Still not a Montibello customer?

be a customer
CURSO hop

Privacy Policy

Privacy Policy

Privacy Policy

In accordance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016 (hereinafter “GDPR”) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, COSMÉTICA COSBAR, S.L. (hereinafter “COSBAR” or “CONTROLLER”) hereby informs you that as the CONTROLLER, all personal data you provide us with will be included in a data file kept under strict security and confidentiality measures, and will be stored while we deal with your requests or queries, while there is a service relationship in force or until you tell us otherwise.

CONTROLLER:

COSMÉTICA COSBAR, S.L., with tax ID number (NIF) B-08207615, registered office at c/ Vall d’Arán, 15, 08820, El Prat de Llobregat (Barcelona) and contact details dpo@cosbargroup.com / (+34) 93 478 48 00, is the Controller for your personal data.

DATA PROTECTION OFFICER:

Likewise, we hereby inform you that COSMÉTICA COSBAR has appointed a DPO (Data Protection Officer) to deal with any query, complaint or suggestion regarding processing and recording of the processing operations. You may contact the DPO through the following email address: dpo@cosbargroup.com

TYPES AND SOURCES OF PERSONAL DATA:

COSBAR will process the following personal data:

– Data provided by the user: this is personal data voluntarily provided by you through this Website, whether through the contact form or through the corporate email address provided or, where applicable, through the register set up for this purpose. In this case, the category of data processed by COSBAR corresponds to:

Identifying data, such as name, surname(s), data of birth, etc.,
Mailing or email addresses, phone, etc.,
Business and financial information,
Data contained in the user’s message.

– Data collected through cookies and/or similar technologies: data stored as a result of you browsing our Website. You can find more information in relation to the categories of data processed and types at https://hair.montibello.com/politica-de-cookies/

Unless you inform us otherwise, we will understand that the data provided has not changed, that you agree to inform us of any changes and that we have your consent to use it for the purposes above.

PURPOSE AND LAWFUL BASIS:

The purposes and lawful bases for the data processing and processing operations that COSBAR carries out as the Controller are exclusively as follows:

  1. a) Management of web inquiries and requests (lawful basis: PERFORMANCE OF A CONTRACT);
  2. b) Management of potential customers and contacts of the company (lawful basis: IMPLEMENTATION OF PRE-CONTRACTUAL MEASURES);
  3. c) Management and maintenance of the relationship with customers, performance of the services engaged by the customer, tailoring COSBAR’s commercial offerings to the customer’s specific characteristics, issuance of invoices, accounting, etc. (lawful basis: PERFORMANCE OF A CONTRACT);
  4. d) Marketing of COSBAR’s products and services (lawful basis: PERFORMANCE OF A CONTRACT);
  5. e) Sending of newsletters, marketing and informative communications of interest to you, sending of electronic bulletins with offers, promotions, news related to COSBAR’s products and services (lawful basis: EXPRESS CONSENT);
  6. f) Management of your application when you send us your CV and/or take part in COSBAR’s recruitment processes (lawful basis: EXPRESS CONSENT and IMPLEMENTATION OF PRE-CONTRACTUAL MEASURES);
  7. g) Management of your participation in prize draws, contests or promotions held by COSBAR, management of the prize and publishing the winner’s name and their city of residence in our social media accounts (lawful basis: EXPRESS CONSENT);
  8. h) Maintenance of updated suppression lists to avoid being contacted if you request it (lawful basis: CONTROLLER’S LEGAL OBLIGATION);
  9. i) Enabling the operation of our Website/applications through technical and functional cookies (lawful basis: PERFORMING SEGMENTATION AND/OR PROFILING FOR PROMOTIONAL OR ADVERTISING PURPOSES: EXPRESS CONSENT);
  10. j) Creation of anonymous statistics on the accessing habits and activities of users (lawful basis: LEGITIMATE INTEREST).
  11. k) Compliance with the Controller’s legal obligations (lawful basis: CONTROLLER’S LEGAL OBLIGATION).

You may revoke express consent at any time, without this affecting the lawfulness of any processing based on consent prior to its withdrawal.

MINORS UNDER THE AGE OF 14:

We hereby inform you that the use of available forms is limited to users over the age of 14, so, by using any of them, you warrant that you meet this requirement and accept the consequences that may arise if this is not the case. The forms made available to you may be filled out in the language you wish. Nevertheless, COSBAR will not be liable for any errors or being unable to deal with your request due to your choice of language. Filling out the forms, as well as any other questionnaire that may be provided in the future, is completely optional. However, the refusal to provide certain data may make it impossible for us to deal with your request.

USER’S RESPONSIBILITIES:

The user warrants that all data provided is true, accurate, complete, and up to date, and will be liable for any damage, whether direct or indirect, which may arise as a result of their failure to comply with this obligation. Should the data provided belong to a third party, the user warrants that they have duly informed the third party of the aspects contained herein and has obtained their authorization to provide COSBAR with their data for these purposes. They will be liable for any false or inaccurate information provided through the Website owned by COSBAR and any damage, whether direct or indirect, which may be caused to COSBAR or third parties.

AUTOMATED DECISION-MAKING:

We hereby inform you that your personal data will not be subject to automated decision-making. All of our company’s decision-making processes related to such processing are done by humans.

RECIPIENTS OF YOUR PERSONAL DATA:

Your data will not be transferred to third parties unless when legally obliged to do so. Your data may be disclosed to the relevant public authorities, the Spanish Tax Agency, banks and financial institutions.

In turn, your data may be disclosed to providers that must access it to fulfill the purposes mentioned above, with which COSBAR has signed data processing agreements required by data protection regulations.

INTERNATIONAL TRANSFERS:

Likewise, COSBAR may engage the services of providers located outside the European Economic Area where there are no regulations equivalent to the regulations in Europe. Nevertheless, COSBAR will make sure that the aforementioned services engaged meets the requirements set out in the data regulations in force, adopting the appropriate safeguards to ensure the privacy of your personal data to such transfers.

RETENTION PERIOD:

Your personal data will be kept for as long as your relationship with the Controller remains, and once this relationship has ended for whatever reason, for as long as you do not state otherwise and during the applicable statutory data retention periods. In this case, it will be processed for the sole purpose of demonstrating compliance with the Controller’s legal or contractual obligations. Once the statutory retention periods are over, your data will be deleted or, alternatively, anonymized.

RIGHTS OF DATA SUBJECTS:

COSBAR hereby informs you that you may exercise your rights to restrict processing, data portability, access, rectification, erasure, objection to processing and not to be subject to automated decision-making, including profiling, by writing to dpo@cosbargroup.com or the mailing address specified above.

Likewise, if you consider that the processing of your personal data infringes upon the data processing regulations in force, you may file a complaint with the competent supervisory authority, in this case the Spanish Data Protection Agency, through its website or mailing address.