PRIVACY POLICY

www.dermedics.es

1. DATA CONTROLLER & SCOPE

In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR) and applicable national data protection legislation, the data controller for personal information collected on www.dermedics.es is:

  • Entity Name: Beauty Care Systems EOOD
  • Registered Address: 5 Lyuben Karavelov str., Blagoevgrad, 2700, Bulgaria
  • Contact Email: spain@dermedics.com

Beauty Care Systems EOOD is a legal entity registered and domiciled in Bulgaria. This policy applies to personal data collected across our website operations servicing both B2B professional accounts and B2C end consumers in Spain, Portugal, and the European Union.

2. PERSONAL DATA WE COLLECT

We process personal data provided directly by users or collected automatically during store interactions:

  • Account & B2B Registration Data: Full name, professional credentials, clinic/business name, tax identification number (VAT/NIF/CIF), contact email, phone number, and account passwords.
  • Transactional & Order Data: Billing address, shipping address, order history, payment status, and invoicing details. (Note: Financial payment credentials are processed securely by PCI-compliant payment gateways and are not stored directly on our servers.)
  • Communication Data: Inquiries, customer support messages, warranty claims, or contact form submissions.
  • Technical & Browsing Data: IP addresses, browser type, device identifiers, session cookies, and interaction metrics processed via Shopify and analytical tools.

3. PURPOSES & LEGAL BASIS FOR PROCESSING

We process your data under the following legal grounds pursuant to GDPR Article 6:

  • Contract Execution (Art. 6.1.b): To process orders, manage B2B account verification, execute shipments, issue invoices, and deliver customer support.
  • Legal Obligation (Art. 6.1.c): To fulfill accounting, tax, statutory warranty, and EU cosmetics safety reporting obligations.
  • Legitimate Interest (Art. 6.1.f): To secure the platform against fraud, prevent unauthorized access to professional wholesale areas, and optimize store operational performance.
  • Consent (Art. 6.1.a): To send commercial newsletters or deploy non-essential analytics and marketing cookies. You may withdraw consent at any time.

4. DATA SHARING & RECIPIENTS

Your personal data is shared only with trusted third parties strictly necessary to deliver our services:

  • E-Commerce Platform & Hosting: Shopify International Ltd., which hosts our store infrastructure and manages order processing databases under standard contractual clauses (SCCs).
  • Logistics & Fulfillment Partners: Third-party fulfillment hubs, warehouse distribution facilities, and courier networks (e.g., DHL, SEUR, CTT) responsible for delivering orders in Spain, Portugal, and the EU.
  • Payment Gateways: External payment processors (e.g., Stripe, PayPal, Klarna) managing secure transaction clearing.
  • Customer Service Support: Contracted local customer care agencies providing assistance in native languages for Spain and Portugal.

5. DATA RETENTION

Personal data associated with transactions and accounting is retained for the mandatory statutory period required under applicable Bulgarian and EU tax laws (typically up to 10 years). User accounts and contact information remain active until an explicit erasure request is received, provided no overriding statutory retention duty exists.

6. YOUR RIGHTS UNDER GDPR

As a data subject, you hold the following rights regarding your personal data:

  • Access & Rectification: Request a copy of your personal records or correct inaccuracies.
  • Erasure ("Right to be Forgotten"): Request the deletion of your personal data where retention is no longer legally mandated.
  • Restriction & Objection: Object to specific processing activities or request restriction of data handling.
  • Data Portability: Obtain a structured, commonly used export of your provided personal information.

To exercise any of these rights, please contact us at spain@dermedics.com. You also maintain the right to lodge a complaint with a competent supervisory authority in the EU.

7. CONTACT INFORMATION

For inquiries regarding privacy, data handling, or exercising your rights, reach out to us at:

Data Protection Contact: spain@dermedics.com
Beauty Care Systems EOOD, 5 Lyuben Karavelov str., Blagoevgrad, 2700, Bulgaria.