General privacy policy

At Mediterranean Cosmetic Actives, S.L. we are committed to protecting your privacy. We want to be transparent about the data we collect, how we use it and the rights you have to control your data.

Information for users

Mediterranean Cosmetic Actives, S.L. is the controller of the User's personal data and informs the User that this data will be processed in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) on the protection of natural persons, and with Organic Law 3/2018 of 5 December (LOPDGDD), with regard to the processing of personal data and the free movement of such data, and therefore provides the following information about the processing:

For what purpose do we process your personal data?

• At Mediterranean Cosmetic Actives, S.L. we process the data of data subjects to manage and carry out communications (user contact, answering queries, etc.), as well as to provide the services requested and carry out our activity.
• We will manage the contracting of our products through distance selling and will manage shipments and returns.
• We will manage user registration so that it can be used for the purchase of the products offered.
• Publication and moderation of comments made by users on news published on the blog. Comments will be public to other users; only your alias or name will be published.
• Management and evaluation of the opinions of users who voluntarily decide to publish their personal review. Users should be aware that their review will be visible to other participants; only their name or alias and the comment they decide to publish will be visible.
• We will send advertising and commercial communications and news about our services to users who decide to subscribe to our newsletter. If you do not wish to receive them, send us an email at: hola@modestacassinello.com with “No Publi” in the subject line.
• With regard to the publication of personal data on social networks that this website may share, personal data may be processed in order to reply to comments and improve our services. The privacy policy is that established by the entities responsible for those sites. We are not responsible for the personal information that each user may publish.

What types of data do we process?

In addition to the various means of collection mentioned and the various processing purposes set out, we inform you that the types of data we may process in our information system are:

• Identification data.
• Electronic addresses.
• Postal addresses.

How long will we keep your data?

Personal data will be kept for as long as a relationship with you is maintained, whether as a customer or as another type of data subject; for as long as their erasure is not requested; or for as long as there is any legal provision or requirement to retain them.

When the data is no longer necessary for the purposes for which it was collected, it will be erased, ensuring its confidentiality.

In the case of data provided in connection with job applications, if it is not of interest to the company, it will be deleted immediately, ensuring its confidentiality.

What is the legal basis for processing your data?

We rely on several legal bases for processing your personal information:

The legal basis for processing your personal data is the relationship maintained with you for the performance of a contract and/or commercial relationship (the purchase of a product), as well as the express consent you may have given us for additional processing such as the website contact form, and any other processing that necessarily involves the collection of your personal data, for which a clear affirmative action by the data subject will be an essential requirement (clicking on the forms and accepting the privacy policies).

We inform you that the personal data requested when registering on this website is strictly necessary to formalize and manage the relationship with you, so that, if you do not provide it, we will not be able to maintain that relationship.

To which recipients will your data be disclosed?

In some cases, third parties need to access the information you have provided to us in order to provide you with the service requested, for example, logistics services and companies that provide us with other types of services such as information technology (storage and processing of information, etc.)

These third parties only have access to the personal information they need to carry out those services. They are required to keep your personal information confidential and may not use it in any way other than that which we have requested.

The data of data subjects will not be disclosed to any third party, except where legally required.

What are your rights when you provide us with your data and/or we process it?

As a data subject, you may at any time ask us to exercise any of the following data protection rights to which you are entitled:

• Access your data: you have the right to access your data to find out which personal data concerning you we are processing.
• Request rectification or erasure of your data: in certain circumstances, you have the right to rectify personal data concerning you that you consider inaccurate and that is being processed by the entities, as well as the right to request erasure of your data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
• Request restriction of the processing of your data: in certain circumstances, you will have the right to ask us to restrict the processing of your data, in which case we inform you that we will only keep the data for which you have requested restriction of processing for the exercise or defence of claims.
• Portability of your data: in certain circumstances, you will have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and to have it transmitted by our company to another controller.
• Object to the processing of your data: in certain circumstances and for reasons relating to your particular situation, you will have the right to object to the processing of your data, in which case we would stop processing it unless we must continue to do so for compelling legitimate grounds or for the exercise or defence of possible claims.
• Right to lodge a complaint with the supervisory authority if you have not obtained satisfaction in the exercise of your rights, in this case the Spanish Data Protection Agency http://www.aepd.es

We inform you that you may exercise your rights over your personal data through any of the following channels:

• Postal address: Calle Pacífico 100, Local Bajo, 29004, Málaga (Spain).
• Email address: hola@modestacassinello.com

Sending of communications or information

Our policy regarding the sending of information by electronic means (email, instant messaging, etc.) is limited to sending only communications that we consider to be of interest to our users and data subjects, in relation to the company's functions and activity, or that you have consented to receive.

If you prefer not to receive these messages, we will offer you, through the messages themselves, the possibility of exercising your right to cancel and opt out of receiving them, in accordance with Title III, Article 22 of Law 34/2002 on Information Society Services and Electronic Commerce.

Mandatory or optional nature of the information provided by the user

By ticking the corresponding boxes and entering data in the fields of the contact form or of download forms, Users expressly, freely and unequivocally accept that their data is necessary for the provider to respond to their request, the inclusion of data in the remaining fields being voluntary.

The user guarantees that the data they provide is true, accurate, complete and up to date, and is responsible for any direct or indirect damage or loss that may be caused as a result of failure to comply with this obligation.

If the user provides data belonging to a third party, they guarantee that they have informed that third party of all aspects contained in this Privacy Policy and have obtained their consent to provide us with their data for the processing purpose in question. All of this must take place before the data of a third party is provided.

If not all the data is provided, there is no guarantee that the information and services provided will be fully tailored to your needs.