Privacy Policy

This privacy policy applies to the processing of personal data of customers and/or users of https://www.sayakocosmetics.com , hereinafter, the WEBSITE, owned by Sayako Beauty, SLU, hereinafter, the RESPONSIBLE FOR THE TREATMENT.

Applicable regulations 

Our Privacy Policy has been designed in accordance with REGULATION (EU) 2016/679 of the EUROPEAN PARLIAMENT and of the COUNCIL, of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free circulation of these data and by which Directive 95/46/CE (General Data Protection Regulation) is repealed, hereinafter RGPD UE 2016/679, and in what does not contradict the aforementioned Regulation, by the provisions of Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, hereinafter LOPDGDD 3/2018. 

By providing us with their data, the client and/or user declares that they have read and are aware of this Privacy Policy, giving their unequivocal and express consent to the processing of their personal data in accordance with the purposes and terms expressed herein. 

Basic information on data protection

BASIC INFORMATION ON DATA PROTECTION

Responsible

Sayako Beauty, SLU

Purpose

Respond to requests for information received, respond to queries raised , subscribe to the newsletter to receive the latest news, offers and special promotions of our articles and/or products, manage user comments on entries published in the blog of the website, attend to the orders of customers and/or web users of the online store , provide customer service , as well as send commercial communications about our articles and/or products by letter, telephone, email, SMS /MMS, WhatsApp, Telegram or by other equivalent means of electronic communication, as long as the interested party has consented to the processing of their personal data for this purpose.

Legitimation

Execution of a contract in which the interested party is a party or for the application at the request of the latter of pre-contractual measures. Legitimate interest of the person in charge. Consent of the interested party.

Recipients

No data will be transferred to third parties, except legal obligation. 

Rights

You have the right to access, rectify and delete the data, as well as other rights, indicated in the additional information, which you can exercise by contacting the address of the Data Controller at info@sayakocosmetics.com 

Additional information on data protection

The data controller is:

  • Identity: Sayako Beauty, SLU
  • NIF: B02736502
  • Address: C/ Maestro José Garberí Serrano 5, 7-3 | 03540 Alicante (Spain) 
  • Telephone: (+34) 965 461 357
  • Email: info@sayakocosmetics.com 

Data Protection Officer

The DATA CONTROLLER does not have a Data Protection Officer.

Purposes and legal basis of the treatment

a) In general

The DATA CONTROLLER processes the personal data provided by its clients and/or users for the following purposes:

  • Purpose : respond to requests for information received, answer queries raised, subscribe to the informative newsletter to receive the latest news, offers and special promotions of our articles and/or products , attend to customer and/or user orders of the online store, provide customer service, carry out administrative, commercial, accounting and tax management, as well as send commercial communications about our articles and/or products by letter, telephone, email, SMS/MMS, WhatsApp, Telegram or by other equivalent means of electronic communication, as long as the interested party has consented to the processing of their personal data for this purpose.
  • Legal basis that legitimizes this treatment: Execution of a contract in which the interested party is a party or for the application at the request of the latter of pre-contractual measures. Legitimate interest. The consent of the interested party, which may be withdrawn at any time.

b) Electronic forms WEBSITE

The DATA CONTROLLER processes the personal data provided by customers and/or users through the electronic forms for collecting personal data on the WEBSITE for the purposes identified below:

In relation to the "Contact Form" and with other queries (those that can be addressed through the email accounts that appear on the WEBSITE) :

  • Purpose : Contact the interested party, respond to requests for information received and answer queries raised, provide customer service , as well as send commercial communications about our articles and/or products by letter, telephone, email, SMS/MMS , WhatsApp, Telegram or by other equivalent electronic means of communication, as long as the interested party has consented to the processing of their personal data for this purpose.
  • Legal basis that legitimizes this treatment: Execution of a contract in which the interested party is a party or for the application at the request of the latter of pre-contractual measures. The consent of the interested party, which may be withdrawn at any time.

In relation to the “Newsletter Subscription Form” :

  • Purpose : Allows the user to subscribe to the informative newsletter to receive in their email the latest news, offers and special promotions of our articles and/or products .

  • Legal basis that legitimizes this treatment: The consent of the interested party, which may be withdrawn at any time.

In relation to the “Blog Form – Leave a comment” :

  • Purpose : Allows the user to post a comment on the entries published on the website, as well as send commercial communications about our articles and/or products by letter, telephone, email, SMS/MMS, WhatsApp, Telegram or by other means of communication. electronic equivalents, as long as the interested party has consented to the processing of their personal data for this purpose.

  • Legal basis that legitimizes this treatment: The consent of the interested party, which may be withdrawn at any time.

In relation to the "Form Create an account - Register" :

  • Purpose: Allows the user to create an account to access the online store of the website, as well as send commercial communications about promotions of our articles and/or products by letter, telephone, email, SMS/MMS, WhatsApp, Telegram or by others. equivalent electronic means of communication, as long as the interested party has consented to the processing of their personal data for this purpose.

  • Legal basis that legitimizes this treatment: Execution of a contract in which the interested party is a party or for the application at the request of the latter of pre-contractual measures. The consent of the interested party, which may be revoked at any time.

In relation to the “Access Form” :

  • Purpose: Allows the registered user to access the online store with their username and password to purchase the items and/or products that are made available to them.

  • Legal basis that legitimizes this treatment: Execution of a contract in which the interested party is a party or for the application at the request of the latter of pre-contractual measures. 

When the data requested in the electronic forms is necessary, the DATA CONTROLLER will indicate this mandatory nature at the time of collecting data from customers and/or users and not providing them will imply that the corresponding request cannot be met.

What type of data do we process? 

For the purposes set out in the previous section, the Client's data set is processed, which we can divide into the following sources and categories: 

a) Data provided directly by the client and/or user: data provided directly by the client and/or user , either at the time of requesting the service through the completion of electronic forms for collecting personal data or in paper format enabled for this purpose such as those provided throughout the contractual relationship through different means such as, for example, claims or requests for information filed with the Customer Service. The client and/or user is responsible for its accuracy and updating. 

  • Identification Data (name and surnames, NIF, NIE, passport, postal address, email, telephone, mobile, manual, handwritten or digitized signature, social network profiles, IP addresses, username and password)

  • Economic data (bank data)

b) Data obtained from sources other than the client and/or user: data obtained from sources other than the client and/or user , either by having their consent or by any other legal authorization (legitimate interest, compliance with a legal obligation …). 

c) Data derived from the development of the commercial relationship: data provided indirectly by the client and/or user as it derives from the provision of the contracted service and the maintenance of this activity. This category includes traffic data, history of payments or items and/or products purchased, browsing data through the public website or access to the private area or others of a similar nature. 

Record of treatment activities

We inform you that the personal data obtained from the client and/or user as a result of completing the electronic forms on the WEBSITE are part of the Record of Treatment Activities (RAT) of the RESPONSIBLE FOR THE TREATMENT, which will be updated periodically from time to time. in accordance with the provisions of the RGPD UE 2016/679 and in the LOPDGDD 3/2018 . 

Recipients

The personal data of the interested parties will be communicated to the recipients indicated below:

a) In general:

  • The providers of the DATA CONTROLLER as data processors, within the framework of the corresponding provision of services (lawyers, accounting and tax advice, consultants, transport agencies and providers of information technology services - website hosting and service of e-mail-).

  • The competent authorities and bodies, to the extent necessary to comply with legal obligations.

b) In relation to the "Contact Form" and with other queries (those that can be addressed through the email accounts that appear on the WEBSITE ), with the "Newsletter Subscription Form" , with the "Form Blog – Leave a comment” , with the “Create an account - Register Form” and with the “Access Form” : 

  • No data will be transferred to third parties, except legal obligation. 

Transfers to third countries

  • The transfer of data to third countries is not foreseen, without an adequate level of protection.

Conservation terms

Personal data will be kept:

a) In general:

  • The data will be kept as long as you do not request its deletion, and in any case, for the years necessary to comply with legal obligations.

b) In relation to the "Contact Form" and with other queries (those that can be addressed through the email accounts that appear on the WEBSITE ), with the "Newsletter Subscription Form" , with the "Form Blog – Leave a comment” , with the “Create an account - Register Form” and with the “Access Form” :

  • The personal data will be kept until the end of the relationship between the RESPONSIBLE FOR THE TREATMENT and the client and/or user, unless the latter previously requests their deletion, or until the interested party withdraws the consent granted at any time, without that this affects the legality of the treatment based on the consent prior to its withdrawal. 

For these purposes, the interested party is reminded that they must transfer to the RESPONSIBLE FOR THE TREATMENT as the recipient to whom they communicate personal data, any rectification or deletion of the data of their representatives, authorized persons and other contact persons.

Once the relationship has ended, to the extent that the personal data of the interested parties are relevant for the purposes of the responsibility of the DATA CONTROLLER towards customers and/or users, these data will be kept, duly blocked, at the disposal of the authorities. courts or the competent public administrations, for the demand of the responsibilities derived from the treatment for the term of prescription of the same.

Rights of the interested parties

Clients and/or users of the WEBSITE may exercise the following rights before the DATA CONTROLLER, to the extent applicable: access to personal data, rectification, deletion (right to be forgotten), treatment limitation, data portability data, opposition to treatment and not being subject to automated individual decisions and, when treatment is based on consent, the right to withdraw it at any time.

Clients and/or users may exercise these rights by means of a written and signed request sent to the postal address of the DATA CONTROLLER located at C/ Maestro José Garberí Serrano 5, 7-3 | 03540 Alicante (Spain) or through the email address info@sayakocosmetics.com, attaching, in both cases, the interested party, a valid proof of identity in law, such as a photocopy of the NIF/NIE or equivalent document, and clearly indicating the right you wish to exercise. 

Customers and/or users will also have the right to file a claim with the competent Control Authority (Spanish Data Protection Agency) if they observe that the treatment does not comply with current regulations or consider their rights to be violated with regard to data protection. of your personal data, especially when you have not obtained satisfaction in the exercise of your rights, through the WEB page https://www.aepd.es 

These rights will be addressed by the DATA CONTROLLER within 1 month, which may be extended to 2 months if the complexity of the request or the number of requests received so requires. All this without prejudice to the duty to keep certain data in the legal terms and until the possible responsibilities derived from a possible treatment, or, where appropriate, from a contractual relationship, expire.

In addition to the above, and in relation to data protection regulations, Users who request it, have the possibility of organizing the destination of their data after their death.

Sending commercial communications

In compliance with the provisions of the second final provision of Law 9/2014, of May 9, on Telecommunications, which modifies Law 34/2002, of July 11, on services of the information society and electronic commerce, commercial communications made electronically must be clearly identifiable as such, and the natural or legal person on whose behalf they are made must also be clearly identifiable, without prejudice to the provisions of the regulations issued by the Autonomous Communities with exclusive powers over consumption.

The client and/or user, who provides their contact information to the RESPONSIBLE FOR THE TREATMENT by clicking on the "SEND" button of the electronic forms for collecting personal data on the website and affirmatively marking the two boxes for obtaining consent existing, "I accept the treatment of my data according to the purposes indicated in the basic data protection information" and "I give my consent to receive commercial communications of your articles and/or products", expressly authorizes and grants your express, free and unequivocal to the RESPONSIBLE FOR THE PROCESSING to process your personal data in order to send you commercial communications about your articles and/or products by letter, telephone, email, SMS/MMS, WhatsApp, Telegram or by other equivalent electronic means of communication.

The legal basis that legitimizes this treatment is the consent of the interested party, which may be revoked at any time.

In compliance with the provisions of articles 21 and 22 of Law 34/2002, of July 11, on services of the information society and electronic commerce, the user may oppose the processing of their data for promotional purposes and revoke the consent given to the reception of commercial communications via email with the simple notification of their will to the PROVIDER through a simple and free procedure, consisting of sending an email to the email address info@sayakocosmetics.com , indicating in the Subject of the message “LOW” or “DO NOT SEND”.

The data provided will be kept as long as the commercial relationship is maintained or during the years necessary to comply with legal obligations.

social media policy

The DATA CONTROLLER has profiles on the main social networks on the Internet:

  • Facebook: https://www.facebook.com/sayakocosmetics 
  • Instagram: https://www.instagram.com/sayakocosmetics 
  • LinkedIn: https://www.linkedin.com/company/sayako-beauty 
  • Pinterest: https://www.pinterest.es/sayakocosmetics 

In this case , it is considered responsible for the treatment of the data of its users, also understood as followers, subscribers, fans, or simply people who make comments or queries through these channels. 

In this sense, the RESPONSIBLE FOR THE TREATMENT could use this profile to inform its users of news that it considers appropriate for the purpose of the services offered, or perhaps it could also share information or current articles published by other users of social networks. 

In no case will personal information of users be used without their consent to have relationships other than those expected in the aforementioned social network, requesting, where appropriate, the user's consent.

Veracity of the data provided by the interested parties

The client and/or user is responsible for the information provided by completing the electronic forms that are made available on the WEBSITE or by sending emails to the different accounts under the domain in Internet sayakocosmetics.com is true, responding to the accuracy of all the data that it communicates and will keep it updated to reflect a real situation, being responsible for false or inaccurate information that it provides and for the damages, inconveniences and problems that could cause the RESPONSIBLE FOR THE TREATMENT or to third parties.

Security measures

The RESPONSIBLE FOR THE TREATMENT guarantees that it has implemented the appropriate technical and organizational policies on the WEBSITE to apply the security measures established by the RGPD UE 2016/679 and the LOPDGDD 3/2018 in order to protect the rights and freedoms of the clients. and / or users and has communicated the appropriate information so that they can exercise them.

The RESPONSIBLE FOR THE TREATMENT to protect individual rights, especially in relation to automated treatments and with the desire to be transparent with clients and/or users, has established a policy that includes all of said treatments, the purposes pursued by the latter , the legitimacy of the same and also the instruments available to the client and/or user so that they can exercise their rights.

The WEBSITE is developed with the Shopify web page design content management system and has an SSL encryption certificate activated for the entire domain, which allows the user to securely send their personal data through the electronic forms collected. of existing personal data.

The WEBSITE is hosted on the servers that SYSPROVIDER®, SL, NIF: B01638832 | Calle Río Lomo 4, Planta 1, Oficina 4, 26006 Logroño - La Rioja (Spain), offers the RESPONSIBLE FOR THE TREATMENT, being the assigned IP address of Spanish range.

All information will be stored and managed with due confidentiality, applying the necessary computer security measures to prevent access or improper use of your data, its manipulation, deterioration or loss.

However, the client and/or user must bear in mind that the security of computer systems is never absolute. When personal data is provided over the Internet, said information could be collected without your consent and processed by unauthorized third parties. The RESPONSIBLE FOR THE TREATMENT declines, any type of responsibility for the consequences of these acts may have for the User, if he published the information voluntarily. 

Acceptance and consent

The client and/or user declares to have been informed of the conditions on protection of personal data, accepting and consenting to the automated treatment of the same by the RESPONSIBLE FOR THE TREATMENT in the manner and for the purposes indicated in this Privacy Policy. Certain services provided on the WEBSITE may contain particular conditions with specific provisions regarding the protection of personal data.

Changes in this privacy policy

THE DATA CONTROLLER reserves the right to modify this Privacy Policy to adapt it to new legislation, jurisprudence, interpretation of the Spanish Agency for Data Protection, as well as industry practices. 

In these cases, the RESPONSIBLE FOR THE TREATMENT will announce on the websites the changes introduced with reasonable anticipation of their implementation. 

This privacy policy may be supplemented by the Legal Notice, Cookies Policy and the General Conditions of Contract that, where appropriate, are collected for certain products or services, if said access implies any specialty in terms of personal data protection. .

Get in touch

This site is protected by hCaptcha and the hCaptcha Privacy Policy and Terms of Service apply.