1.- Who is responsible for processing your data?
Identity: 3INA COSMETICS, SL.
Tax ID Code (CIF): B87141305
General Manager: Pablo Rivera (email@example.com).
2.- What data of yours do we process?
2.1.- Data that have been provided to us when you register in the on-line shop (uk.3ina.com) and that correspond to the following personal data: name, surname, telephone number, e-mail address and domicile.
2.2.- Request for Newsletters, and that correspond to the following personal data: email.
2.3.- Contact and that correspond with the following personal data: email, and phone number
Please note that if you choose not to provide us with these details, you may not be able to complete your registration as a user or you may not be able to enjoy the service requested.
3.- For what purpose do we process your personal data and what is the legal basis?
We process your data with the following purposes, legal basis and storage periods, described below:
3.1 Customer online shop registration.
Purpose: The main purpose is to manage your registration as a user of the online shop, for the development, implementation and execution of the contract of sale. The ancillary purpose is profiling and marketing.
Legal basis: Main purpose (the Contract) and accessory purpose (legitimate interest).
Conservation periods: The personal data you provide will be kept for a period of 6 years from the last purchase made, keeping them blocked until the prescription of possible liability actions.
Purpose: The primary purpose is to send personalised electronic communications about our products via e-mail. The ancillary purpose is profiling and marketing.
Legal basis: Main purpose (consent) and accessory purpose (legitimate interest).
Conservation periods: The personal data provided will be kept as long as you do not ask us to unsubscribe, since until then we will understand that you are still interested in receiving our communications.
Purpose: The purpose is to manage or resolve your request or request.
Legal basis: Contract and legitimate interest.
Conservation periods: We will process your data for as long as is necessary to meet your request or request, keeping them blocked until the prescription of possible liability actions.
3.4 Acceptance of Cookies on the website www.3ina.com. You will find additional information in our Cookies Policy.
In terms of profiling and marketing, we consider that we have a legitimate interest in profiling the information we have about you (such as your browsing and/or shopping history) and the personal data you have provided, as we understand that the processing of these data is also beneficial to you because it allows you to improve your experience as a user and access information according to your preferences. To this end, 3INA has considered the interests and rights of the interested parties, and the measures adopted by the person responsible to fulfil its general obligations in terms of proportionality and transparency, and has concluded that:
1.- The impact on the fundamental rights and public liberties of the people is reduced.
2.- Said processing can be reasonably foreseen by the interested party.
3.- The processing of data for the above purposes does not result in exclusion, discrimination, defamation or situations that put at risk the reputation of the interested party and/or bargaining power.
4.- Who is the recipient of your data?
4.1 Communication of data.
The personal data processed will only be passed on to third parties in compliance with legal obligations.
4.2 Data Processors.
3INA will count on the collaboration of third-party service providers who may have access to your personal data and who will process the data in the name and on behalf of the Company, as a consequence of its provision of services. 3INA follows strict criteria for the selection of service providers in order to comply with its data protection obligations, and undertakes to enter into a data processing contract with them.
Specifically, 3INA will contract the provision of services by third party providers that carry out their activity, by way of illustration and not limitation, in the following sectors: logistics services, legal advice, approval of suppliers, multidisciplinary professional services companies, companies related to maintenance, companies providing technological services, companies providing computer services, physical security companies, instant messaging service providers, infrastructure management and maintenance companies and call centre services companies.
5.- What are your rights when you provide us with your data?
The rights which correspond to you with respect to the processing of personal data in relation to 3INA are:
- Right to request access to your personal data
- Right to request correction or deletion
- Right to request the limitation of processing of your data
- Right to object to processing of your data
- Right to data portability
- Right not to be subject to automated decisions, including profiling
6.- What is the right to access?
You will have the right to obtain from 3INA confirmation of whether or not personal data concerning you is being processed, and to the following information: the purposes of the processing; the categories of data that are processed; the recipients or categories of recipients to whom they have been communicated or will be communicated; if possible, the expected period of conservation of personal data or, if this is not possible, the criteria used to determine this period.
In these cases, we will provide you with a copy of the personal data being processed. In addition, when you request it by electronic means, the information will be provided in a commonly used electronic format.
You may exercise this right every six months, unless there is legitimate cause to request it, more than once, in that six-month period and we will inform you about the actions derived from your request within one month.
To exercise your right of access, send an email to: firstname.lastname@example.org, or send a letter to the Department of eCommerce, to the address c/ Velázquez nº 53, 28001 Madrid.
7.- What is the right to correction?
You will have the right to obtain the rectification of the inaccurate personal data concerning you, for this purpose. You will have to accompany, when necessary, the documentation justifying the inaccuracy or incompleteness of the data subject to processing.
To exercise your right of rectification, send an email to: email@example.com, or send a letter to the Department of eCommerce, to the address c/ Velázquez nº 53, 28001 Madrid.
8.- What is the right to deletion?
You will have the right to obtain the deletion of personal data that concerns you when one of the following circumstances occurs: when they are not necessary in relation to the purposes for which they were collected or processed; when you withdraw in consent and the processing is not based on another legal ground; when you object to their processing and other legitimate reasons for their processing do not prevail; and when they have been processed illegally.
To exercise your right of deletion, send an email to: firstname.lastname@example.org, or send a letter to the Department of eCommerce, to the address c/ Velázquez nº 53, 28001 Madrid.
9.- What is the right to limitation of processing?
You will have the right to obtain the limitation of the processing your data when any of the following conditions is met:
- when you have challenged the accuracy of your personal data, during the period that allows the data controller to verify the accuracy of the same;
- in the event that you consider that the processing is illegal, and the data controller has opposed the deletion of personal data and you instead request the limitation of its use.
- when the data controller no longer needs the personal data for the purposes of processing them, but you need them for the purposes of submission, exercise or defence of claims;
- in the event that you have objected to the processing, while it is being verified whether the data controller’s legitimate reasons prevail over yours.
When you have obtained the limitation of the processing in accordance with this section, you will be informed by the data controller.
To exercise your right of processing limitation, send an email to: email@example.com, or send a letter to the Department of eCommerce, to the address c/ Velázquez nº 53, 28001 Madrid.
10.- What is the right to the portability of your data?
You will have the right to receive the personal data that concerns you, which you have provided to the data controller, in a structured format that is commonly used and mechanically readable, and to transfer them to another person responsible for their processing, when: the processing is based on consent and is carried out by automated means.
By exercising your right to the portability of data, you will have the right to have personal data transferred directly from one controller to another when technically possible.
The right to portability will not be extended to any data that the data controller has inferred from data derived directly from the use by said controller of the services provided.
To exercise your right of portability, send an email to: firstname.lastname@example.org, or send a letter to the Department of eCommerce, to the address c/ Velázquez nº 53, 28001 Madrid.
11.- What is the right to objection?
You will have the right to object to the processing of data that concerns you, at any time. Should you exercise this right, the data controller will cease to process your personal data, unless we have compelling legitimate reasons for the processing to prevail over your interests, rights and freedoms, or for the submission, exercise or defence of claims.
To exercise your right of objection, send an email to: email@example.com, or send a letter to the Department of eCommerce, to the address c/ Velázquez nº 53, 28001 Madrid.
12.- What is the right not to submit to automated decisions, including profiles?
You have the right not to be the subject of a decision based solely on automated processing, including profiling, which produces - such decisions - legal effects or affects you in a similar way, unless:
- such a decision is necessary for the conclusion or performance of a contract,
- is authorised by law, or
- is based on consent.
To exercise your right not to submit to automated decisions, send an email to: firstname.lastname@example.org, or send a letter to the Department of eCommerce, to the address c/ Velázquez nº 53, 28001 Madrid.
Additionally, we inform you that you can contact the Spanish Data Protection Agency to obtain further information about your rights.
We also inform you that, if consent has been granted for a specific purpose, you have the right to withdraw consent at any time, without affecting the legality of the processing based on the consent given prior to its withdrawal.
Furthermore, we hereby inform you that you can file a claim with the Spanish Data Protection Agency, especially when you have not obtained satisfaction in the exercise of your rights.