Privacy Policy

I. PRIVACY AND DATA PROTECTION POLICY

In compliance with current legislation, The Cosmetic Republic (hereinafter, the Website) undertakes to adopt the necessary technical and organizational measures, according to the appropriate level of security for the risk of the data collected.

This Privacy Policy is adapted to Spanish and European regulations on the protection of personal data on the internet, and in particular complies with the following:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
  
• Spanish Organic Law 3/2018 of December 5 on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).
  
• Royal Decree 1720/2007 of December 21 approving the Regulation of Organic Law 15/1999 on the Protection of Personal Data (RDLOPD).
  
• Law 34/2002 of July 11 on Information Society Services and Electronic Commerce (LSSI-CE).
  

The data controller for personal data collected through this website is:

The Cosmetic Republic S.L.

📍 Calle Méndez Núñez 3, 08003 Barcelona, Spain

📞 (+34) 935 54 37 14

📧 info@thecosmeticrepublic.com

NIF: B64820392

Data Collection and Processing

Personal data collected through forms on this website will be incorporated into files managed by The Cosmetic Republic, in order to facilitate, expedite and fulfill commitments established between The Cosmetic Republic and the User, maintain the relationship reflected in such forms, or respond to requests and inquiries.

A record of processing activities is maintained in compliance with GDPR, detailing the purposes, categories of data, and other relevant circumstances.

Data processing will always respect the principles established in GDPR Article 5 and Spanish Organic Law 3/2018, including:

• Lawfulness, fairness, and transparency
  
• Purpose limitation
  
• Data minimization
  
• Accuracy and updating
  
• Storage limitation
  
• Integrity and confidentiality
  
• Accountability
  

Only identification data is collected. No special categories of data (sensitive data) are processed.

The legal basis is the User’s consent, which must be explicit and verifiable. Consent may be withdrawn at any time, and withdrawing consent will not affect the lawful use of the Website.

Data is collected to:

• Facilitate, expedite, and fulfill commitments between The Cosmetic Republic and the User.
  
• Maintain relationships established via forms.
  
• Respond to requests or inquiries.
  
• For commercial, operational, and statistical purposes.
  
• For personalization and marketing studies to improve the website and services.
  

Users will always be informed about the specific purposes of data collection at the time of providing their personal data.

Data will only be retained for the minimum time necessary to fulfill processing purposes, or until the User requests its deletion.

User data may be shared with:

• Service providers required to fulfill our contractual or legal obligations.
  
• International data transfers will only occur if adequate safeguards are in place, and the User will be informed accordingly.
  

Only Users over the age of 14 may lawfully give consent for data processing. For children under 14, parental or guardian consent is required.

The Cosmetic Republic guarantees appropriate technical and organizational measures to protect personal data.

This website uses SSL encryption to ensure secure data transmission. However, absolute security against unauthorized access cannot be guaranteed. In case of a data breach likely to affect rights and freedoms, Users will be notified without undue delay.

Confidentiality

All personal data will be treated as confidential by The Cosmetic Republic and by any employees or partners who may have access to it.

In accordance with GDPR, Users may exercise the following rights:

• Right of Access – Confirm if data is being processed and obtain related information.
  
• Right of Rectification – Correct inaccurate or incomplete data.
  
• Right to Erasure ("Right to be Forgotten") – Request deletion of data under certain conditions.
  
• 
  Right to Restriction of Processing – Limit processing in certain cases.
  
• Right to Data Portability – Receive personal data in a structured, commonly used, machine-readable format.
  
• Right to Object – Oppose data processing.
  
• Right not to be subject to automated decision-making, including profiling.
  

To exercise these rights, Users must send a written request including identification details (name, surname, and valid ID copy) and specific reasons to:

📍 Calle Méndez Núñez 3, 08003 Barcelona, Spain

📧 info@thecosmeticrepublic.com

The Website may include links to third-party websites with their own privacy policies. The Cosmetic Republic is not responsible for third-party data protection practices.

If a User believes their data rights are being infringed, they may lodge a complaint with the relevant supervisory authority. In Spain, this is the Spanish Data Protection Agency (AEPD): https://www.aepd.es.

By using this Website, the User accepts this Privacy Policy and agrees to the processing of their data for the stated purposes.

The Cosmetic Republic reserves the right to update this Privacy Policy at any time due to legal, jurisprudential, or regulatory changes. Updates will not always be explicitly communicated, so Users are encouraged to check this page periodically.

This Privacy Policy was last updated in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018.