Privacy Policy
AS COSMOPRODUCT, S.L.U. Privacy Policy
Data protection
In accordance with current and applicable legislation on personal data protection, we inform you that your data will be incorporated into the processing system owned by AS COSMOPRODUCT, S.L.U. with CIF B05416029 and registered office at C. Cent, 493, 08013, Barcelona, and that the respective purposes, retention periods and legitimate bases are listed below. For those treatments that require it, we also inform you of the possible elaboration of profiles and automated decisions, as well as the possible assignments and international transfers that AS COSMOPRODUCT, S.L.U. plans to carry out:
TREATMENTS PERFORMED
Website management
Purpose: Processing and management of data necessary for the functionality of the website.
Retention period: as long as the consent given.
Legitimate basis: The consent of the interested party.
Type of Data: Merely identifying data.
Assignments: Not foreseen
International transfers: Not foreseen.
Profiling: No profiling is foreseen.
Web form
Purpose: To answer your inquiries and/or requests.
Retention period: as long as the consent given.
Legitimate basis: The consent of the interested party.
Type of Data: Merely identifying data.
Assignments: None.
International transfers: Not foreseen.
Profiling: No profiling is foreseen.
Regulatory compliance management
Purpose: Management and processing of obligations and duties arising from compliance with the regulations to which the entity is subject.
Retention period: retention of copies of documents until the statute of limitations for claiming possible liability has expired.
Legitimate basis: Compliance with a law.
Type of Data: Merely identifying data.
Transfers: your data will be communicated if necessary to agencies and / or public administration with competence in the field in order to comply with the obligations established in the applicable regulations. In addition, it is reported that the legitimate basis for the transfer is to comply with the obligations established in the applicable regulations.
International transfers: Not foreseen.
Profiling: No profiling is foreseen.
User registration
Purpose: Collection, registration and processing of data in order to register as a user.
Retention period: as long as the consent given is maintained.
Legitimate basis: The consent of the data subject.
Type of Data: Merely identifying data.
Assignments: No assignments are foreseen.
International transfers: Not foreseen.
Profiling: No profiling is foreseen.
Management of the purchase and/or contracting of services
Purpose: Collection, registration and processing of data in order to manage your purchase, as well as for the proper development, fulfillment and execution of the contract between both parties.
Retention period: during the period necessary to manage the purchase of the products or services purchased, including possible returns, complaints or claims associated with the purchase of the product or service in particular.
Legitimate basis: The execution of a contract.
Type of Data: Merely identifying data.
Transfers: Your data may be communicated if necessary to companies that subsidize contests, prizes and/or promotions.
International transfers: Not foreseen.
Profiling: No profiling is foreseen.
Financial and administrative management
Purpose: Administrative management, invoicing, accounting and legal obligations.
Retention period: 5 years in compliance with the tax law and 10 years for tax documentation in compliance with O.L. 7/2012.
Legitimate basis: The execution of a contract.
Type of Data: Merely identifying data.
Transfers: your data will be communicated if necessary to the Tax Agency, Banks, Savings Banks and Agencies and / or public administration with competence in the field in order to comply with tax and fiscal obligations established in the applicable regulations. In addition, it is reported that the legitimate basis for the transfer is to comply with the obligations established in the applicable regulations.
International transfers: Not foreseen.
Profiling: No profiling is foreseen.
Rights of interested parties
AS COSMOPRODUCT, S.L.U. informs Users that they may exercise their rights of access, rectification, limitation, suppression, portability and opposition to the processing of their personal data before the Data Controller, as well as the withdrawal of the consent given.
- Right of Access: This is the user’s right to obtain information about his or her specific personal data and the processing that has been or will be carried out, as well as the information available about the origin of such data and the communications made or planned for such data.
- Right of Rectification: This is the right of the affected party to have data that proves to be inaccurate or incomplete modified. It may only be satisfied in relation to information under the control of AS COSMOPRODUCT, S.L.U. to delete comments published on the page itself, images or web content containing the user’s personal data.
- Right to the Limitation of Processing: This is the right to limit the purposes of the processing originally intended by the data controller.
- Right of Deletion: This is the right to delete the user’s personal data, except as provided in the RGPD itself or in other applicable regulations that determine the obligatory nature of the conservation of the same, in time and form.
- Right of portability: The right to receive the personal data provided by the user in a structured, commonly used and machine-readable format, and to transmit it to another data controller.
- Right of Opposition: This is the user’s right not to have his or her personal data processed or to have the processing of such data by AS COSMOPRODUCT, S.L.U. cease.
In order to exercise any of the rights described above, you must comply with the following requirements:
Submission of a letter to the address C. Cent, 493, 08013, Barcelona to the attention of AS COSMOPRODUCT, S.L.U. or by e-mail to the following address
The letter sent by the owner of the data requesting the exercise must comply with the following legal requirements:
- Name, surname(s) of the interested party and copy of the DNI/NIE or any identifying document. In the exceptional cases in which representation is admitted, it will also be necessary to identify by the same means the person who represents him/her, as well as the document accrediting the representation. The photocopy of the DNI may be substituted provided that the identity is proved by any other legally valid means.
- Request in which the application is made. (Exercise in which the information to be accessed is requested). If you do not refer to a specific file, we will provide you with all the information we have on your personal data. If you request information about a specific file, only the information about this file. If you request information relating to a third party it can never be provided. If you request it by telephone, you will be instructed to do so in writing and you will be informed of how to do so and the address to which you have to send it. You will never be given information over the phone.
- Address for notification purposes.
- Date and signature of the applicant.
- Documents accrediting the request you are making.
- The interested party must use any means that allows proof of sending and receipt of the request.
Finally, we inform you that you have the right to file a complaint with the Spanish Data Protection Agency in case you have knowledge or consider that a fact may involve a breach of the applicable regulations on data protection.
AS COSMOPRODUCT, S.L.U. undertakes to adopt the necessary technical and organizational measures, in accordance with the level of risk associated with the processing carried out by them and indicated in the section on terms and conditions of use, so as to guarantee their integrity, confidentiality and availability.
