Customer privacy notice

Detailed Data Protection information for the processing of customer data

Who is the Data Controller that processes your data?

Identity: Medaris 1898, S.L. – CIF: B65758948 

Postal Address: Rambla de Catalunya, 14 ,4-1, 08007 Barcelona – Spain

Phone: (+34) 931 67 29 99

E-mail: info@rosannabarcelona.com

Data Protection Officer: https://www.rosannabarcelona.com/data-protection-officer/

DPO Contact: info@rosannabarcelona.com

What is the purpose of the processing of your personal data?

At Medaris 1898, S.L. we process the information provided by persons who sign up to the www.rosannadlr.com platform in order to enable them to access it, adequately manage the activity, and for the billing, shipping and payment of their orders.

In addition, if the person gives us his consent, we will use his data to send promotions and personalized commercial information about Medaris 1898, S.L. by electronic means.

For how long will we store your data?

The data provided will be stored for as long as the interested party does not request the deletion of the data.

What is the lawful basis for the processing of your data?

The legal basis for the data processing is the consent by the interested party, as well as the entry into a service purchase and sale contract.

The prospective product and service offer is based on the consent that is being requested, and under no circumstance will the withdrawal of this consent result in a limitation to the rendering of the requested service.

Who will your data be disclosed to?

The data may be disclosed to:

·         ETL

·         Corporate web application

Medaris 1898, S.L.maintains its virtual infrastructure by hiring a “cloud computing” model from various providers located within and without the EU. The providers outside the EU comply with the “EU-US Privacy Shield” framework:

In addition, Medaris 1898, S.L. manages payments through payment gateways such as PayPal and Stripe. Customer data may be disclosed to these platforms with the purpose of managing payments for purchased services.

Lastly, customer data for customers that make online purchases will be disclosed to transportation companies such as UPS / NACEX or CORREOS EXPRESS.

No other data disclosures will be performed unless required to comply with a legal obligation.

What are your rights when you provide us your data?

Any person has the right to obtain a confirmation on whether Medaris 1898, S.L. is processing personal data related to you.

Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data, or otherwise request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

Under specific circumstances, the interested parties may request the limitation of the processing of their data, in which case we will only maintain them for the filing of, or defense from, claims.

On account of the right to portability, the interested parties have the right to obtain the personal data related to them in a commonly-used, machine-readable structured format and to transfer it to another data controller.

How can you exercise your rights?

By sending a written note to Medaris 1898, S.L., Rambla de Catalunya, 14, 4-1, 08007 Barcelona  annexing a photocopy of the DNI or equivalent identity document.

How can claims be filed?

If you consider that your rights have not been adequately preserved, you have the right to file a claim with the Spanish Data Protection Agency.