Privacy policy

DATA CONTROLLER: COSMÉTICA COSBAR, S.L., (hereinafter, “COSBAR”), holding Tax Identification Number (NIF): B08207615, and registered address at 15 Vall d’Aran street, 08820 El Prat de Llobregat (Barcelona, Spain) and contact details: dpo@cosbargroup.com / 93.478.48.00.


DATA PROTECTION OFFICER: COSBAR has appointed a Data Protection Officer who can be contacted at: dpo@cosbargroup.com.


PURPOSE OF DATA PROCESSING: a) Management of queries and web requests; b) Management of potential clients and contacts of COSBAR; c) Management and maintenance of the relationship with clients as well as to carry out the services contracted by the client and adapt commercial offers launched by COSBAR to the specific characteristics of the clients, issuance of invoices, accounting, etc.; d) Management of COSBAR’s products and services; e) Sending newsletters, commercial and informative communications that may be of your interest, sending electronic newsletters with news related to COSBAR’s products and services; f) Manage your application when you submit your CV and/or participate in COSBAR’s recruitment processes; g) Manage your participation in sweepstakes, contests or promotions organised by COSBAR, as well as to handle the prize and publication of the winner’s name; h) Maintain up-to-date suppression lists to avoid being contacted if so requested; i) To enable the functioning of our website/Apps through technical and functionality cookies, segmenting and/or profiling for promotional or advertising purposes, etc.; j) To carry out anonymous statistics on the USER's access habits and activity when accessing the website; k) Compliance with COSBAR legal obligations. 


LAWFULNESS: contractual performance, application of pre-contractual measures, express consent, legitimate interest and legal obligation.


RECIPIENTS: no data will be transferred to third parties unless compelled by law. 


EXERCISE OF RIGHTS: to exercise the rights of restriction of processing, data portability, access, rectification, deletion and object to the processing at dpo@cosbargroup.com.


Under the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April, 2016 (hereinafter, “GDPR”) concerning the protection of natural persons with regard to the processing of personal data and to the free circulation of such data, COSMÉTICA COSBAR, S.L. informs you as DATA CONTROLLER that all personal data you provide us through <montibello.com> will be incorporated into a data file maintained under strict security and confidentiality measures, and will remain stored while we handle your requests or queries, while there is a current service relationship or until you tell us otherwise.


DATA CONTROLLER: COSMÉTICA COSBAR, S.L., (hereinafter, “COSBAR”), holding Tax Identification Number (NIF): B08207615, and registered address at 15 Vall d’Aran street, 08820 El Prat de Llobregat (Barcelona, Spain) and contact details: dpo@cosbargroup.com is the Data Controller of your personal data. For any question related to this Privacy Policy, you may contact COSBAR at the postal address indicated above or via the e-mail address dpo@cosbargroup.com.


DATA PROTECTION OFFICER: COSBAR has appointed a Data Protection Officer (DPO) to resolve any queries, complaints or suggestions regarding the processing and recording of processing operations. You can contact the DPO assigned to you at the following address: dpo@cosbargroup.com.


CATEGORIES OF PERSONAL DATA AND PERSONAL DATA SOURCES:


COSBAR shall process your personal data as follows:


- Data provided by the User: it refers to the personal data that the User provides us voluntarily, now or in the future, through this Website, either using the contact form, corporate email provided or, where appropriate, through the enabled registrations. In this case, the category of data processed by the DATA CONTROLLER corresponds to: 



  • Identification data such as name, surname, etc.,

  • Email address, postal address, etc.,

  • Commercial and economic information, etc.,

  • Data contained in the message of the User.


- Data collected by cookies and/or similar technologies: data stored as a result of your browsing on our website. You can find more information on the categories of data processed and their typology:


https://hair.montibello.com/politica-de-cookies/?load


Unless otherwise informed, we will assume that the data provided has not been modified, that you undertake to notify us of any change and that we have your consent to use your data for the aforesaid purposes.


The forms may be completed in the language of your choice. However, the DATA CONTROLLER is not responsible for errors or the impossibility of dealing with your request when using inappropriate language. Said completion of the forms, as any other questionnaire that may be provided in the future, is optional but the refusal to provide some data may make it impossible to process your request. 


PURPOSES AND LAWFULNESS OF PROCESSING:


The purposes and lawfulness of the data processing and the operations related to such processing carried out by the DATA CONTROLLER are exclusively those described below:


a) Management of queries and web requests (lawful basis: CONTRACTUAL PERFORMANCE). 


b) Management of potential clients and contacts of COSBAR (lawful basis: APPLICATION OF PRE-CONTRACTUAL MEASURES).


c) Management and maintenance of the relationship with clients, carrying out the services contracted by the client, adapting COSBAR’s commercial offers to the particular characteristics of the client, issuing invoices, performing accounting, etc. (lawful basis: CONTRACTUAL PERFORMANCE).


d) Marketing of COSBAR’s products and services (lawful basis: LEGITIMATE INTEREST).


e) Sending newsletters, commercial and informative communications of interest to you, sending communications with news related to COSBAR’s products and services, information about events and webinars organized by COSBAR (lawful basis: EXPRESS CONSENT).


f) Management of your application when you submit your CV and/or participate in COSBAR’s recruitment processes (lawful basis: EXPRESS CONSENT and APPLICATION OF PRE-CONTRACTUAL MEASURES).


g) Manage your participation in sweepstakes, contests or promotions organised by COSBAR, as well as to handle the prize and publication of the winner’s name (lawful basis: EXPRESS CONSENT).


h) Maintain up-to-date suppression lists to avoid being contacted if so requested (lawful basis: LEGAL OBLIGATION OF THE DATA CONTROLLER).


i) To enable the functioning of our website through cookies (lawful basis: EXPRESS CONSENT).


j) To carry out anonymous statistics on the User’s access habits and the activity performed when accessing <montibello.com> (lawful basis: LAWFUL INTEREST).


k) Compliance with the DATA CONTROLLER’s legal obligations (lawful basis: LEGAL OBLIGATION OF THE DATA CONTROLLER).


You may revoke your consent at any time. However, such revocation will not affect the lawfulness of the processing based on the consent given prior to its REVOCATION.


UNDER FOURTEEN YEARS OLD:


We inform you that the use of the forms available on <montibello.com is limited to Users over 14 years of age, so by using any of them, you guarantee that you meet this requirement and accept the consequences that may arise if this is not the case.


RESPONSIBILITIES OF THE USER:


The User declares that all the data provided is truthful, exact, complete and up to date, being responsible for any damage or harm, direct or indirect, that may be caused as a consequence of the non-fulfilment of this obligation. If the data provided belongs to third parties, the User guarantees that he/she has informed the said third parties of the aspects contained in this document and obtained their authorization to provide their data to COSBAR for the mentioned purposes. The User will be responsible for any false or inaccurate information provided through the website owned by COSBAR and for any damages, direct or indirect, that this may cause to COSBAR or third parties.


AUTOMATED DECISION MAKING:


We inform you that your personal data is not subject to automated decision-making. All our processes related to decision-making are carried out with human involvement.


RECIPIENTS OF YOUR PERSONAL DATA


No data will be transferred to third parties unless compelled by law. Your personal data may be communicated to the competent Public Authorities, Tax Administration, banks and financial institutions, and other entities of the Business Group to which COSBAR belongs for internal administrative and management purposes.


Likewise, your personal data may be communicated to suppliers who need access to your data for the aforesaid purposes with which COSBAR has signed contracts required by the Data Protection regulations.


INTERNATIONAL DATA TRANSFERS:


Likewise, COSBAR may hire services from suppliers located outside the European Economic Area that do not have equivalent legislation to the European one. However, COSBAR undertakes to ensure that the hiring of the mentioned services complies with the requirements established by the current Data Protection regulations, applying to those transfers the necessary guarantees and safeguards to preserve the privacy of your data.


DATA RETENTION PERIOD:


Your personal data shall be stored while you maintain your relationship with the DATA CONTROLLER and, even after the termination, for any reason, of such relationship if you do not inform us otherwise and during the statute of limitations applicable. In this case, your data will be processed to prove compliance with the legal or contractual obligations of the DATA CONTROLLER. When the statutory period expires, your data shall be delated or anonymized.


RIGHTS OF DATA SUBJECTS:


COSBAR informs you that you can exercise your right to limit the processing, to data portability, access, rectification, deletion and not to be subject to automated individual decisions, including profiling, by sending an email at dpo@cosbargroup.com or to the postal addresses aforementioned. 


Likewise, if you consider that the processing of your data violates the Personal Data regulations in force, you may file a complaint with the Supervisory Authority, in this case, with the Spanish Data Protection Agency via its website or postal address.

Subscribe to our Newsletter

Be the first to learn about new launches, news from our blog and much more!