Privacy Policy – DR. SERRANO Skincare

SESDERMA, S.L. is particularly sensitive to the protection of personal data of Users of the Website services. Through this Privacy Policy (or Data Protection Policy) SESDERMA, S.L. informs USERS of the websites: https://www.sesderma.com, of the uses to which the personal data collected on the website are subjected, so that they may decide, freely and voluntarily, whether they wish to provide the requested information.

SESDERMA, S.L., reserves the right to modify this Policy in order to adapt it to new legislation, jurisprudential criteria, sector practices, or the interests of the entity. Any changes to it will be announced in due time, so that you are fully aware of its content.

1.Who is responsible for the processing of your personal data?

SESDERMA, S.L. (hereinafter, Sesderma) is the Data Controller of the personal data provided by you.

Contact details: SESDERMA, S.L., C/ Grabador Esteve 8, 46004 Valencia, Spain. NIF B-97443394.

Contact address: info@sesderma.com

Contact details of the Sesderma Data Protection Officer: dpo@sesderma.com

Due to the nature of the products and services we provide, Sesderma is highly committed to protecting the privacy and processing of personal data of our users and customers, making every effort to comply with current regulations. Your personal information is therefore treated securely and with the utmost care.

2. For what purpose do we collect your personal data?

The main purpose for which we collect your personal data is to facilitate and improve the service we offer you through this website.

We also collect your data in order to manage and respond to requests for information, queries, complaints, as well as to learn the opinions of users regarding the products offered by Sesderma. Create and manage a personal account with a single registration to be used for the acquisition of products and services offered, intended for professionals, pharmacies and companies. Carry out client management at an administrative, accounting and tax level, including contact person data where appropriate. Conduct market research to measure the quality of our products and services, as well as send newsletters or information of interest about new promotions or products. Furthermore, we provide you with a channel on the website called “Work with us” so that you can provide us with your CV if you are interested in participating in a personnel selection process in our company or in any of the members of the Sesderma Group. If a candidate sends his/her CV, his/her data will be processed for the participation of his/her candidacy in the selection process and may be assessed for suitability for a particular job, including the possibility of personality and behavioural assessments from the point of view of suitability for a specific job.

We also inform you that Sesderma has implemented a policy of not accepting CVs in paper format, so if you are interested in applying for the selection process you must do so through the channel made available to you on the website.

Provide a personalized service for the User, adapting said services to their personal and geographic profile, as well as to their preferences and tastes.

Define typologies, segmentations and user profiles, as well as provide, manage, administer, expand and improve services and/or products, by analyzing the use of products of interest by Users.

Display editorial or commercial information specifically designed for the profile inferred based on the User’s interest in the products. This profile may also be inferred based on the geographic location of the device or terminal from which you view the products; however, you will always be asked for prior and specific authorization to process this information.

Design new services that may be of interest to you.

3. What is the legal basis that legitimizes the processing of your personal data? That is, what condition justifies or enables us to process your personal data?

The legal basis that legitimizes us to process your data may be diverse: in some cases it may be the consent of the interested parties, in others compliance with a legal obligation on our part, in others compliance with a contract and/or commercial relationship, or due to the legitimate interest of the data controller.

Legal basis:

Facilitate and improve the service we offer you through this website: legitimate interest.
Manage and respond to information requests: consent.
Creating and managing a personal account: contract.
Knowing the opinion of users: legitimate interest.
Customer management: contract.
Sending newsletters or information of interest about new promotions or products: consent.
Treatment of contact persons of legal entities: legitimate interest.

Cookie management: consent.

Personnel selection process: consent.

Personalized services for the User, profiling, preferences, analysis, tastes, segmentation, design of new services, analysis of the geographic location of the device accessing the website: consent. Participation in web chat: consent.

When processing is based on your consent, it will be deemed to have been given unequivocally, and such contribution will be considered a clear affirmative act on your part, which manifests such consent. The consent you have given is revocable at any time, through the contact channels on this website.

4. How long do we keep your personal data?

The data will be kept for the time necessary to fulfill the purpose for which it was collected, and according to the legal basis for the processing of the data in accordance with legal obligations, as well as to determine possible responsibilities that may arise from said purpose and the processing of the data.

The data will be kept for the legally established period in order to comply with legal tax, fiscal or administrative obligations, and to be able to address claims. The data retention period will start from the end of the contract, from the revocation of consent or from the opposition to a certain treatment.

5. Who may be assignees or recipients of your personal data?

If you have given us your consent, your personal data may be transferred to companies in the Sesderma Group (www.skindreamer.com; www.mediderma.com; www.sesbysesderma.com; www.clinicaserrano.com; www.centrowellnessdrserrano.com). In other cases, it will be necessary to communicate your personal data to third parties in order to provide you with the requested service, such as transport and delivery companies or data processors with whom this entity has entered into contracts in compliance with Art. 28 of the GDPR. Likewise, the data may be transferred or communicated, where appropriate, to banking entities for the collection or payment of data, as well as at the request of Public Administrations, Courts or Tribunals. The data may be transferred to other companies in the Group, whose identity is contained in this legal text, whose activities are related to the purchased product.
Outside of these cases, there are no anticipated recipients of your data.

6. International transfers

The personal data we collect resides in Spain, and in any case, within the European Economic Area, since Sesderma and other companies in the Group have a presence in other European countries. On some occasions, we contract Cloud Computing services in the United States, carrying out international data transfers. In these cases, appropriate safeguards are adopted to protect your information, regarding which you can obtain additional information by writing to dpo@sesderma.com

7. What are your data protection rights and how can you exercise them?

To exercise the rights of Access, Rectification, Deletion, Opposition, Limitation, Portability or, where appropriate, Opposition, you may make a request by submitting a letter to: Avenida dels Molins 12. Polígono Industrial La Murta., 46530 Puzol, Valencia – Spain or, where appropriate, by sending your request to: dpo@sesderma.com.

In the letter you must specify which of these rights you request to be fulfilled, you must also specify and determine your request and, in turn, you must include or, in the case of postal delivery, attach a photocopy of your ID or equivalent identification document that proves your identity. If you act through a representative, legal or voluntary, you must also provide a document proving the representation and identification document of said representative. Also, if you do not wish to continue receiving e-mails from SESDERMA, S.L., you only have to send a message dpo@sesderma.com, indicating your email address and that you wish to unsubscribe from the Newsletter.

In any case, you may also file complaints with the Spanish Data Protection Agency (https://www.aepd.es/).

8. Security measures in the processing of your data

Finally, it is reported that SESDERMA, S.L., will adopt in its information system the technical and organizational measures appropriate to the risks that will be periodically analyzed by means of periodic risk analysis, in order to guarantee the security, integrity and confidentiality of the stored data, thus avoiding its alteration, loss, treatment or unauthorized access; taking into account the state of the art, the costs of application, and the nature, scope, context and purposes of the treatment, as well as risks of variable probability and severity associated with each of the treatments.

If you obtain a user account to access the website, you must have a personal and non-transferable password and not transfer it to third parties. The user will be responsible for what happens in his/her account, and must be aware of the risks of its use and assume responsibility. If you have any questions about this Privacy Policy, please contact us by sending an email to dpo@sesderma.com.