Privacy Policy

1.- OUR COMMITMENT TO PRIVACY

2.-WHO ARE WE? WHO IS OUR DATA PROTECTION REPRESENTATIVE?

3.- PERSONAL DATA

4.- COLLECTION OF PERSONAL DATA AND PURPOSES OF PROCESSING

5.- PROFILING

6.- WHO CAN ACCESS YOUR PERSONAL DATA?

7.- INTERNATIONAL TRANSFERS

8.- HOW LONG DO WE KEEP YOUR PERSONAL DATA?

9.- IS MY PERSONAL DATA STORED SECURELY?

10.- LINKS TO THIRD PARTY SITES AND SOCIAL LOGIN

11.- SOCIAL MEDIA AND USER-GENERATED CONTENT

12.- YOUR RIGHTS AND OPTIONS

13.- CONTACT

1.- OUR COMMITMENT TO PRIVACY

VMV Cosmetic Group considers the protection of your personal data an aspect of vital importance, so, clearly and simply, with the utmost honesty and transparency, we have developed this privacy policy in which we will inform you of how we collect and process your data.

This Privacy Policy sets out the basis on which VMV Cosmetic Group treats your personal data when you provide them during your experience through any of the following websites and / or mobile applications (hereinafter "Webs"):

VMV COSMETIC GROUP WEB PAGES

www.aleacosmetic.com www.azaleacolortotal.com www.azaleacosmetics.com www.azaleacosmetics.com www.cosmeticsmysalon.com www.cosmeticsmysalon.com www.crioxidil.com www.extensionesmarvi.com www.fundacionvmvcosmeticgroup.org www.fundacionvmvcosmeticgroup.org www.salerm.com

www.salermacademy.com www.salermproline.com www.vmvcosmeticgroup.com www.vmvcosmeticgroup.com www.vmveshop.com www.vmveshop.com www.aerosoliberica.com www.homme.salerm.com www.homme.salerm.com www.lendan.com www.lendan.com

We would like to remind you that every time that when using any of our Websites you provide us with or it is necessary for us to access any type of information that due to its characteristics allows us to identify you, such as your name and surname, e-mail, billing or delivery addresses, telephone number, type of device or debit or credit card number, etc. (hereinafter, "Personal Data"), whether to browse the Website, purchase our products or make use of its services or functionalities, you will be subject to the application of this Privacy Policy, together with the Terms of Use of the Website, and other documents referenced therein in force from time to time. This Privacy Policy and our Terms of Use may be modified at any time. Remember that it is your responsibility to read them periodically, as those in force at the time of use of any of the Webs will be applicable.

Remember that in the field of distance selling, it is mandatory to provide certain personal information, as this information is necessary both to process and deliver your orders and to prepare the invoices. If you do not wish to provide your personal details, please remember that we will not be able to complete the sale and purchase of your order.

Our commitment to privacy is always based on the following principles:

WE RESPECT YOUR PRIVACY, CHOICES AND DECISIONS.

WE ENSURE THAT PRIVACY AND SECURITY ARE BUILT INTO EVERYTHING WE DO.

WE WILL NOT SEND YOU MARKETING AND COMMUNICATION COMMUNICATIONS UNLESS YOU EXPRESSLY REQUEST US TO DO SO, AND YOU CAN CHANGE YOUR MIND AT ANY TIME.

WE WILL NEVER OFFER OR SELL YOUR DATA.

WE ARE COMMITTED TO KEEPING YOUR DATA SAFE AND SECURE AND THEREFORE WE ARE COMMITTED TO WORKING WITH TRUSTED PARTNERS WHO APPLY STRICT DATA PROTECTION POLICIES.

WE ARE COMMITTED TO BEING OPEN, HONEST AND TRANSPARENT ABOUT HOW WE USE YOUR DATA IN A CLEAR AND SIMPLE WAY.

WE WILL ONLY USE YOUR DATA FOR THE PURPOSE FOR WHICH WE HAVE COLLECTED IT AND OF WHICH WE HAVE PREVIOUSLY INFORMED YOU.

WE RESPECT YOUR RIGHTS AND WILL ALWAYS TRY TO ACCOMMODATE YOUR REQUESTS, AS FAR AS POSSIBLE, IN ACCORDANCE WITH OUR OWN LEGAL AND OPERATIONAL RESPONSIBILITIES.

Below we would like to tell you what personal data we may collect or hold about you, how we may use it, who we may share it with, how we protect it, and how you can exercise your rights in relation to it.

When you share your Personal Data with us or when we collect Personal Data about you, we use it in accordance with this Privacy Policy ("Policy").

Please read this information carefully. Si tiene alguna pregunta o inquietud sobre tus datos personales, puedes contactar siempre que lo necesites con nosotros enviándonos un correo a protecciondatos@grupovmv.com.

2.-WHO ARE WE? WHO IS OUR DATA PROTECTION REPRESENTATIVE?

VMV Cosmetic Group está compuesto por un conjunto de sociedades, entre las cuales se encuentra su matriz Holpindus, SL, con cif B61416798 y domicilio en el término municipal de Llissá de Vall, 08185 Barcelona, España, en el P.I. Cantallops, Calle Garraf, nº 4, which is the parent, head company and data controller for the purposes of data protection legislation.

Our Data Protection Officer at VMV Cosmetic GroupVMV Cosmetic Groupis:

Oscar Clavell

Plaza Víctor Martínez s/n

Llissá de Vall

08185 Barcelona

Spain

E-mail contact:protecciondatos@grupovmv.com

You can consult all the companies that are part of the VMV Cosmetic Group by clicking here.

3.-PERSONAL DATA

Personal Data is any information that can identify you directly (e.g. your first and/or last name) or indirectly (e.g. your ID number). Personal Data includes information such as email / home address / mobile phone, user names, profile pictures, personal preferences and shopping habits, user-generated content and financial information and social welfare information, among others. It may also include unique numeric identifiers such as the IP address of your computer or the MAC address of your mobile device, as well as certain information obtained through cookies.

E-MAIL

HOME ADDRESSES

MOBILE PHONE

USERNAMES AND PROFILE PICTURES

PERSONAL PREFERENCES AND PURCHASING HABITS

USER-GENERATED CONTENT

FINANCIAL INFORMATION AND SOCIAL ASSISTANCE INFORMATION

It may also include unique numeric identifiers such as the IP address of your computer or the MAC address of your mobile device, as well as certain information obtained through cookies.

This Policy covers all personal data collected and used by VMV Cosmetic Group.

4.- COLLECTION OF PERSONAL DATA AND PURPOSES OF PROCESSING

Remember that before you start using any of our services or functionalities you should read this Policy, as well as the Terms of Use of the specific section on that service and/or functionality. In that section you will be able to see if there are any particular conditions for its use, or if a specific treatment of your Personal Data is required. Failure to provide certain information marked as mandatory may mean that it is not possible to manage your registration as a user or the use of certain features or services available through the Webs.

Please remember that you must always ensure that the Personal Data provided is true and accurate and that you undertake to notify us of any changes or modifications to it.

Any loss or damage caused to the Websites, the Data Controllers or any third party through the communication of erroneous, inaccurate or incomplete information in the registration forms will be your responsibility.

4.1. What data do we collect from you?

VMV Cosmetic Group cree que vosotros, nuestros clientes, sois el verdadero corazón de lo que hacemos. Nos encanta conoceros, aprender de vosotros y crear y entregaros productos que podáis disfrutar, por lo que constantemente estamos hablando e interactuando con vosotros. Por eso, son muchas y variadas las maneras en que podemos recabar tus datos.

Thus, we may collect or receive your data through our websites, forms, apps, devices, products and/or brand pages on social media. In some cases, you provide Personal Data directly to us (for example, when you create an account, when you contact us, when you shop on our websites/apps or in our stores/beauty salon) and, in other cases, we collect it (for example, by using cookies to see how you interact with us). We also sometimes receive your data from other third parties.

To make it easier and clearer for you, here is a table in which you can identify in a concise, transparent and easily accessible way:

1) For what purposes may we use your Personal Data? In this column we explain what we may do with your Personal Data and the purposes for collecting it.

2) What is the legal basis for using your Personal Data? In this column we explain why we may use your Personal Data.

3) What Personal Data may we hold about you? In this column we explain what types of Personal Data we may collect about you depending on the scenario we are in.

4) In which scenario may your Personal Data be collected? In this column we explain what activity or scenario you are in when we use or collect your Personal Data.

5) Who can have access to your Personal Data? In this column we explain which third parties have access to personal data.

The legal basis for the processing of your Personal Data, depending on the scenario in which it is collected, may be:

(i) To compile statistics to help us better understand your needs and expectations and, therefore, to improve our services, websites/applications/devices, products and brands.

(ii) To enable the operation of our website/applications through technical and functional cookies that allow us to keep our tools (websites/applications/devices) safe and secure and to ensure that they work properly.

(iii) Profiling and statistics for the personalised sending of commercial communications.

(iv) To provide you with our customer service.

(v) The performance of a contract: to perform the services you request from us.

(vi) Compliance with legal obligations involving the processing of your personal data.

When we collect your Personal Data, we always indicate the fields that are mandatory by means of asterisks. The data we ask you for is necessary for, as the case may be:

(i) to perform our contract with you (for example, to deliver the products you have purchased on our Websites to the address you have indicated to us);

(ii) To provide you with the service you have requested from us (for example, to provide you with a newsletter);

(iii) Comply with legal requirements (e.g. to make the invoice).

SENDING COMMERCIAL AND PROMOTIONAL COMMUNICATIONS

FOR WHAT PURPOSES MAY WE USE YOUR PERSONAL DATA?

WHAT IS THE PURPOSE OF THE PROCESSING?

WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?

WHAT PERSONAL DATA CAN WE HAVE ABOUT YOU?

IN WHAT SCENARIOS CAN YOUR PERSONAL DATA BE COLLECTED?

WHO CAN HAVE ACCESS TO YOUR PERSONAL DATA?

Sending of commercial and promotional communications including:

(i) Sending marketing and communication communications.

(ii) Invitations to events.

(iii) Sending product samples.

(iv) Promotion of our products

(v) Offer personalised services based on their beauty features;

Your Consent

(i) First name and surname

(ii) Gender

(iii) E-mail address

(iv) Postal address

(v) Telephone number

(vi) Photo

(vii) Date of birth or age range

(viii) ID, user name and password

(ix) Personal description or preferences

(x) Order details

(xi) Social media profile

(xii) Other information you share with us, such as photos or reviews, skin or hair type, questions from our social media profiles, websites and/or apps, available on some websites/apps or by participating in a competition, game or survey).

(i) Account Creation and Management

(ii) Subscription form for newsletters or news bulletins

(iii) Registering or subscribing to games, promotions, offers, surveys...

(iv) When ordering and/or placing an order through any of our sales channels.

(v) From the Hair Studio Center hairdressing salon.

(vi) From the Salerm Academy Technical Center.

(vii) From the contact form on the website or from comments posted on our blogs and social networks.

(i) Your personal data may be disclosed to companies that are part of the VMV Cosmetic Group, which are clearly and simply identified in the second section of this policy (Who we are); and (ii) to third party service providers that help us provide IT services, such as platform providers, hosting services, maintenance and support in our databases, as well as in our software and applications that may contain data about you.

(iii) Third parties that help us provide digital and e-commerce services such as social listening, shop locator, loyalty programmes, identity management, ratings and reviews, CRM, web analytics and search engine.

MANAGEMENT OF OUR CONTRACTUAL RELATIONSHIP WITH YOU

FOR WHAT PURPOSES MAY WE USE YOUR PERSONAL DATA?

WHAT IS THE PURPOSE OF THE PROCESSING?

WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?

WHAT PERSONAL DATA CAN WE HAVE ABOUT YOU?

IN WHAT SCENARIOS CAN YOUR PERSONAL DATA BE COLLECTED?

WHO CAN HAVE ACCESS TO YOUR PERSONAL DATA?

(i) Management of your orders.

(ii) Shipment of orders to the address you have indicated.

(iii) Respond to your questions and interact with you.

(iv) Contact you to indicate the steps to follow to finalise the order when the shopping cart has been saved without finalising the payment process.

(v) Inform you of the availability of a product.

(vi) Process and track your orders.

(vii) Manage the payment of your orders.

(viii) Loyalty programmes of theVMV Cosmetic Group.

(ix) Handle any incident related to a purchase.

(x) Measure your satisfaction with the entire purchasing process.

(xi) Administer your participation in contests, games and surveys.

(xii) Publish your criticisms and/or comments.

(xiii) Provide you with the requested service (for example, testing our products).

(xiv) Show you your nearest shop

Fulfilment of the contractual relationship: maintenance, fulfilment, development, control and execution of the contractual relationship established with you.

(i) First name and surname

(ii) Gender

(iii) E-mail address

(iv) Postal address

(v) Telephone number

(vi) Photo

(vii) Date of birth or age range

(viii) ID, user name and password.

(ix) Personal description or preferences

(x) Order details

(xi) Location/

Geolocation

(xii) Other information you share with us, such as skin and/or hair type, etc.(xiii) Transaction information, including products purchased.

(xiv) History of your purchases.

(xv) The information requested in the payment gateway (credit card number, pay pal information,...). The payment information is not collected by us, but by the payment service provider.

(xvi) Academic history, financial data for the award of study grants.

(i) Account Creation and Management

(ii) Subscription form for newsletters or news bulletins

(iii) Registration or subscription to games, contests, promotions, offers, surveys, etc.

(iv) When requesting and/or ordering an order/service through any of our sales channels.

(v) Registration for our courses, conferences, seminars, galas and other organised events.

(i) Your personal data may be disclosed to companies that are part of the VMV Cosmetic Group, which are clearly and simply identified in the second section of this policy (Who we are); and (ii) to third party service providers that help us provide IT services, such as platform providers, hosting services, maintenance and support in our databases, as well as in our software and applications that may contain data about you.

(iii) Third parties that help us provide digital and e-commerce services such as social listening, shop locator, loyalty programmes, identity management, ratings and reviews, CRM, web analytics and search engine.

PROFILING AND STATISTICS

FOR WHAT PURPOSES MAY WE USE YOUR PERSONAL DATA?

WHAT IS THE PURPOSE OF THE PROCESSING?

WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?

WHAT PERSONAL DATA CAN WE HAVE ABOUT YOU?

IN WHAT SCENARIOS CAN YOUR PERSONAL DATA BE COLLECTED?

WHO CAN HAVE ACCESS TO YOUR PERSONAL DATA?

(i) To improve our websites/applications.

(ii) Enrich your profile if you make a purchase using your account information.

(iii) For monitoring and improving our applications and devices.

(iv) Analyse your wellness characteristics and recommend appropriate products (including tailor-made products) and routines to follow.

(v) Production of reports and statistics.

(vi) To know how users react to our advertising campaigns.

(vii) To improve our offers.

(viii) To find out how you discovered our websites/applications.

To ensure that our websites/applications remain secure, to help us better understand your needs and expectations and thereby improve our services, products and brands. Also, to help us better understand our customers' needs and expectations and therefore improve our services, products and brands.

(i) First name and surname

(ii) Gender

(iii) E-mail address and telephone number.

(iv) Postal address

(v) Telephone number

(vi) Photo

(vii) Date of birth or age range

(viii) ID, user name and password

(ix) Personal description or preferences

(x) Order details

(xi) Location/ Geolocation

(xii) Personal description or other information you share with us, such as skin and/or hair type, etc.

(xiii) Transaction information, including products purchased.

(xiv) History of your purchases.

(i) Account Creation and Management

(ii) Subscription form for newsletters or news bulletins

(iii) Registration or subscription to games, contests, promotions, offers, surveys, etc.

(iv) When ordering and/or placing an order through any of our sales channels.

(i) Your personal data may be disclosed to companies that are part of the VMV Cosmetic Group, which are clearly and simply identified in the second section of this policy (Who we are); and (ii) to third party service providers that help us provide IT services, such as platform providers, hosting services, maintenance and support in our databases, as well as in our software and applications that may contain data about you.

(iii) Third parties that help us provide digital and e-commerce services such as social listening, shop locator, loyalty programmes, identity management, ratings and reviews, CRM, web analytics and search engine.

MAINTENANCE OF UP-TO-DATE SUPPRESSION LISTS

FOR WHAT PURPOSES MAY WE USE YOUR PERSONAL DATA?

WHAT IS THE PURPOSE OF THE PROCESSING?

WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?

WHAT PERSONAL DATA CAN WE HAVE ABOUT YOU?

IN WHAT SCENARIOS CAN YOUR PERSONAL DATA BE COLLECTED?

WHO CAN HAVE ACCESS TO YOUR PERSONAL DATA?

Maintenance of up-to-date suppression lists to avoid being contacted if you request it.

The GDPR enables us to keep your details on a suppression list if you have asked us not to send you any further marketing communications.

(i) First name and surname

(ii) E-mail address

(iii) Social media profile (when you use social login or share this personal information with us).

Subscription to newsletters and commercial communications.

(i) Your personal data may be disclosed to companies that are part of the VMV Cosmetic Group, which are clearly and simply identified in the second section of this policy (Who we are); and (ii) to third party service providers that help us provide IT services, such as platform providers, hosting services, maintenance and support in our databases, as well as in our software and applications that may contain data about you.

(iii) Third parties that help us provide digital and e-commerce services such as social listening, shop locator, loyalty programmes, identity management, ratings and reviews, CRM, web analytics and search engine.

ENABLE THE OPERATION OF OUR WEBSITE/APPLICATIONS THROUGH TECHNICAL AND FUNCTIONAL COOKIES

FOR WHAT PURPOSES MAY WE USE YOUR PERSONAL DATA?

WHAT IS THE PURPOSE OF THE PROCESSING?

WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?

WHAT PERSONAL DATA CAN WE HAVE ABOUT YOU?

IN WHAT SCENARIOS CAN YOUR PERSONAL DATA BE COLLECTED?

WHO CAN HAVE ACCESS TO YOUR PERSONAL DATA?

(i) Visualización adecuada del contenido.

(ii) Creating and remembering your login.

(iii) Customisation of the interface, such as language

(iv) Improving our websites/applications.

(v) Ensure that the website or application is safe and secure.

(vi) Prevent visitors' data from being saved twice.

(vii) Enable sharing of our content on social networks (share buttons to display the site);

(viii) Analyse your wellness characteristics and recommend appropriate products (including tailor-made products) and routines to follow.

To ensure that we provide you with websites/applications, which function correctly, securely and continuously improve your perception.

(i) Data related to the use of applications or websites.

(ii) Data related to the website from which you came.

(iii) Registration details.

(iv) Pages and videos you have visited.

(v) Advertisements you click on.

(vi) Products you are looking for.

(vii) Location

(viii) Duration of your visit

(ix) Products you have selected to create your basket.

(x) IP address

(xi) Browser information

(xii) Device information

(xiii) Unique identifier for each visitor.

(xiv) Gender

(xv) General interests.

(xvii) Number of sessions per user.

(xviii) Behavioural flow during your browsing (e.g. which pages you have visited in a single session).

Information collected through cookies or similar technologies as part of your navigation on the websites / applications of theVMV Cosmetic Group.

For more information about Cookies, please see our Cookie Policy.

(i) Your personal data may be disclosed to companies that are part of the VMV Cosmetic Group, which are clearly and simply identified in the second section of this policy (Who we are); and (ii) to third party service providers that help us provide IT services, such as platform providers, hosting services, maintenance and support in our databases, as well as in our software and applications that may contain data about you.

(iii) Third parties that help us provide digital and e-commerce services such as social listening, shop locator, loyalty programmes, identity management, ratings and reviews, CRM, web analytics and search engine.

INSERTION OF BEHAVIOURAL ADVERTISING

FOR WHAT PURPOSES MAY WE USE YOUR PERSONAL DATA?

WHAT IS THE PURPOSE OF THE PROCESSING?

WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?

WHAT PERSONAL DATA CAN WE HAVE ABOUT YOU?

IN WHAT SCENARIOS CAN YOUR PERSONAL DATA BE COLLECTED?

WHO CAN HAVE ACCESS TO YOUR PERSONAL DATA?

(i) Show you online advertisements for products that may be of interest to you, based on your past behaviour.

- Show you advertisements and content on social media platforms.

- Creation and reminder of your shopping cart.

- Send you recommendations, marketing or content based on your profile and interests;

Your consent

(i) Data related to the use of applications or websites.

(ii) Data related to the website from which you came.

(iii) Pages and videos you have visited.

(iv) Advertisements you click on.

(v) Products you are looking for.

(vi) Location.

(vii) Duration of your visit.

(viii) Products you have selected to create your basket.

(ix) IP address

(x) Browser information.

(xi) Device information.

(xii) Unique identifier for each visitor.

(xiii) Behavioural flow during your browsing (e.g. which pages you have visited in a single session).

(xiv) Gender.

Information collected through cookies or similar technologies as part of your navigation on the websites / applications of theVMV Cosmetic Group.

For more information about Cookies, please see our Cookie Policy.

(i) Your personal data may be disclosed to companies that are part of the VMV Cosmetic Group, which are clearly and simply identified in the second section of this policy (Who we are); and (ii) to third party service providers that help us provide IT services, such as platform providers, hosting services, maintenance and support in our databases, as well as in our software and applications that may contain data about you.

(iii) Third parties that help us provide digital and e-commerce services such as social listening, shop locator, loyalty programmes, identity management, ratings and reviews, CRM, web analytics and search engine.

CUSTOMER SERVICE

FOR WHAT PURPOSES MAY WE USE YOUR PERSONAL DATA?

WHAT IS THE PURPOSE OF THE PROCESSING?

WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?

WHAT PERSONAL DATA CAN WE HAVE ABOUT YOU?

IN WHAT SCENARIOS CAN YOUR PERSONAL DATA BE COLLECTED?

WHO CAN HAVE ACCESS TO YOUR PERSONAL DATA?

(i) Respond to questions you may ask us through our websites/applications, social media, email and chats.

To respond to your requests and questions regarding our products and services

(i) Name and surname.

(ii) Telephone number, postal address and e-mail address.

(iii) Other information that you may share with us at the time of your enquiry.

Information collected when you contact us with questions.

Your personal data may be transferred solely and exclusively to the companies that are part of theVMV Cosmetic Groupwhich are clearly and simply identified in the second section of this policy (Who are we?).

5.- PROFILING

When we send ordisplaypersonalised communications or content, we may use certain techniques called or described as "profiling" (i.e. any form of automated processing of personal data that involves using such data to evaluate certain personal aspects of an individual, in particular to analyse or predict aspects of that individual's personal preferences, interests, financial situation, behaviour, location, reliability or movements). With this technique we can centralise the information and analyse it to assess and predict your personal preferences and/or interests. Once the analysis is done, we send or display communications and / or content tailored to your interests / needs and / or tastes.

We remind you that you can always object to the processing of your personal data on the basis of profiling. Puedes consultar la sección «Tus derechos y opciones» más abajo.

6.- WHO CAN ACCESS YOUR PERSONAL DATA?

(i) We share your personal data between the companies that are part of theVMV Cosmetic Group

As mentioned in the table above in the column "Who may have access to your Personal Data", your data may be disclosed/shared with any of the companies that are part of the VMV Cosmetic Group."your data may be disclosed/shared with any of the companies that are part of the VMV Cosmetic Group, which are clearly and simply identified in the second section of this policy and always under the obligation to keep your details on a suppression list in case you ask us not to receive any further commercial communications;

(ii) Your personal data may also be processed by our trusted third party providers.

We contract with trusted third parties to perform a variety of business operations on our behalf. We only provide them with the essential information they need to perform the service, and we require them not to use your personal information for any other purpose. Please note that we always make our best efforts to ensure that all third parties we work with maintain the security of your personal data by signing rigorous data protection contracts.

Remember to consult the table above, where in the column "Who/Who can have access to your Personal Data?" you will find the categories of third party service providers that require access to your personal data in a simple and clear way.

Remember that you can rest assured that we will never, under any circumstances, offer or sell your personal data to third parties.

7.- INTERNATIONAL TRANSFERS

We undertake that your Personal Data will never be transferred to or stored in a territory outside the European Economic Area ("EEA").

However, please note that service providers located outside the EEA such as Facebook, Inc or Google, LLC may have access to your personal data if you have agreed to share your data with them. Such service providers are covered by the Privacy Shield and are therefore obliged to protect your personal data in accordance with a set of well-defined EU safeguards and protection rules.

8.- HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We only keep your Personal Data for as long as we need it and for the purpose for which we have collected it., para satisfacer tus necesidades o para cumplir con nuestras obligaciones legales.

To determine the data retention period of your Personal Data, we use the following criteria:

HOW LONG WE KEEP YOUR DATA

TYPE OF DATA

RETENTION PERIOD OF YOUR PERSONAL DATA

Personal Data obtained when purchasing our products and services.

For the duration of our contractual relationship.

Personal Data obtained by participating in a promotion, contest or sweepstakes.

For the duration of the promotional offer, contest and/or sweepstakes.

Personal Data obtained when contacting us for an enquiry.

For as long as it takes to deal with your query.

Personal Data obtained when creating an account.

Until you unsubscribe and/or demand that we remove it.

Personal data obtained by giving your consent to receive commercial communications and newsletters.

Until you unsubscribe and/or demand that we remove it.

Cookies that are installed on your computer.

As long as necessary to achieve your purposes (for example, during a session for shopping cart cookies or session ID cookies) and always for a maximum of 365 days.

Notwithstanding the above, please note that we may retain some personal data to comply with our legal or regulatory obligations, as well as to administer our rights (e.g. to enforce our claims in court) or for statistical or historical purposes.

9.- IS MY PERSONAL DATA STORED SECURELY?

We are committed to protecting your Personal Data and will take all reasonable precautions to do so. We contractually require trusted third parties who handle your Personal Data to do the same.

We always use our best efforts to protect your Personal Data and once we have received your personal information, we use strict procedures and security features to try to prevent unauthorised access. As the transmission of information via the internet is not completely secure, we cannot guarantee the security of your data transmitted to our site. Therefore, you should always keep in mind that any transmission is at your own risk.

10.-LINKS TO THIRD PARTY SITES AND SOCIAL LOGIN

Our websites and applications may contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and are outside our control, for which we cannot be responsible. You should always check their policies before you submit any personal data to these websites.

We may also on certain occasions offer you the opportunity to use your social media login to register. If you do so, please note that you share your social profile information with us. The personal data shared depends on the settings of your social media platform. Please visit the social media platform in question and review its privacy policy to understand how it is shared and how it is used.

11.- SOCIAL MEDIA AND USER-GENERATED CONTENT

Some of our websites and apps allow users to submit their own content. Please remember that any content submitted to one of our social media platforms may be viewed by the public, so you should take care when providing certain personal data (e.g. financial information or address details).

Please note that these platforms are beyond our control, so we can never be held responsible for their treatment of your personal data. Recuerda siempre leer sus políticas ante de compartir tus datos de carácter personal.

12.- YOUR RIGHTS AND OPTIONS

TheVMV Cosmetic Grouphas established a strictpolicyof privacy and treatment of your Personal Data. Remember that it is very important that you are always in control of your personal data. For this reason, we would like to remind you of your rights:

(i) Right to information

You have the right to obtain clear, transparent, intelligible and easy to understand information about how we use your personal data and about your rights. You can find all this information in this policy. And remember, if you have any questions, you can contact us easily by sending an email to protecciondatos@grupovmv.com.

(ii) Right of access

You have the right to access all personal data that we hold about you. However, please note that manifestly unfounded, excessive or repetitive requests may not be granted.

To exercise this right, you can contact us by sending an email to protecciondatos@grupovmv.com.

(iii) Right of rectification

You have the right to have your personal data rectified if they are inaccurate or no longer valid or to have them completed if they are incomplete.

To exercise this right, simply contact us by sending an email to protecciondatos@grupovmv.com.. Don't forget to indicate who you are.

(iv) Right of erasure/right to be forgotten

You have the right to have your personal data erased or deleted. However, it should be noted that this is not an absolute right, as it will sometimes be necessary for legal and/or legitimate reasons to keep it.

To exercise this right, simply contact us by sending an email to protecciondatos@grupovmv.com.

(v) The right to object to direct marketing, including profiling

You may unsubscribe from our marketing communications and/or the sending of commercial communications at any time.

The easiest way to do this is to click on the "Unsubscribe" link in any email or communication we have sent you. You can also exercise this right by sending an email to protecciondatos@grupovmv.com.

(vi) The right to withdraw consent at any time where the data processing is based on your consent.

You may withdraw your consent to the processing of your personal data at any time.

You can see in which cases the processing is based on your consent in the table under "What data do we collect from you" in the column "What is the lawful basis for processing your Personal Data".

If you wish to withdraw your consent, you can easily do so by sending an email to the addressprotecciondatos@grupovmv.com.

(vii) The right to object to processing on the grounds of legitimate interests.

You can object at any time to our processing of your data where the processing is based on the satisfaction of legitimate interests. To find out where processing is based on legitimate interests, simply refer to the table under "What data do we collect from you" in the column "What is the lawful basis for processing your Personal Data?

If you wish to exercise this right, you can easily do so by sending us an e-mail to the addressprotecciondatos@grupovmv.com.

(viii) You have Right to lodge a complaint with a supervisory authority

You have the right at any time to complain to the Spanish Data Protection Agency about the privacy and data protection practices of theVMV Cosmetic Group.

Please do not hesitate to contact us for any questions and/or clarifications you may have. You can do so by sending us an email to the addressrotecciondatos@grupovmv.com.

(ix) The right to data portability

You have the right to move, copy or transfer data from our database to another database.

You may only exercise this right with respect to data that you have provided, where the processing is based on the performance of a contract or on your consent and the processing is carried out by automated means.

For information on the cases in which the processing is based on contract or consent, you can consult the table included in the section "What data do we collect from you", in the column "What is the lawful basis for processing your Personal Data".

Remember that you can send us an email to protecciondatos@grupovmv.com if you have any queries;

(x) Right to restriction of processing

You have the right at any time to request the restriction of the processing of your data. If you exercise this right, the processing of your data will be subject to limitations, so we may store it, but we may no longer use or process it.

This right can only be exercised in certain circumstances provided for in the General Data Protection Regulation. When:

THE DATA SUBJECT CONTESTS THE ACCURACY OF THE PERSONAL DATA, DURING THE PERIOD WHICH ALLOWS THE CONTROLLER TO VERIFY THE ACCURACY OF THE PERSONAL DATA

THE PROCESSING IS UNLAWFUL AND THE DATA SUBJECT OBJECTS TO THE ERASURE OF THE PERSONAL DATA AND REQUESTS INSTEAD THE RESTRICTION OF THEIR USE

THE CONTROLLER NO LONGER NEEDS THE PERSONAL DATA FOR THE PURPOSES OF THE PROCESSING, BUT THE DATA SUBJECT NEEDS THEM FOR THE PURPOSES OF MAKING, EXERCISING OR DEFENDING CLAIMS

THE DATA SUBJECT HAS OBJECTED TO THE PROCESSING PURSUANT TO ARTICLE 21(1), WHILE IT IS BEING VERIFIED WHETHER THE LEGITIMATE GROUNDS OF THE CONTROLLER OUTWEIGH THOSE OF THE DATA SUBJECT

If you wish to exercise this right, you can easily do so by sending us an e-mail to the addressprotecciondatos@grupovmv.com.

(xi) Right to disable Cookies

You have the right to disable Cookies. Internet browsers are usually set by default to accept Cookies, but they can be easily disabled by changing the browser settings.

Many cookies are used to improve the usability or functionality of websites/applications; therefore, disabling cookies may prevent you from using certain parts of our websites/applications as outlined in the Cookie Policy.

If you wish to limit or block all cookies set on our websites/applications, you can easily do so through your browser settings. If you want to find out how, just go to ourCookies policy.

13.- CONTACT

Remember that we will be happy tohelp you. If you have any questions or concerns about the way we process and use your personal data or wish to exercise any of the rights described above, you can do so in the way that is most convenient and simple for you:

- By sending us an e-mail to the addressprotecciondatos@grupovmv.com.

- Or you can write to us at Plaza Víctor Martínez s/n, Polígono Industrial Cantallops, Lliçà de Vall (Barcelona - 08185).