Identity of the Controller
The data controller, that is, the person that decides on the purpose for processing personal data, is:
Controller: PharmexCare Cosmetics S.L
Trade name: ME ALL ABOUT ME
CIF/NIF [tax ID code/no.]: B-01634781
Calle Anabel Segura, 16, Edificio 1, Planta 1,
28108 Alcobendas, Madrid.
Companies Register: Companies Register of Madrid: Sheet M-721977, Volume 40686, Folio 48
Pursuant to data protection legislation and any other applicable current relevant legislation, we would like to inform the user that all personal data provided, where applicable, will be included in an automated file that will be used solely for the purposes described in the corresponding form, agreement, pre-agreement or offer.
The applicable provisions will be those of Spanish law given that PharmexCare has a permanent establishment in Spain.
In the event that you have provided your personal data to us as a user of PharmexCare, we would like to inform you that your data are processed in accordance with the contractual relationship that we have in place with you to enable us to process your orders and to send you information related to the activities of Pharmex Care and new products and promotions that PharmexCare may offer.
The legal basis for said processing is the contract entered into between you, as a Customer, and PharmexCare, to enable us to process your orders and your legitimate interest in further information and promotions.
Potential Customers That Are Legal Entities
PharmexCare uses the data of potential customers to initiate and prepare the contractual relationship and to send commercial information. In this regard, the receivers of the information may be data subjects that PharmexCare has previously been in contact with, persons that contact us through the PharmexCare contact form, owners of pharmacies and other entities or establishments that have been visited by members of PharmexCare staff, and other centres that may be interested in the products offered by PharmexCare. In the event that a data subject is receiving this type of information, it will be owing to one of the scenarios listed above. The information that PharmexCare sends is what we believe may be of interest to the recipient and, at all times, it is related to the products or services offered by PharmexCare and with regard to which the data subject has shown some type of interest.
The legal basis that makes the processing of data for this purpose lawful is the preparation of pre-contractual relationships and the legitimate interest of PharmexCare in sending any information of interest. Said legitimate interest is ensured by informing the user at all times that they have the option to unsubscribe so as not to receive these communications and by ensuring that the information that we send is always related to PharmexCare products and services in which the data subject has expressed interest. In no event will these data be transferred to third parties.
PharmexCare will store your data unless you object to said processing.
Please note that PharmexCare uses the data obtained from contact forms to resolve your queries or address your comments. The information that PharmexCare sends is what we believe may be of interest to the recipient and, at all times, it is related to PharmexCare products and services in which the data subject has shown some type of interest.
The legal basis for the lawfulness of the data processing for this purpose is your consent when you make the query. In no event will these data be transferred to third parties.
PharmexCare will store your data unless you object to said processing.
In the event that you have provided your data as a contact person of a supplier company or as a self-employed businessperson, please note that PharmexCare will use your data exclusively to maintain the contractual relationship and it will not transfer them to third parties unless said data transfer is necessary to perform the contractual relationship with the data subject or their company. The only transfers of these data will be those related to legal advice, or tax authorities or financial institutions, for supplier management. The data provided will be stored while the contractual relationship continues or for the necessary number of years to comply with legal obligations. The legitimacy for the processing is the performance of the contractual relationship.
In the event that you have provided your data to PharmexCare as a potential candidate to become part of our team, please note that PharmexCare will use the data only to manage your application for one of the vacancies that may arise at PharmexCare. The data provided will be kept for a maximum of two years. The legitimacy for the processing is your consent when you send us your identification data and/or CV.
In the event that you have filed a complaint with PharmexCare for any reason, your data will be used to resolve the complaint and they will not be transferred to third parties unless such communication is necessary and only in the event that the complaint makes it necessary to perform such communication and exclusively for that purpose. The data provided will be kept for the necessary number of years to comply with legal obligations, while the subject matter of the complaint has not expired.
Vigilance Regarding Adverse Reactions
In the event that you have filed, or wish to file, a complaint with regard to an adverse reaction to a PharmexCare product, you should do this by sending an email to email@example.com or by using the contact form on the website. In accordance with cosmetovigilance and data protection regulations, the personal data that you provide will be processed as confidential and, to the greatest possible extent, they will be anonymised or dissociated by PharmexCare; however, there is a possibility that your data concerning the adverse reactions reported will be passed on to the authorities to enable them to follow up the event. The data provided will be kept for the necessary number of years to comply with legal obligations, while the subject matter of the complaint has not expired. We would like to advise you that PharmexCare will keep your personal data confidential and will use your identification data only to contact you, if necessary. In the event that PharmexCare has to process data concerning your health, it will be necessary for you to give your express consent to the processing of your data that is subject to special protection for the purposes stated.
Data Communications to Third Parties
Data will not be transferred to third parties except to comply with legal obligations. However, it is possible that, in order to correctly provide its services, PharmexCare will have to pass on certain personal data to third parties that provide services to it, exclusively to enable the company to operate correctly. In any event, the data communications that may take place will be made to third parties acting as data processors in order to provide services to PharmexCare, which will mean that the third party will access the personal data.
In this regard, PharmexCare will enter into the corresponding data processing agreements with the third parties that process or access personal data.
Exercising of Rights That Are Applicable to All Personal Data
Data subjects have the right to obtain confirmation as to whether PharmexCare is processing their personal data; therefore, as such, you have the right to access your personal data, rectify inaccurate data or request deletion if the data are no longer necessary, and to object to the processing of your personal data for any purpose described herein such as, for instance, for sending marketing information.
You have the right to access, rectification, deletion, objection, restriction on processing and portability of your personal data and you may exercise these rights by:
- emailing: firstname.lastname@example.org;
- sending a letter to: Calle Anabel Segura, 16, Edificio 1, Planta 1, Derecha, 28108 Alcobendas, Madrid.
In any event, as a data subject you can contact the Data Protection Officer at email@example.com and/or contact the corresponding supervisory authority to file any complaints you may deem appropriate and, if you are located in Spain, this authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos).
Data Veracity and Updating
PharmexCare assumes that the personal data provided through the different channels and resources are true, that the data subject is the one directly providing them, that the data subject is the person that they claim to be, that the data are up to date, and that the affected party or data subject will give notice of any changes to their data if these arise.
Duty of Confidentiality
The people involved in processing data concerning natural persons and who have direct or indirect access to the files will, at all times, uphold confidentiality with regards to any personal data that they encounter while carrying out their activity. The Duty of Confidentiality is an obligation for Pharmex Care, the members of its governing and management bodies, the people it employs under applicable Employment Laws and the professionals that provide contracted services to it under applicable Commercial Laws. It is also an obligation for the suppliers of goods and services and their employees, the Data Processors and their employees, and anyone subcontracted by the Data Processors and their employees. The obligation of confidentiality will remain in force even after the termination of the employment or commercial relationship established with PharmexCare, the data Controller, and after the expiry of the employment and commercial agreements, etc., that bind the employees and/or professionals to the Data Processor and the suppliers that supply goods and provide services to Pharmex Care.
When PharmexCare recommends or links to a website, it is because it believes that this website will be of interest to its users. PharmexCare has no supervisory obligations regarding the websites that it links to or recommends. The same has been created by legal entities, natural persons and entities with no legal personality that are not a part of PharmexCare. The latter is not involved in their management, funding or decision-making with regards to the content they include, nor does it manage or participate in the services provided by the websites that it links to or recommends. PharmexCare will remove any links and stop recommending a website if it finds irrefutable evidence that the same and/or the services that it supplies are illegal or damaging to third-party property or rights that may be subject to compensation.
PharmexCare has implemented the security measures required by the regulations on personal data protection at its work centers, business premises and in its systems and communication infrastructure, etc. It has also adopted the logical, physical, organisational, contractual, etc. measures that prevent third parties from obtaining unauthorised access to data, and the destruction, modification, reproduction, dissemination, transfer and reuse of the same.