Privacy policy

For the purposes of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, ROSINYOL PASQUINA, MARTA (hereinafter, the Controller), with NIF 47180325B, informs the User that their personal data will be processed for the purpose of providing the services requested and sending information about our company that may be of interest to them.

Data controller
The company responsible for processing your data under this Privacy
Policy is:
ROSINYOL BEAUTY S.L.
CIF: B24825762
Address: C/ AVEL.LINA CASADEVALL, 4, LOCAL 5, 08174, SANT CUGAT DEL
VALLÈS, BARCELONA
Email address: info@rosinyol.com
Website: https://www.rosinyol.com/
Telephone: 685 304 344

Legal basis for processing
The CONTROLLER will process the user's personal data on the basis of the express consent the user gives after reading the Privacy Policy, in accordance with Article 6.1.a) of EU Regulation 2016/679 on the protection of personal data.


Submission and registration of personal data

Submitting personal data is mandatory in order to contact and receive information about the services provided by the Controller. Likewise, failing to provide the personal data requested or not accepting this data protection policy means it is not possible to subscribe, register or receive information about these services. When personal data are obtained from the data subject through electronic communications networks or in the context of providing an information society service, as well as in other cases expressly established by law or when authorised by the Spanish Data Protection Agency, the data controller may comply with the duty to inform established in Article 13 of Regulation (EU) 2016/679 by providing the data subject with at least the following basic information:
a) The identity of the data controller and of their representative, where applicable.

b) The purpose of the processing.

c) How the data subject may exercise the rights established in Articles 15 to 22 of Regulation (EU) 2016/679.


However, controllers and processors or, where applicable, their representatives must maintain the record of processing activities referred to in Article 30 of Regulation (EU) 2016/679, unless the company or organisation employs fewer than 250 persons, except where the processing it carries out may result in a risk to the rights and freedoms of data subjects, is not occasional, or includes special categories of personal data referred to in
Article 9(1), or personal data relating to criminal convictions and offences referred to in Article 10 of Regulation (EU) 2016/679.

Finally, Article 5.1.f) of Regulation (EU) 2016/679 establishes the need to provide adequate security safeguards against unauthorised or unlawful processing, and against the loss, destruction or accidental damage of personal data. This implies establishing technical and organisational measures aimed at ensuring the integrity and confidentiality of personal data and the ability (Article 5.2) to demonstrate that these measures have been put into practice (proactive accountability).

Transfer or disclosure of personal data and international transfers

The Controller will not transfer personal data to third parties. However, should data be transferred to a third party, prior notice would be given requesting the express consent of the data subject under Article 4.11 of Regulation (EU) 2016/679 of 27 April 2016.

No transfers of data to third countries are planned. Accuracy and truthfulness of the data provided. The User who sends information to the Controller is solely responsible for the truthfulness and correctness of the data included, and the  Controller is released from any liability on this matter.

Users guarantee and are responsible, in any case, for the accuracy, validity and authenticity of the personal data provided, and undertake to keep them duly updated. The User agrees to provide complete and
correct information in the registration or subscription form.

The Controller is not responsible for the truthfulness of information that is not its own and for which another source is indicated, and therefore assumes no liability for any hypothetical damage that may arise from the
use of this information. The Controller is released from liability for any damage or loss the User may suffer as a result of errors, defects or omissions in the information provided by the Controller, provided it comes from sources external to the Controller.

Data retention
In any case, the retention period will be the minimum necessary, and the following minimum periods must be observed:

  • 4 years: Law on Infringements and Sanctions in the Social Order (obligations regarding affiliation, registrations, deregistrations, contributions, payment of salaries...); Arts. 66 et seq. General Tax Law (accounting books...)
  • 5 years: Art. 1964 Civil Code (personal actions with no special time limit)
  • 6 years: Art. 30 Commercial Code (accounting books, invoices...)
  • 10 years: Art. 25 Law on the Prevention of Money Laundering and Terrorist Financing.


Exercise of the rights of access, rectification, erasure, restriction, portability and objection

You may send your communications and exercise the rights of access, rectification, erasure, restriction, portability and objection by post to the Controller at C/ AVEL.LINA CASADEVALL, 4, LOCAL 5, 08174, SANT CUGAT DEL VALLÈS, BARCELONA, or by email to: info@rosinyol.com, together with valid proof in law, such as a photocopy of your national ID (D.N.I.), stating "DATA PROTECTION" in the subject line.

You may also contact the competent Data Protection Supervisory Authority to obtain further information or lodge a complaint.

Acceptance and consent

The User declares that they have been informed of the conditions on the protection of personal data, and accepts and consents to their processing by the Controller, in the manner and for the purposes stated in this Personal Data Protection Policy.


Changes to this privacy policy.

The Controller reserves the right to modify this policy to adapt it to legislative or case-law developments, as well as to industry practices. In such cases, the Controller will announce the changes introduced on this page
reasonably in advance of their implementation.

reCAPTCHA

We use the reCAPTCHA service of Google Inc. (hereinafter, Google) to protect the data sent through the forms on our users' pages. This service makes it possible to distinguish data sent by people from
automated messages and involves the transmission of the IP address and other data required by Google for the use of the reCAPTCHA service. For this purpose, the data will be transmitted to Google so that they can be used. The IP address will be encrypted
by Google in the member states of the European Union as well as in the states associated with the European Economic Area. Only in some exceptional cases will IP addresses be transmitted to Google's server in the United States for
encryption. On behalf of the owner of this website, Google will use this information to evaluate users' use of the service. The IP address transmitted by reCAPTCHA will be kept separate from other Google data. Google's privacy policy applies to these data. Full details about Google's privacy policy can be read at https://www.google.com/intl/es/policies/privacy/

By using the reCAPTCHA service, the user consents to the processing of the data about them held by Google in the manner and for the purposes set out above.