PRIVACY POLICY
This Privacy Policy establishes how personal data collected through the website https://odditieskin.com/ (“Website”) will be processed. This policy is part of the Website Policies (hereinafter, the “Policies”), which are updated periodically. If you do not agree with the Policies, please do not use the Website.
1. Data Controller
Owner: Oddipus, S.L. (hereinafter, “ODDITIES”).
Address: Nicasio Gallego 10, 28010. Madrid, Spain.
Contact: hello@odditieskin.com
2. Purpose and legitimacy of processing your personal data
ODDITIES will collect your personal data through the forms located on the Website and will process them for the following purposes and under the following legal bases:
a). If you decide to register as a user on our Website, we need to process your data to identify you as a user and give you access to its various features, products, and services available to you as a registered user. You can cancel your registered user account by contacting us at hello@odditieskin.com. The legal basis for this processing is the fulfillment of the contractual relationship established with you according to the terms regulating the use of the Website and your registration as a user.
b). Development, fulfillment, and execution of the sales contract you have entered into with us by purchasing a product through the Website, whose legal basis is the fulfillment of the contractual relationship established with you according to the Purchase Terms and Conditions, as well as compliance with commercial, tax, and accounting obligations.
c). Manage the queries, requests, or messages received, whose legal basis is your expressly given consent when sending us your queries, requests, or messages.
d). Sending commercial communications/newsletters by email about news, promotions, products, and/or services related to the activities carried out by ODDITIES and/or by third-party collaborators. In each commercial communication you receive, you will be informed of the procedures available to withdraw your consent. The legal basis for this processing is your express consent.
e). Profiling with the information we have about you (such as the navigation you do, preferences, or purchase history) and the personal data you provide us to improve your user experience, access information according to your preferences, and conduct market studies. The legal basis for this processing is your express consent.
f). In the event that you participate in Sweepstakes or Contests organized by ODDITIES, enable and manage your participation in these. The legal basis for this processing is the fulfillment of the contractual relationship established with you according to the Legal Bases of each Sweepstakes or Contest. In each Sweepstakes or Contest in which you participate, the legal bases will be available where we will provide you with more detailed information about the processing of your data.
3. Storage of your personal data
Oddities will keep User data during the contractual relationship with the user and, in any case, for a maximum period of seven years from the last time the User has interacted with ODDITIES, without prejudice to the conservation that may be necessary for the formulation, exercise, or defense of potential claims and/or whenever permitted by applicable law. Once said period has expired, the Company undertakes to cease the processing of all its data, as well as to properly block them in the corresponding databases of the Company.
4. Recipients
ODDITIES will not make any transfer or international transfer of data, except legal obligation and in the cases described in this section. Your personal data may be communicated to third-party collaborators in order to manage the sending of commercial communications about news, promotions, products, and/or services related to the activities carried out by these, based on your express consent granted through the corresponding box. The personal data you provide us may be communicated, when necessary, for the proper provision of the services requested by the User. In this sense, the Data Processors of ODDITIES may have access to your personal data, that is, service providers who need to access your personal data to be able to develop the functions for which they were hired such as payment service providers, warehouses, order packers, and courier companies. Likewise, we inform you that your data may be communicated to technological providers (Data Processors), some of which have processing and/or support centers located outside the European Economic Area. We guarantee you that when your data may leave the European Economic Area, they will maintain the same level of protection based on compliance with the provisions of European data protection regulations. Likewise, we inform you that we use social connectors, that is, third-party plugins (applications) that allow connecting this Website with social networks and other similar services (Instagram, TikTok, or others) to access ODDITIES profiles on said social networks. The use of such connectors is voluntary. If you choose to use them, you will be authorizing the communication of your personal data (IP address, browsing data) to said social networks and ODDITIES will not be responsible for the subsequent processing they may carry out with your data. We recommend that you visit the terms and conditions of use of said platforms prior to your interaction on social networks with ODDITIES pages, in order to obtain detailed information.
5. Security
ODDITIES informs you that it has implemented the necessary technical and organizational security measures to guarantee the security of your personal data and prevent its alteration, loss, processing, and/or unauthorized access, taking into account the state of technology, the nature of the stored data, and the risks to which they are exposed, whether from human action or the physical or natural environment.
6. Rights of the interested party
As a User of the Website, in your capacity as an interested party, you can exercise the following rights:
a). Right to request access to your personal data: any interested party has the right to know if ODDITIES is processing their personal data.
b). Right to request the rectification of your data: that is, to obtain the rectification of your inaccurate personal data without undue delay.
c). Right to request the deletion of your data: that is, the right to delete the personal data concerning you when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
d). In certain circumstances, the right to request the limitation of the processing of your data, in which case we will only keep them for the exercise or defense of claims.
e). Right to data portability: where appropriate, you may obtain data in electronic format or have it transmitted to another entity.
f). Right to withdraw the consent given: you have the right to withdraw your consent for the processing of your personal data at any time. Once the revocation has been exercised, which will not have retroactive effect unless a legal provision imposes such a character, your data may be kept blocked for the prescription periods established by applicable regulations.
g). Right to object to the processing of your data, particularly regarding commercial communications, in which case we will not process the data, except for compelling legitimate reasons or for the exercise or defense of possible claims.
You can exercise your rights through written communication, proving your identity, addressed to the Data Controller at the email: hello@odditieskin.com. Likewise, you have the right to file a claim with the competent data protection authority (in Spain, www.aepd.es) in case you become aware or consider that an event may constitute a breach of the applicable data protection regulations.
