Privacy Policy

In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and implementing regulations, hereinafter the GDPR, and as a result of browsing and completing forms on the various websites owned by DERMOFARM, S.A.U., the user agrees that the personal data provided by them or to be provided in the future via these services may be processed by DERMOFARM, S.U (hereinafter ‘DERMOFARM S.A.U.’), in its capacity as the Data Controller.

At DERMOFARM S.A.U, just as we are firmly committed to providing consumers with cosmetic products manufactured to the strictest pharmaceutical industry standards, in order to achieve the best results for improving quality of life and wellbeing, we are equally committed to protecting your personal data and taking every precaution to ensure its security. Furthermore, we contractually require any trusted third parties who may process your personal data to do the same.

We always do our utmost to protect your personal data and, once we have received your personal information, we use strict procedures and security measures to prevent unauthorised access.

In accordance with the obligations set out in Law 34/2002 on Information Society Services and Electronic Commerce:

The service provider that owns this website is DERMOFARM S.A.U., with Tax Identification Number (C.I.F.) A08283624 and registered office at C/ Leonardo Da Vinci 16-22, Parc Can Sant Joan, 08191, Rubí (Barcelona). The contact email address is: dpo@dermofarm.com

1. Identity and address of the data controller

The data controller for the purposes of the applicable data protection laws and, specifically, the European General Data Protection Regulation (GDPR) 2016/679, is DERMOFARM S.A.U., with Tax Identification Number (C.I.F.) A08283624 and with registered office at C/ Leonardo Da Vinci 16-22, Parc Can Sant Joan, 08191, Rubí (Barcelona).

2. Protection of personal data in accordance with applicable legislation

DERMOFARM S.A.U., as the controller of this Website and in accordance with the provisions of the GDPR and other applicable legislation on the protection of personal data, as well as Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE), has implemented the necessary technical and organisational policies, measures and procedures to guarantee and protect the confidentiality, integrity and availability of your personal data.

3.- Data processing and confidentiality

DERMOFARM S.A.U. will always inform you as to which data fields are mandatory and necessary for the fulfilment of the purposes detailed below.
All those involved in any stage of the processing and/or the entities to whom such data have been disclosed – where applicable and by virtue of the corresponding authorisation expressly granted by you – are obliged to observe professional secrecy and shall adopt the necessary levels of protection and the technical and organisational measures within their means to guarantee the security of personal data, preventing, as far as possible, unauthorised access, unlawful alterations, theft and/or loss of data, and to ensure the appropriate level of security for the processing carried out by DERMOFARM S.A.U., in accordance with the nature and sensitivity of the data you provide via this Website.

However, you are hereby warned and informed that technical measures are neither infallible nor impregnable; for this reason, DERMOFARM S.A.U. cannot be held liable for such incidents or their consequences, in particular, for the presence of viruses or other elements, or for any damage or loss that may arise from the presence of viruses, or from your connection to or downloading of content from the Website that causes disruption to computer systems (hardware and software).

4. Personal data

This refers to any information or data that may identify you directly (for example, your first name or surname) or indirectly (for example, your national identity card number or D.N.I.). Personal Data includes information such as your email address, home postal address, mobile phone number and user-generated content, amongst other things. It may also include unique numerical identifiers such as your computer’s IP address or your mobile device’s MAC address, as well as information we obtain through cookies.

5. Collection of personal data and purposes of processing

We may collect or receive your data via our website using the relevant contact form. To this end, in some cases you provide us with your data directly (for example, when you contact us) and, in other cases, we collect it ourselves (for example, by using cookies to analyse how you use our website).

You will find further details and information in the table below and its corresponding headings in accordance with the GDPR:

Heading	Basic information	Additional information
Data controller	DERMOFARM S.A.U., owner of the websites: http://www.dermofarm.es https://www.cumlaudelab.com https://rilastil.com/ https://www.sensilis.com https://www.comodynes.com	Tax Identification Number (C.I.F.) A08283624, with registered office at C/ Leonardo Da Vinci 16–22, Parc Can Sant Joan, 08191, Rubí (Barcelona)
Purpose of data processing and retention	To contact DERMOFARM S.A.U. regarding any enquiries about the services we provide. – Provision of information services via the websites http://www.dermofarm.es, https://www.sensilis.com, http://www.rilastil-cumlaude.com, https://www.comodynes.com for the purpose of responding to your enquiries and requirements and determining how we can assist you as quickly as possible. To send you marketing communications, process your request to register for an event or apply for a job, and provide you with information about DERMOFARM S.A.U.’s sector of activity. Suppliers with access to data.	The data subject expressly consents to the Data Controller carrying out the following activities and/or actions, unless otherwise indicated when contracting or requesting information regarding the services listed in the previous column, or as a result of a subsequent withdrawal of the consent initially granted: (i).- Suppliers with access to data: We inform you that, where necessary, your data will be processed by third-party companies that assist us in providing IT services, such as platform and support providers for our databases, as well as for our software and applications which may contain data about you. (ii).- Carrying out statistical studies. (iii). Sending communications by electronic means and newsletter subscriptions via the various websites owned by DERMOFARM S.A.U, informing data subjects of activities, services, promotions, advertising, news and other information regarding the company’s services, as well as by partners with whom the company has entered into a commercial promotion agreement relating to its customers. In this case, third parties will never have access to personal data. In all cases, commercial communications will be sent by DERMOFARM S.A.U. and will relate to products and services within DERMOFARM S.A.’s sector.U, which are the same as or similar to those initially contracted for or of interest to the Customer, in accordance with Law 34/2002 of 11 July on Information Society Services and Electronic Commerce. (iv).- Contacting you: your data is requested so that we may contact you and, in this way, process orders, requests or any other enquiries made by the user via any of the contact methods made available to the user by DERMOFARM, S.A.U, as well as to deal with any issues, queries or complaints that may come to our attention. (v).- To assess the user’s application by means of completing online forms or by receiving their CV via our contact email address rrhh@dermofarm.com. Once the relationship has ended, the data will be retained for such time as is appropriate to comply with the limitation periods for any potential data protection infringements, as well as in accordance with the limitation periods set out in any other applicable legislation.
Legal basis for processing	(i).- Fulfilment of contractual obligations. (ii).- Legitimate interest. (iii).- Express consent. (iv).- Legal obligation.	(i).- The performance or fulfilment of contractual obligations shall apply where processing is necessary for the performance of a contract to which the data subject is a party or for the implementation, at the data subject’s request, of pre-contractual measures.(ii).- Legitimate interest will serve as the basis for responding to your enquiries and providing the information requested, as well as, where applicable, for the possible sending of marketing communications. (iii).- Requests for information and subscription to the newsletter are based on the consent requested from you. (iii).- Requests for information and subscription to the newsletter are based on the consent requested from you. (iv).- A legal obligation will apply where processing is necessary for compliance with a legal obligation applicable to the data controller.
Recipients	We inform you that your data may be processed by other entities (data processors) for the purpose of ensuring the proper provision of DERMOFARM S.A.U.’s services. The transfer of your data to third parties for other purposes will require your prior consent	Your data will be processed by third-party companies that assist us in providing IT services, such as platform providers, hosting services, and maintenance and support for our databases, as well as for our software and applications that may contain data about you, without the need for you to give your consent, given that DERMOFARM S.A.U already enters into a contractual relationship with them (data processors) with the aim of ensuring the strictest confidentiality in the processing of your personal data.
Rights	You may at any time exercise your rights of access, rectification, erasure, objection, restriction and data portability in relation to the processing of your data, as well as withdraw your consent to the processing of your data.	You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, as well as withdraw your consent to the processing of your data by writing to DERMOFARM S.A.U., with Tax Identification Number (C.I.F.) A08283624 and with its registered office at C/ Leonardo Da Vinci 16–22, Parc Can Sant Joan, 08191, Rubí (Barcelona), or by email to dpo@dermofarm.comEn. In accordance with Article 80 of the GDPR, we inform you that you have the right to authorise the Spanish Supervisory Authority to exercise, where appropriate, the rights to which you are entitled in relation to data protection on your behalf.
Source of the data	From the data subject themselves or from third parties	The data processed is obtained from the data subject themselves and/or from third parties authorised by them on behalf of DERMOFARM: The categories of data we process are: Identifying data. Postal or email address, where applicable, and contact telephone number. Data relating to candidates’ CVs: academic qualifications, work experience, professional profile , etc.

6. Transfer in special
circumstances In the event of a sale, merger, consolidation, change in corporate control, substantial transfer of assets, reorganisation, transformation or liquidation of the websites currently owned by DERMOFARM S.A.U then, at our discretion, we may transfer, sell or assign the information collected on this Site to one or more relevant acquiring parties, notifying you of the change in the data controller.

7.- Links:
Finally, although DERMOFARM S.A.U provides links to third-party websites, it accepts no responsibility for the content found on those websites, insofar as they are managed by third parties unrelated to DERMOFARM S.A.U.

Nor is it responsible for any personal data or for the processing carried out via the aforementioned websites.

8.- Social
media: We would like to inform you that DERMOFARM S.A.U. is active on social media. The processing of data relating to individuals who follow DERMOFARM S.A.U. on social media via any of its official pages (and/or who establish any link or connection via social media)U, shall be governed by this section, as well as by the terms of use, privacy policies and regulations governing access, use and similar matters pertaining to the relevant social media platform in each case and previously accepted by the user. DERMOFARM S.A.U. will process your data for the purposes of properly managing its presence on the social media platform, informing you of DERMOFARM’s activities, products or services, as well as for any other purpose permitted by the social media platforms’ regulations.

9. Intellectual property:
All content on this website, including text, trade marks, distinctive signs, logos, images, graphics and designs, is the property of DERMOFARM S.A.U. and is protected by current legislation on intellectual property.

Under no circumstances does the user’s access to the website confer any rights over such content, not even for its mere reproduction for personal use.

10.- Changes to the privacy policy:
DERMOFARM S.A.U reserves the right to amend this policy to bring it into line with new legislation or case law, as well as with the recommendations and guidelines of the relevant supervisory authority. In such cases, DERMOFARM S.A.U. will duly inform you of any updates and changes to its privacy policy.