Privacy policy

Privacy Policy

The Owner informs you about its Privacy Policy regarding the processing and protection of the personal data of users and customers that may be collected during browsing, when purchasing a product or contracting a service through the Website: https://skinmediactiv.com

In this regard, the Owner guarantees compliance with current personal data protection regulations, reflected in Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD GDD). It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (GDPR).

Use of the Website implies acceptance of this Privacy Policy.

Identity of the Controller

• Controller: LAPOINTE SAS.
• VAT no.: FR11940817000
• Registered address: 50, Rue Jean Mermoz – 13008 – Marseille, Provence-Alpes-Côte d’Azur – France.
• Email: contact@skinmediactiv.com
• Website: https://skinmediactiv.com

Principles applied in data processing

In processing your personal data, the Owner will apply the following principles, which comply with the requirements of the European data protection regulation (GDPR):

• Principle of lawfulness, fairness and transparency: The Owner will always require consent for the processing of personal data for one or more specific purposes, about which the Owner will inform the User beforehand with complete transparency.
• Principle of data minimisation: The Owner will only request the data strictly necessary for the purpose or purposes for which it is requested.
• Principle of storage limitation: The Owner will keep the personal data collected for the time strictly necessary for the purpose or purposes of the processing. The Owner will inform the User of the corresponding retention period according to the purpose.
  In the case of subscriptions, the Owner will periodically review the lists and delete records that have been inactive for a considerable time.
• Principle of integrity and confidentiality: The personal data collected will be processed in such a way that their security, confidentiality and integrity are guaranteed.
  The Owner takes the necessary precautions to prevent unauthorised access to or misuse of its users’ data by third parties.

Collection of personal data

It is not necessary to provide any personal data to browse the Website.

Rights

The Owner informs you that, with regard to your personal data, you have the right to:

• Request access to the stored data.
• Request rectification or erasure.
• Request the restriction of its processing.
• Object to the processing.

You cannot exercise the right to data portability.

The exercise of these rights is personal and must therefore be exercised directly by the data subject, by requesting it directly from the Owner. This means that any customer, subscriber or collaborator who has provided their data at any time may contact the Owner and request information about the data it has stored and how it obtained it, request its rectification, object to its processing, restrict its use or request the deletion of that data from the Owner’s files.

To exercise your rights, you must send your request together with a photocopy of your National Identity Document or equivalent to the email address: contact@skinmediactiv.com

The exercise of these rights does not include any data that the Owner is obliged to keep for administrative, legal or security purposes.

You have the right to effective judicial protection and to file a complaint with the supervisory authority — in this case, the Spanish Data Protection Agency — if you consider that the processing of personal data concerning you infringes the Regulation.

Purpose of processing personal data

When you connect to the Website to send an email to the Owner, subscribe to its newsletter or purchase a product or service, you are providing personal information for which the Owner is responsible. This information may include personal data such as your IP address, first and last name, postal address, email address, telephone number and other information. By providing this information, you consent to it being collected, used, managed and stored by Kinsta Inc.

The personal data and the purpose of processing by the Owner differ according to the information capture system:

• Product or service purchase forms: The Owner requests personal data which may include: first and last name, identity document (tax identification number, foreigner identification number, passport or residence permit), email address, postal address, telephone number and payment data (payment methods or bank details) in order to maintain a commercial relationship with the User, ship orders, provide the contracted services and carry out the invoicing and collection of the contracted products or services.

There are other purposes for which the Owner processes personal data:

• To ensure compliance with the conditions set out in applicable law. This may include developing tools and algorithms that help the Website guarantee the confidentiality of the personal data it collects.
• To support and improve the services offered by this Website.

Security of personal data

To protect your personal data, the Owner takes all reasonable precautions and follows industry best practices to prevent their loss, misuse, improper access, disclosure, alteration or destruction.

The Website is hosted by Kinsta Inc. Data security is guaranteed, as they take all necessary security measures. You can consult their privacy policy for more information.

The Owner informs the User that their personal data will not be transferred to third-party organisations, except where such transfer is covered by a legal obligation or where the provision of a service requires a contractual relationship with a data processor. In the latter case, the transfer of data to the third party will only be carried out when the Owner has the User’s express consent.

However, in some cases collaborations may be carried out with other professionals; in those cases, the User’s consent will be requested, informing them about the identity of the collaborator and the purpose of the collaboration. This will always be done under the strictest security standards.

Content from other websites

The pages of this Website may include embedded content (for example, videos, images, articles, etc.). Embedded content from other websites behaves in exactly the same way as if you had visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking code and monitor your interaction using that code.

Cookie Policy

For this Website to function correctly, it needs to use cookies, which is information stored in your web browser.

Legal basis for data processing

The legal basis for processing your data is:

• The consent of the data subject.
• Performance of the contract or the application of pre-contractual measures with the data subject, in order to provide a product or service purchased from the Owner.
• To comply with legal obligations.

Categories of personal data

The categories of personal data processed by the Owner are:

• Identifying data.
• No specially protected data categories are processed.

Retention of personal data

The personal data provided to the Owner will be kept until you request its deletion.

Recipients of personal data

• Google Analytics is a web analytics service provided by Google, Inc., a Delaware company whose main office is at 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, United States (“Google”).
  Google Analytics uses “cookies”, which are text files located on your computer, to help the Owner analyse how Users use the Website. The information generated by the cookie about your use of the Website (including your IP address) will be directly transmitted to and stored by Google on servers in the United States.
  More information at: https://analytics.google.com

You can consult how Google manages privacy with respect to the use of cookies and other information on Google’s Privacy Policy page: https://policies.google.com/privacy

You can also see a list of the types of cookies that Google and its partners use and all the information relating to their use of advertising cookies at:

• Types of cookies used by Google
• How Google uses cookies in advertising.

Web browsing

When browsing the Website, non-identifying data may be collected, which may include the IP address, geolocation, a record of how the services and sites are used, browsing habits and other data that cannot be used to identify you.

The Website uses the following third-party analytics services:

• Google Analytics.

The Owner uses the information obtained to gather statistical data, analyse trends, administer the site, study browsing patterns and collect demographic information.

The Owner is not responsible for the processing of personal data carried out by the websites you may access through the various links contained on the Website.

Accuracy and truthfulness of personal data

You undertake that the data provided to the Owner is correct, complete, accurate and current, and to keep it duly updated.

As a User of the Website, you are solely responsible for the truthfulness and correctness of the data submitted to the Website, releasing the Owner from any liability in this regard.

Acceptance and consent

As a User of the Website, you declare that you have been informed of the conditions on the protection of personal data, and you accept and consent to its processing by the Owner in the manner and for the purposes indicated in this Privacy Policy.

To contact the Owner, subscribe to a newsletter or post comments on this Website, you must accept this Privacy Policy.

Changes to the Privacy Policy

The Owner reserves the right to modify this Privacy Policy in order to adapt it to legislative or case-law developments, as well as industry practices.

These policies will remain in force until they are modified by others duly published.