Privacy policy

The Data Controller informs you about its Privacy Policy regarding the processing and protection of personal data of users that may be collected while browsing the Website: https://tinycosmeticsdp.com

In this regard, the Data Controller guarantees compliance with current data protection regulations, reflected in Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD GDD). It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (GDPR).

Use of the Website implies acceptance of this Privacy Policy.

Identity of the Data Controller

Data Controller: Dámaris Plá Sánchez
Website: https://tinycosmeticsdp.com

Principles applied to data processing

When processing your personal data, the Data Controller will apply the following principles, in accordance with the requirements of the European General Data Protection Regulation (GDPR):

Principle of lawfulness, fairness and transparency: the Data Controller will always request consent for the processing of personal data, informing the User beforehand with complete transparency.
Principle of data minimization: the Data Controller will only request the data strictly necessary for the purpose(s) for which it is requested.
Principle of limited retention period: the Data Controller will keep the personal data collected only for as long as strictly necessary for the purpose of the processing.
Principle of integrity and confidentiality: personal data collected will be processed in a way that guarantees its security, confidentiality and integrity, taking the necessary precautions to prevent unauthorized access or misuse by third parties.

Collection of personal data

You do not need to provide any personal data to browse the Website.

The cases in which you do provide personal data are as follows:

When submitting an advisory request through our contact form, providing your name, email, phone number, and the reason/message of your inquiry.
Through the use of cookies while browsing, the characteristics and purpose of which are detailed in our Cookie Policy.

Rights

The Data Controller informs you that, regarding your personal data, you have the right to:

Request access to the data stored.
Request rectification or erasure.
Request the restriction of processing.
Object to the processing.
Request the portability of your data.

The exercise of these rights is personal and must therefore be carried out directly by the data subject, by requesting it from the Data Controller through our contact page, duly identifying yourself.

The exercise of these rights does not include any data that the Data Controller is required to retain for administrative, legal, or security purposes.

You have the right to lodge a complaint with the relevant supervisory authority, in this case the Spanish Data Protection Agency (AEPD), if you consider that the processing of your personal data infringes the Regulation.

Purpose of processing personal data

The Data Controller processes personal data for the following purposes:

To manage and respond to advisory requests received through the contact form.
To ensure compliance with applicable law.
To support and improve the services offered by this Website.
To analyze user browsing, through cookies, as detailed in our Cookie Policy.
To manage our social media presence. The Data Controller is present on social media; if you follow us, the processing of your data will be governed by this section as well as by the privacy policies of each social network:

Under no circumstances will the Data Controller use social media follower profiles to send individual advertising.

Data security

To protect your personal data, the Data Controller takes all reasonable precautions and follows industry best practices to prevent its loss, misuse, unauthorized access, disclosure, alteration, or destruction.

Content from other websites

Pages on this Website may include embedded content (for example, YouTube videos). Such embedded content behaves exactly as if you had visited the original website, which may collect data about you and use its own cookies.

Cookie Policy

For this Website to function correctly, it uses cookies. You can find all the information relating to their collection and processing in our Cookie Policy.

Legal basis for processing data

The legal basis for processing your data is:

The consent of the data subject, for analytics and marketing cookies.
The performance of a pre-contractual or contractual relationship, for managing advisory requests.
The legitimate interest of the Data Controller, for necessary cookies and the proper functioning of the site.

Categories of personal data

The categories of personal data processed by the Data Controller are:

Identifying data (name, email, phone number).
Data freely provided by the user in the message of their advisory request.

Data retention

Personal data provided to the Data Controller will be kept for as long as there is a relationship with the user and, subsequently, for the legally required periods, or until the user requests its deletion.

Recipients of personal data

Web hosting provider: hosts the Website's database and infrastructure.
Google Analytics, a web analytics service provided by Google Ireland Limited. It uses cookies to help the Data Controller analyze how users use the Website. More information in Google's Privacy Policy.

Web browsing

While browsing the Website, non-identifying data may be collected, such as IP address, a record of how services are used, browsing habits, and other data that cannot be used to identify you.

The Website uses Google Analytics as a third-party analytics service to obtain statistical data, analyze trends, and study browsing patterns.

The Data Controller is not responsible for the processing of personal data carried out by the websites you may access through the various links contained on the Website.

Accuracy and truthfulness of personal data

You agree that the data provided to the Data Controller is correct, complete, accurate, and up to date, and you undertake to keep it duly updated.

As a Website user, you are solely responsible for the truthfulness and accuracy of the data submitted, releasing the Data Controller from any liability in this regard.

Acceptance and consent

As a Website user, you declare that you have been informed of the conditions regarding the protection of personal data, and you accept and consent to its processing by the Data Controller in the manner and for the purposes indicated in this Privacy Policy.

To submit a request through our contact form, you must accept this Privacy Policy.

Changes to the Privacy Policy

The Data Controller reserves the right to modify this Privacy Policy to adapt it to legislative or case-law developments, as well as industry practices.

This policy will remain in effect until modified by another duly published version.