Privacy Policy

Privacy Policy.

The Owner undertakes to comply with the regulations on the Protection of Personal Data and to respect the privacy of Users. The aim is to offer the best service to the User and to do so it is necessary to have their data.

  1. Data Controller

MEDITAROMA SL

NIF: B72187214

Address: C/ Orilla, No. 14, 11500. El Puerto de Santa Maria, Cadiz

Telephone: 956 292 333

  1. Purposes

Handling queries : Responding to queries from Users who contact us through the Forms or communication tools available on the Website. If you use the WhatsApp tool for queries, you explicitly agree that your data may be processed by this application, which may involve the transfer of your data to a country outside the EU. The legitimate basis for processing is the User's consent, in accordance with art. 6.1.a) of the GDPR.

Provide the service requested by the User : Processing registration as a user of the Website in order to provide the services offered . The legitimate basis for the processing is the execution of a contract to which the User is a party, in accordance with art. 6.1.b) of the GDPR.

Sale : Management of the sales process of the products or contracting of services selected by the User. The legitimate basis for the processing is the execution of a contract to which the User is a party, in accordance with art. 6.1.b) of the GDPR.

Registration : Procedure for the User to communicate his/her interest in participating in activities. The legitimate basis for processing is the User's consent, in accordance with art. 6.1.a) of the GDPR.

Browsing data : Data collected by own or third-party cookies that may be generated by this Website, after the User has been informed and accepts them. The legitimate basis for processing is the User's consent, in accordance with art. 6.1.a) of the GDPR.

Commercial communications : For the User who voluntarily accepts this option, promotions, advertising, offers, news, invitations to events and any type of commercial information from the Owner will be sent to them. The legitimate basis for the processing is the User's consent, in accordance with art. 6.1.a) of the GDPR.

In any case, the User may subsequently at any time oppose the receipt of commercial communications by sending an email to administracion@meditaroma.com, from the same account in which the communications are received.

  1. Conservation period

The data will be kept as long as the relationship is maintained and its deletion is not requested and in any case in compliance with the legal limitation periods that apply to it.

  1. Assignments

The data collected through this Website are not expected to be transferred to third parties, unless expressly indicated, where appropriate, in the corresponding information text.

In relation to the management of the services, the Users' data may be processed by companies that provide the Owner with various services, including, but not limited to, shipping, messaging, accounting, consulting, IT maintenance, or any other services that, due to their status as Data Processor, make it essential or inevitable that they access or process these data. This processing will not be considered a transfer of data under any circumstances.

The User is informed and by accepting this Privacy Policy expressly consents that his/her data may be transferred to Shopify Inc., based in Ottawa (Canada), the platform used for the management of this online store.

The Owner is not responsible for the use of data made by this company or for any transfers of data that may be made to third parties.

 

  1. Rights of interested parties

Users may exercise their rights of access, rectification, deletion, portability and limitation or opposition by sending a signed request by post with the subject “Data Protection” to the address: C/ Orilla, nº 14, 11500. El Puerto de Santa María, Cádiz, clearly indicating their contact details and sending a copy of their identity document. Users have the right to withdraw the consent given and have the right to file a complaint with the Control Authority (Spanish Data Protection Agency www.aepd.es).

  1. Free text fields

The free text fields that may appear in the forms on the Website, available to the User, have the sole and exclusive purpose of collecting information to improve the quality of the Services.

The User will not include, in those spaces that the Website may offer as "free text fields", any personal data that may be classified as data for which a special level of protection is required, such data being understood as, by way of example and not limitation, those relating to economic-financial situation, psychological profiles, ideology, religion, beliefs, union membership, health, racial origin and/or sexual life.

  1. Non-mandatory fields

The Owner informs the User that the collection of some data is not mandatory, except in the fields where otherwise indicated by an (*). However, failure to complete such data may prevent the provision of all those Services linked to such data, releasing the Owner from all liability for the non-provision or incomplete provision of these Services.

  1. Access and rectification of personal data

The User undertakes to provide true information regarding his/her personal data and to keep the data provided to the Owner always up to date. The User shall be responsible, in any case, for the veracity of the data provided, and the Owner reserves the right to exclude from the services any User who has provided false data, without prejudice to any other actions that may be taken under the law. The data provided by the User shall be presumed to be correct, and therefore, in the event of the User sending his/her data incorrectly, the Owner declines any liability in the event of incorrect execution or non-execution of the sending, as well as incorrect compliance with the necessary administrative procedures.

  1. Communication of personal data

In relation to the management of the services, the Users' data may be processed by companies that provide the Owner with various services, including, but not limited to, shipping, messaging, accounting, consulting, IT maintenance, or any other services that, due to their status as Data Processor, make it essential or inevitable that they access or process these data. This processing will not be considered a transfer of data under any circumstances.

The Owner will not transfer your data to third parties under any circumstances.

  1. Confidentiality

Furthermore, any information of any kind exchanged between the parties, that which they agree is of such nature, or that which simply concerns the content of said information, will also be considered confidential. The viewing of data via the Internet will not imply direct access to it, unless the owner expressly consents on each occasion.

  1. Photographs

In compliance with the provisions of the current Personal Data Protection regulations, we inform you that photographs in which people appear are considered personal data. This communication informs you that photographs of people may appear on this Website for promotional purposes and that they have voluntarily agreed to do so. If in any case, any person appearing in them wishes for a photograph not to be shown, please contact us and it will be removed as soon as possible. It will not be valid for people who have provided a service in a professional manner.