”), with C.I.F. B-66.959.370, domiciled at Calle de la Tecnologia, 25, 08840, Viladecans (Barcelona), email [email protected] and contact telephone +34 93 325 20 30.
3.- Platform Users, Clients and Potential Clients
Users are informed of the personal data that may be collected, their purpose and the legitimacy of their processing.
- Identification data: name, surname, country, city, postal code.
- Professional data: Company name
- Contact details: e-mail address, telephone
PURPOSE OF THE PROCESSING OF PERSONAL DATA:
- The purpose of the processing of your personal data is to guarantee the security of the service and to manage your queries, requests for information or complaints, using the Contact Form.
- Participation through comments on social networks such as Facebook, LinkedIn, Twitter and Instagram.
- Participation through comments on blogs.
- The processing may also consist, provided that we have received prior express consent by marking the Terms and conditions of the Mesoestetic Community by the user, in receiving communications, promotions of new products, company advertising, announcements, newsletters, etc.
MESOESTETIC may create a marketing profile based on the information provided. No automated decisions will be taken based on this profile.
In the event that the User registers on the Website through the social login, MESOESTETIC will only access the User's personal data to which the User has consented when setting up access to the social network in question. Any information provided in connection with such social applications may be accessed by members of the relevant social network. Such actions shall be governed by the privacy policies of the service providers. MESOESTETIC has no control over and is not responsible for such entities or their use of the User's information.
LEGITIMISATION FOR THE PROCESSING OF PERSONAL DATA:
- In general, the legal basis that legitimises the processing of personal data by MESOESTETIC is compliance with legal obligations or the public interest or in the exercise of public powers vested in MESOESTETIC.
- Some processing may also require the consent of the data subjects (receiving communications, advertising, announcements, newsletters, etc.). This consent must be given by a clear affirmative action and may be withdrawn at any time by the data subject.
- Other processing is based on the legitimate interest we have in managing and responding to your requests for information and requests in MESOESTETIC, as well as knowing your assessment of our services and operation, managing and assessing your CV or sending you communications of interest to you about the services contracted.
4.- Personal data collection and recording of processing
MESOESTETIC processes your personal data in a lawful, fair and transparent manner and limiting the purposes for which they were collected.
The personal data collected from the data subject are incorporated into the processing operations owned by MESOESTETIC and are included in the Register of Processing Activities.
These personal data will be treated confidentially and in a manner that ensures adequate security for the protection of these data.
5.- Data Storage
In general, the personal data processed by MESOESTETIC shall be kept for the time necessary to fulfil the purpose for which they were collected, considering the deadlines set out in the regulations in general and specifically in Act 10/2001 of 13 July and Decree 13/2008 of 22 January, without prejudice, where appropriate, to making them available to the competent authorities or to respond to claims. In this case, the data will be kept blocked until the end of the limitation period, at which time they will be deleted.
MESOESTETIC, guarantees, under the terms established in the current legislation, that it will use the personal data of users confidentially, and that it has adopted the appropriate technical and organisational security measures in its facilities and systems. This protection covers everything related to the collection and use of the information provided via the Internet.
We therefore undertake to maintain and apply the necessary levels of security, considering the state of technology, the category of data stored and the risks, to protect your personal data from accidental loss and unauthorised access, processing or disclosure, and not to disclose the information unless this is strictly for the performance of an order or in order to comply with a legal obligation. In short, to treat your data in accordance with current legislation on data protection.
7.- Data Protection Rights
The data subject may exercise his/her rights of access, rectification, cancellation, portability, limitation and opposition by writing to the e-mail [email protected], or by post to Calle de la Tecnología, 25, 08840, Viladecans, Barcelona, Spain, indicating as reference "RGPD rights".
Access to your Personal Data: It is the right to request and obtain information about your personal data held by MESOESTETIC, as well as the processing done on them, for what purpose and for what specific uses.
Right of rectification: This is the right you have to rectify your personal data when they are incorrect or incomplete.
Right of cancelation (right to forget): This is the right you have to ask for access to your personal data to be suppressed when it is inappropriate, excessive or unnecessary, when it is kept for a longer period than is appropriate or when it is contrary to the Regulation.
Right of opposition: This is the right you have to request that no processing of your personal data be carried out.
Right of limitation: It is a right to mark your personal data kept by MESOESTETIC in order to limit the processing in the future.
Right to data portability: This is the right to receive the personal data you have provided to MESOESTETIC in a structured, commonly used and machine-readable format, and to transmit them to another controller, if the processing is based on consent or a contract or if it is done by authorized means.
Right not to be subject to automated individual decisions: This is the right not to be subject to a decision based solely on automated processing of data, including profiling, which produces legal effects on you or significantly affects you.
In Exercise of right GDPR, you will find all the information to be able to exercise rights.
You also have the right to file a complaint with the Catalan Data Protection Authority at any time regarding the processing of your personal data.
9.- Changes to our notice
If we change the way we process Personal Data, we will update this Policy and the corresponding Privacy and Data Protection Legal Notice. We reserve the right to make changes at any time to our practices and to this Policy, so we encourage you to check back frequently for updates or changes.
10.- Further information
We will be happy to provide you with more information about how we protect and use your personal information. Please contact us at the following email address [email protected].
© MESOESTETIC E-COMMERCE, S.L., 2021