PRIVACY POLICY

WEBSITE’S OWNER

NAME: ROFERSAM SA

TAX IDENTIFICATION NUMBER:  A08619082

POSTAL ADRESS:  POL IND PLA DE LLERONA CL NORUEGA 7 , 08520, LES FRANQUESES DEL VALLES (BARCELONA)

E-MAIL ADRESS:  hello@beautemediterranea.com

TELEPHONE: 938467032

COMPANY REGISTRATION: Registro Mercantil de BARCELONA T26939, F 188, S 8, H B 18103, I/A 24

MAIN PURPOSE: cosmetic products

HOW ARE WE GOING TO USE YOUR DATA?

Pursuant to current applicable regulations on the protection of personal data, we inform you that your data will be included in the processing system owned by ROFERSAM SA with Tax Identification Number A08619082 and registered office located at POL IND PLA DE LLERONA CL NORUEGA 7 08520, FRANQUESES DEL VALLES, LES (BARCELONA), and that their respective purposes, storage periods and legal bases are listed below. For the processing that requires this, we also inform you of the possibility of profiling and automated decision-making, as well as the possible disclosures and international transfers that ROFERSAM SA plans to make:

TREATMENTS PERFORMED

Website management

Purpose: Treatment and management of the data necessary for the functionality of the website. Conservation period: while the consent given lasts

Legitimate basis: The consent of the interested party. Typology of Data: Merely identifying data. Transfers: Not expected

International transfers: Not expected. Profiling: Not expected.

Web form

Purpose: Address your queries and/or requests

Conservation period: as long as the consent given is maintained. Legitimate basis: The consent of the interested party

Typology of Data: Merely identifying data

Transfers: None

International transfers: Not expected. Profiling: Not expected

Regulatory compliance management

Purpose: Manage and process the obligations and duties arising from compliance with the regulations which apply to the organisation.

Storage period: Copies of the documents will be kept until the actions for claiming a possible liability have lapsed.

Legal basis: Compliance with a law.

Type of data: Only identifying data.

Disclosures: Your data will be disclosed, if necessary, to bodies and/or public administrations with jursdiction in the matter in order to comply with the obligations established in applicable legislation. In addition; you are informed that the legal basis for the disclosure is to comply with the obligations set forth in applicable legislation.

International transfers: Not expected.

Profiling: Not expected.

Newsletters

Purpose: Collection, registration and processing of data for marketing purposes to send the corresponding Newsletter to which you have subscribed.

Conservation period: as long as the consent given is maintained

Legitimate basis: The consent of the interested party

Typology of Data: Merely identifying data Transfers: None

International transfers: Not expected. Profiling: Not expected

Marketing actions

Purpose: Collection, registration and processing of data for purposes of advertising and commercial prospecting of our products and/or services.

Conservation period: as long as the consent given is maintained

Legitimate basis: The consent of the interested party

Typology of Data: Merely identifying data Transfers: None

International transfers: Not expected. Profiling: Not expected

User registration

Purpose: Collect, record and process data in order to register as a user.

Storage period: Until withdrawal of the consent given.

Legal basis: The data subject’s consent.

Type of data: Only identifying data.

Disclosure: Not expected.

International transfers: Not expected.

Profiling: Not expected.

Managing purchases and/for service contracting

Purpose: Collect, record and process data for the purpose of managing your purchase, and to ensure correct perfomance, fullfilment and conclusion of the contract between both parties.

Storage period: During the time necessary to manage purchase of the products or services acquired, including possible returns, complains or claims associated with purchase of the particular product or service.

Legal basis: Perfomance of a contract.

Type of data: Only identifying data.

Disclosures: Your data will be disclosed, if necessary, to the Tax Authority, Banks, Saving Banks, Bodies and/or public administrations with jurisdiction in the matter in order to comply with the tax obligations established in applicable legislation. In addition, you are informed that the legal basis for the disclosure is to comply with the obligations set forth in applicable legislation.

International transfers: Not expected.

Profiling: Not expected.

Financial and administrative management

Purpose: Administrative management, invoicing, accounting and legal obligations.

Storage period: 5 years in compliance with Tax law and 10 years for the tax documentation in compliance with Basic Law 7/2012.

Legal basis: Compliance with a law.

Type of Data: Only identifying data.

Disclosures: Compliance with a law.

International transfers: Not expected

Profiling: Not expected

Data subjects’ rights

ROFERSAM SA informs you that you can exercise the rights of access, rectification, restriction, erasure, portability and objection to processing your personal data before the Data Controller, and also withdraw the consent given.

  • Right of Acces: This is your right to obtain information about your specific personal data and what processing has been or is being carried out on them, and also the information avaiblable about the source of such data and the disclosures made or planned.
  • Right of Rectification: This is your right to correction of inaccurate or incomplete data. Any such correction can only be made for the information that is under the APP’s control, for example, deleting comments published on the page itself, images or web content that contain your personal data.
  • Right to Restriction of Processing: This is the right to restric the purposes of the processing originally intended by the data controller.
  • Right of Erasure: This is the right to erase your personal data, except as provided in the GDPR itsefl or in other applicable regulations where obligatory storage periods and formats are specified.
  • Right of Portability: The right to receive the personal data that you have provided, in a structured, commonly used and machine-readable format, and to transmit them to another data controller.
  • Right of Objection: This is your right to prevent or stop processing of your personal data by ROFERSAM S.A

In order to exercise any of the rights described above, you must comply with the following requirements:

 

Send a letter to the address POL IND PLA DE LLERONA CL NORUEGA 7 08520, FRANQUESES DEL VALLES, LES (BARCELONA) (for the attention of ROFERSAM SA) or by e-mail to hello@beautemediterranea.com

The letter sent by the data subject requesting exercise of a given right must comply with the following legal requirements:

  • The data subject’s full name and a copy of the Spanish National Identity Document or Foreigner Identity Document or any other identifying document. In the exceptional cases where representatives are accepted, these will also have to identify themselves in the same manner, in addition to the document confirming their status as representative. The photocopy of the National Identity Document may be replaced by other documents that prove identity by any other means valid under the law.
  • The specific content of the request. (In which you request the information you wish to access). If you do not make any reference to a specific file, you will be given all the information held with your personal data. If you request information from a particular file, only the information in this file will be given. If you request information about a third party, this will be refused in all cases. If you request the information over the phone, you will be asked to request the information in writing; you will be told how you can do this and the address you must send your request to. You will never be given information over the phone.
  • Address for notices.
  • The date and the requesting person’s signature.
  • Supporting documents for the request made.
  •  The data subject must use any medium that provides proof of you sending the request and us receiving it.

Lastly, we inform you that you have the right to lodge a complaint with the Spanish Data Protection Agency if you know or consider that a particular event may involve a breach of applicable data protection regulations.

ROFERSAM SA undertakes to take the necessary technical and organizational measures, matched to the level of risk entailed by the processing carried out by it and explained in the section on the terms and conditions of use, with the goal of guaranteeing their completeness, confidentiality and availability.