1 – RESPONSIBLE OF THE DATA FILE

The information provided by the USER through any of the forms on the website or by e-mail will be included in the file under the responsibility of LABORATORIO DE INVESTIGACIÓN Y TECNOLOGÍA COSMÉTICA S.L. For any questions about the processing of data, doubts or cancellation of the same, the user can contact to unsubscribe their data at ccoma@labitc.net.

2 – PURPOSE OF THE TREATMENT

The COMPANY will process the information provided by the USER for the following purposes:

To manage the contractual or commercial relationship established between THE COMPANY and the USER. To provide the services requested by the USER.

Manage and administer, provide, expand, adapt and improve the services to which the USER has decided to subscribe or register.

To carry out statistical studies that allow the design of improvements in the services provided.

Send information requested by the USER and for which he/she has previously given his/her consent (commercial information, news, informative articles, etc.).

The USER consents to the processing of his/her data for the purposes described above, without prejudice to the right to revoke such consent by sending an e-mail to ccoma@labitc.net identifying himself/herself as a USER of the WEBSITE and specifying his/her request.

3 – DATA RETENTION

Disaggregated data: Disaggregated data will be retained with no deletion period.

Customer Data: The period of conservation of personal data will be 10 years since the customer has ceased to be a current customer of the company.

Data of the subscribers by e-mail or forms of the WEBSITE: From the time the user subscribes until he/she unsubscribes.

Data of subscribers by e-mail or external forms: From the time the user subscribes until the user unsubscribes or the service is provided.

4 – EXERCISE OF RIGHTS

The USER may exercise his/her rights of access, rectification, cancellation and opposition by sending an e-mail to ccoma@labitc.net, identifying him/herself as USER and specifying his/her request, indicating an e-mail address for the attention of these requests.

5 – COMMITMENTS OF THE USER

The USER guarantees that he/she is over 18 years of age and that the information provided is accurate and truthful. The USER undertakes to inform THE COMPANY of any change in the information provided by sending an e-mail to ccoma@labitc.net, identifying himself/herself as USER and specifying the information to be changed.

Likewise, the USER undertakes to keep the passwords and identification codes secret and to inform the COMPANY as soon as possible in case of loss, theft or unauthorized access. In the absence of such communication, THE COMPANY shall be exempt from any liability that may arise from the misuse by unauthorized third parties of such passwords and identification codes.

6 – DATA PROVIDED BY THE USER

In the event that the USER provides personal data of third parties for any purpose, he/she guarantees to have previously informed the affected parties and to have obtained their consent for the communication of their data to THE COMPANY.

The USER guarantees that those affected are over 18 years of age and that the information provided is accurate and truthful. THE COMPANY will verify the consent of those affected through a first email with non-commercial content in which the verification of the consent given on their behalf by the USER will be requested to the address ccoma@labitc.net.

In the event of liability arising from a breach of these conditions by the USER, the USER shall be liable for the consequences of such breach.

7 – SECURITY MEASURES

The COMPANY has adopted the necessary technical and organizational measures to ensure the security of personal data and avoid its alteration, loss, treatment or unauthorized access, given the state of technology, the nature of the data stored and the risks to which they are exposed, whether from human action or the physical or natural environment. However, the USER must be aware that Internet security measures are not impregnable.

8 – CONFIDENTIALITY AND DOCUMENTARY CUSTODY

Professional secrecy. The professionals who work in THE COMPANY and who have any kind of intervention in the services provided to the USER, are committed not to disclose or make use of the information to which they have had access by reason of their profession. The information provided by the USER will be, in any case, considered confidential, and cannot be used for purposes other than those related to the services provided by the COMPANY. THE COMPANY undertakes not to disclose or reveal information about the USER’s claims, the reasons for the advice requested or the duration of its relationship with the USER.

Documentary custody. In order to preserve and guarantee confidentiality, THE COMPANY undertakes to destroy all confidential information to which it has had access as a result of the provision of services after 90 days from the end of the service, unless there is a legal obligation to keep it. If the USER wishes to keep the original or a copy of such information, he/she must print it or keep it by his/her own means or go to the COMPANY’s headquarters to pick it up before its destruction.

Right of Access (Art. 15)

The user may request confirmation from the data controller as to whether or not personal data concerning him/her are being processed, such as:

· Purpose of the processing
· Categories of personal data processed
· Recipients or categories of recipients to whom such data were communicated
· The existence of automated decisions, including profiling, applied logic and consequences.

Right to Rectification (Art. 16)

The data subject has the right to obtain the rectification of inaccurate personal data concerning him/her, considering the purposes of the processing, the data subject shall have the right to have incomplete personal data completed.

Right to be Forgotten or Deletion (Art. 17)

The data subject has the right to obtain without undue delay from the controller the erasure of personal data concerning him/her, either where the data subject objects to the processing, or where the personal data have been unlawfully processed, or where they are no longer necessary for the purpose for which they were collected.

Right to Portability (Art. 20)

The user shall have the right to receive the personal data concerning him/her, which he/she has provided to a controller, in a structured, commonly used and machine-readable format, and to transmit it to another controller.

Right to Object (Art. 21)

The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing, including profiling, of personal data concerning him or her.