Privacy Policy

RESPONSIBLE FOR PERSONAL DATA

Sensody, SL, CIF B-72498801 with address at calle Eros, 14, 7A, 28045 Madrid , hereinafter “Sensody”, owner of the Ath Skin brand and whose contact email is shop@athskin.com

________________________________________

DATA REQUESTED ON THE WEBSITE AND PURPOSE OF THE PROCESSING

• Name and email: to be able to make comments on the website's blog. • Name, surname, address, telephone number, email, tax identification number: this information will be requested at the time of payment for the service, for the purposes of processing everything related to the client. • Name and email for newsletter: with the express and voluntary consent of the data owner, the minimum information necessary to send an automated commercial newsletter will be requested on the website, which will inform about advertising, promotions and other product information. offered and blog updates. • Email: the email will be requested to access the customer area, according to the data provided at the time of creating the account. If the user is under 18 years of age, they must have the authorization of their parents or legal guardians to provide their personal data. Sensody has no way of effectively verifying the age of users, so it is exempt from any responsibility if the user does not comply with what is indicated here. Sensody will at all times ensure that the use of the website, the contents, and the processing of the user's personal data are carried out in the most correct way. To this end, the user may always exercise their rights of access, rectification, cancellation, portability, oblivion or opposition, all in faithful compliance with the guidelines of the laws that govern the matter, by writing to shop@athskin.com . At no time will Sensody share the data it has with third parties. If doing so to fulfill the services contracted by a participant, send the newsletter, comply with legal requirements or for the administration of the website, the appropriate confidentiality agreements will be provided between the parties. Links to third parties that can be found on the website have privacy policies outside of Sensody. Access to these sites must be the responsibility of the user, it being their responsibility to know them and their decision to accept them or not.

________________________________________

FORMS

The website has 3 types of forms: Advertising: users, buyers or participants will be asked for their express and voluntary consent to provide Sensody with the minimum data necessary to send advertising and commercial information related to the services and/or products offered. by the company, so that it is added to an automated email marketing file managed by the data processor indicated below. The processing of personal data found in this section has been done with the consent of the data owner. For comments on the blog: in order to avoid spam, inappropriate messages, and follow up correctly, the user will be asked for their name, email, and website to identify them in the comments they wish to make on the blog entries. This data will be visible to other users of the website. If you do not want the data to be visible to other people, you must contact Sensody through the email address shop@athskin.com. The website server will be responsible for the processing and it will be carried out with the consent of the owner of the data. the data. To process the service request: users, clients or participants will be asked for their data so that Sensody can process the services requested by the client. Legitimate processing of personal data will be carried out due to the contractual relationship that exists with the client or participant. The data will be saved on the website server. ________________________________________

TREATMENT RESPONSIBILITIES

Sensody needs the support of third parties to adequately offer its services and products, with which it enters into appropriate confidentiality agreements and verifies compliance with regulations on the protection of personal data. The data provided to these third parties may not be used for other purposes not authorized by the data owner. In compliance with the principles of information and transparency, it is made known that these third parties are: • Mailchimp: used to automate commercial information bulletins and send to the email of the data owner, advertising of the products and/or services offered on the website. Service provided by the company The Rocket Science Group LLC, located in the United States of America. It has a security agreement called Privacy Shield, in accordance with the requirements of the European Data Protection Committee, which can be consulted here. For more information about its privacy policy, you can visit https://mailchimp.com/legal/privacy/ • Zapier: It is a tool used to automate tasks. The company, Zapier Inc., is located at Zapier, Inc., 548 Market St. #62411, San Francisco, CA 94104 – 5401 and can be reached via email at contact@zapier.com. Its privacy policy can be seen at the link https://zapier.com/privacy/ • Gmail: is an email service, offered by the company Google LLC, located at 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. USA. Has subscribed to the EU-US Privacy Shield. and Swiss-US Privacy Shield, which can be consulted on this website. You can see more information about the privacy policy here at https://policies.google.com/privacy?hl=es • Google Drive: dedicated to storing a backup copy of files in the cloud and accessing them easily. Service offered by Google LLC, located at 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Subscribed to the EU-US Privacy Shield. and Swiss-US Privacy Shield, which you can consult on this website. You can see more information about the privacy policy by visiting https://policies.google.com/privacy?hl=esGoogle • Facebook pixel: analysis tool for advertising, used to know the actions of the data owners in this website. This service is provided by Facebook, Inc., which is located at 1601 Willow Road Menlo Park, CA 94025, United States of America. If you are outside the United States of America or Canada, the data controller responsible for the information is Facebook Ireland Ltd., which is located at 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland. It is certified to the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework, as can be seen at this link. For more information about the privacy policy, go to https://www.facebook.com/privacy/explanation • Google Analytics: Web analysis service, to view website usage statistics. This service is provided by the company Google LLC, located in Mountain View, California, United States of America, is a subscriber to the EU-US Privacy Shield. which can be consulted on this website. If you want more information about its privacy policy, you can consult: https://policies.google.com/privacy • PayPal (Europe) S.à rl et Cie, SCA: company used to manage payments by debit and credit card on the website. Located at 22-24 Boulevard Royal L-2449, Luxembourg. For more information you can visit this website. • Redsys: Virtual POS service offered by Banco Bilbao Vizcaya. Located in Madrid. • WhatsApp: Tool used for communication with users, buyers, clients and participants through the company WhatsApp Ireland Limited (for those located in Europe), it can be contacted through the link and its privacy policy can be seen at this website. • Facebook: Tool used as a social network and for the purpose of connecting with users, clients, buyers and participants, the service is provided by the company Facebook Ireland Ltd. (they do not live in the United States of America or Canada) can be contacted at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland and its privacy policy can be seen https://www.facebook.com/privacy/explanation • CDMON: Provides web hosting service. In specific cases, Sensody may use applications or tools that have not been included or named in this list, the above being a better option that contributes to the performance of a certain task; If this happens, Sensody will notify its users, clients or participants of this situation, as the case may be. ________________________________________

POLICIES RELATED TO THE NEWSLETTER

These policies will be understood at all times as a complementary part of the terms and conditions set out on the website, both being of equal application at the time of a dispute. The privacy and intellectual property policy applied will be the same as that set out in the terms and conditions of the website. A “newsletter” will be understood as the digital newsletter that Sensody produces periodically and that it sends to its subscribers through an external email service provider, to which the user has voluntarily subscribed. Sensody is not under any obligation to send the newsletter in defined periods of time, so you are completely free to do so whenever you deem appropriate. The user may at any time exercise their rights of access, rectification, cancellation or opposition by following the instructions found in the footer of the newsletter. The user must not share their content with third parties, as this would violate Sensody's copyright. The only possible distribution channel is the one managed and/or authorized by Sensody. Sensody will not be responsible for the content of third parties exposed in the newsletter, any controversy that arises must be dealt with directly with the person or company mentioned. All material displayed in the newsletter is protected by copyright in favor of Sensody, and in the case of belonging to third parties, it will be understood that Sensody has due authorization to use it as agreed with the author.

________________________________________

TREATMENT DURATION

In the case of personal data provided for billing and purchase of products or services, they will be kept for the legally applicable time. In the case of personal data provided for electronic commercial newsletters and comments on the blog, it will be for as long as the data owner wishes to remain on the subscription list, so they can unsubscribe at any time they wish. , automatically as indicated in each newsletter, or by writing to shop@athskin.com