PRIVACY POLICY
At Cotton Wild, we aim to provide Users with a secure and reliable browsing experience. Therefore, we have implemented this privacy policy in compliance with the security measures required by Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, and by the European Regulation on the Protection of Personal Data 679/2016, of April 27, regarding the protection of individuals concerning the processing of personal data and the free movement of such data. All of this is done to ensure your privacy and transparency in the use of your data.
As stated in the Legal Notice, the entity behind this Website is:
Cotton Wild
Address: C. del Relámpago, 10, 28918 Alcorcón, Madrid, Spain
Contact Email: info@cottonwild.es
Phone: +34 630 975 806
For anything the User needs regarding this privacy policy, you can contact Cotton Wild at the email address provided above or at the physical address
1. IN WHICH SECTIONS OF THE WEBSITE ARE PERSONAL DATA COLLECTED
In the contact form, in the ‘Contact’ section, the User must fill in the fields provided, which require the name and email address for contact.
Through the registration form
In this form, the User must provide the following information for their effective registration on the platform: name, last name, city, province, clinic or hospital of work, phone number, and email address.
Through social media
Cotton Wild may collect data through the User’s profile on the social media platforms used by Cotton Wild, which are detailed in section 10 of this policy.
Through corporate emails
Through the corporate email addresses: info@cottonwild.es the User can write and/or request information they consider necessary to clarify doubts related to the services offered or the operation of the website or data protection policy.
2. OBJECTIVE AND/OR PURPOSE OF DATA COLLECTION
The email from which the User writes to Cotton Wild‘s corporate email addresses will be used to send information related to the questions or concerns raised.
In no case will the User receive information from third parties without having been informed and having given their express consent beforehand, thus ensuring compliance with European regulations. No international transfer will be made with the purpose of processing their personal data.
Their data may also be used for advertising and commercial prospecting purposes if the User expressly consents at the indicated time.
3. USE OF PERSONAL DATA AND COMMERCIAL PURPOSES
Cotton Wild informs its Users that the personal data they provide will be processed for the purposes outlined in point 1, which are detailed as follows:
1. Attend to and resolve the requests or inquiries made by Users.
2. Inform about updates on the Cotton Wild Website.
3. Send information deemed to be of interest to the User.
4. Notify promotional agreements that Cotton Wild has entered into with companies, professionals, and/or collaborating associations to offer certain functionalities to Users who have already acquired them.
5. Enable access to options that require registration.
6. Send commercial communications, carry out promotional actions or campaigns, identified as direct marketing actions.
Users are informed about their data as follows: (i) their data will not be used for purposes other than those for which they expressly consented or as established in this policy; (ii) all this information is stored on an independent secure server.
It is noted that the information provided through the platform may reveal or allow others to deduce their nationality, ethnicity, gender, age, or other aspects of their private life. Thus, by voluntarily providing this information through any platform medium, Users are expressly and voluntarily accepting this Privacy and Personal Data Protection Policy.
4. TO SHARE INFORMATION WITH THIRD PARTIES
As established in the previous sections, Cotton Wild will not provide users’ data to third parties. In the event that it wishes to do so, users will be informed in advance, and their consent will be sought.
5.BASE LEGAL: EXPRESS CONSENT FOR THE PROCESSING OF YOUR DATA
5.1. Consent of individuals
In compliance with the requirements of Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, and the European Data Protection Regulation 679/2016, and in accordance with the internal policies of the company, each time users submit personal data, they must give their express consent by clicking on the checkbox at the bottom of each form where their data is collected. When they write to contact email addresses or any other enabled for specific functionalities of the Platform, they are expressly accepting that Cotton Wild may collect their data for the purpose or request they have indicated. With such action(s), they are expressing freely and unequivocally that they agree to Cotton Wild processing their data for the purposes mentioned in the previous sections.
Users guarantee that the personal data provided to Cotton Wild are truthful and undertake to communicate any changes to them.
The Users’ acceptance that their data be processed for the purposes referred to in this policy is always revocable, with no retroactive effect, in accordance with current legislation; therefore, they have the right to withdraw their consent at any time, without affecting the legality of the processing based on their prior consent, using the means provided in section 6 of this legal text.
5.2.Consent from Legal Entities or Professionals for Data Processing
It is noted that if Users are acting on behalf of a legal entity or as an independent professional, they authorize the receipt of information associated with contracted services, on one hand, and commercial information at appropriate times through the acceptance of this privacy policy, on the other hand. Thus, when Users request information related to Cotton Wild through the established channels on the Website, their information may also be processed for commercial purposes and the sending of electronic communications when they have authorized it through the provided options.
Likewise, the acceptance by Users that their data be processed for the purposes referred to in this established privacy policy is always revocable, with no retroactive effects, in accordance with current legislation. Therefore, Users have the right to withdraw their consent at any time without affecting the lawfulness of previous processing based on their prior consent, using the means provided in section 6 of this legal text.
6. ONCERNING ACCESS, RECTIFICATION, DELETION, OBJECTION, PORTABILITY, FORGETTING, AND LIMITATION ON PROCESSING
The paragraph you provided explains the rights of individuals regarding their personal data according to the Spanish Organic Law 3/2018 on Data Protection and Digital Rights Guarantee and the European Data Protection Regulation 679/2016. Here’s the translation:
The Organic Law 3/2018, of December 5, on Data Protection and guarantee of digital rights and the European Data Protection Regulation 679/2016 have implemented a series of legal guarantees that allow the User to exercise rights and actions related to the processing of their data.
Cotton Wild provides this legal guarantee, whereby, at any time and/or when the User deems it appropriate, they may exercise their rights of Access, Rectification, Deletion, Objection, Portability, Forgetting, and Limitation in processing by writing to the contact email enabled for this purpose: info@cottonwild.es or by sending a request by physical mail to: C. del Relámpago, 10, 28918 Alcorcón, Madrid, Spain. In both cases, a copy of the passport or ID of the data subject must be attached, clearly indicating in the subject the request to be made: access, rectification, deletion, objection, portability, forgetting, or limitation in processing.
However, it is important for the User to consider that the information shared with other Users through any means may continue to be visible, and Cotton Wild disclaims all responsibility regarding the deletion of this information.
Similarly, Cotton Wild does not control the renewal system of third-party search mechanisms, and certain information from the public profile that has already been canceled may still be contained in these mechanisms. In such cases, it is recommended that the User contact the responsible parties of those platforms to request deletion or exercise the right to be forgotten.
The following briefly explains each of the rights that can be exercised:
Access
This right allows the User to know what personal data is being processed, its purpose, origin, or possible transfer to third parties.
Rectification
It allows the modification of inaccurate or incomplete personal data, specifying in the request which data the User wants to be modified.
Deletion
This right allows the cancellation of personal data that is inappropriate or excessive.
Objection
With the right to object, the User can oppose the processing of data in cases such as advertising activities and direct marketing or when the processing aims to make a decision about them based solely on automated processing of their personal data.
Portability
Users can receive their personal data provided in a structured, commonly used, and machine-readable format and transmit them to another controller, provided it is technically possible.
Forgetting
It allows the User to request the deletion of personal data without undue delay in certain cases, for example, when the processing is unlawful, or the purpose that motivated the processing has disappeared.
Limitation in processing
In general, in cases where it is not clear whether personal data should be deleted, the right to limit processing can be exercised. This right exists in the following cases: (i) when the accuracy of the data in question is in doubt; (ii) when the User does not want the data to be deleted; (iii) when the data is no longer necessary for the original purpose, but cannot be deleted for legal reasons; (iv) when the decision to object to the processing is pending. Limitation means that personal data can only be processed with consent for the formulation, exercise, or defense of claims, with a view to protecting the rights of another natural or legal person, or for reasons of public interest of the EU or a specific EU member state. The User must be informed before the lifting of such limitation.
Likewise, the User has the right to file a complaint with the competent Control Authority if they believe that the processing of personal data concerning them violates the provisions of data protection legislation. All of this without prejudice to any other administrative recourse or legal action.
Also, it is reported that data processing will not aim to make decisions about the User’s information based solely on automated processing – automated decisions -, including profiling. In other words, it does not include the automated profiling of the User’s personal data without human intervention to assess personal aspects related to them, such as analyzing or predicting aspects related to economic situations, health, preferences, or personal interests, reliability or behavior, the User’s situation, all to the extent that it has legal consequences for them or significantly affects them. In any case, it would only apply when required by law, and such processing would be subject to appropriate safeguards, including specific information to the data subject, such as the right to obtain human intervention, where applicable; also to express their point of view, to receive an explanation of the decision made after such evaluation, and to challenge the decision when appropriate.
7. LEGAL AGE
To be a user of the website, it is necessary to have reached the legal age, so the user must be over 18 years old.
8. SECURITY MEASURES IN DATA COLLECTION
To ensure security on the Platform, a security system has been integrated that maintains the confidentiality and integrity of the Users’ data that has been submitted or collected through the means mentioned in the first point.
In this way, Cotton Wild maintains the security levels required by the Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, and the European Data Protection Regulation 679/2016, of April 27. The platform has implemented all the technical means at its disposal to prevent the loss, misuse, alteration, unauthorized access, and theft of the data that the User provides through the Platform.
The User also understands, accepts, and comprehends that security measures on the Internet are not impregnable. Therefore, they are obliged to take the necessary security measures that allow them to trust the veracity of the website where they are entering their data. Cotton Wild will also do everything possible to guarantee the privacy and security of their identification data at all times, using the utmost diligence and implementing necessary measures.
In this regard, the User is informed that they will be solely responsible for the security measures they implement regarding the protection of their data. Therefore, Cotton Wild is not responsible for situations where the User has not implemented the necessary security measures, nor for their consequences, including damages caused by third parties unrelated to the project, including fortuitous events and/or force majeure.
In accordance with the foregoing, Cotton Wild cannot guarantee that unauthorized third parties may become aware of the type, conditions, characteristics, and circumstances of the use that Users make of the services offered on the Platform. However, as a measure, terms of use have been established in the Legal Notice.
9.PERSONAL DATA RETENTION PERIOD
The personal data provided will be kept for the time necessary to fulfill the purpose for which they are collected and to determine any potential liabilities arising from that purpose, in addition to the periods stipulated by applicable legislation.
10. SOCIAL MEDIA POLICY
Cotton Wild maintains a corporate presence on the social media platforms Twitter, LinkedIn, and Instagram. In accordance with the provisions of the Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, and the European Data Protection Regulation 679/2016, Cotton Wild acts as the “Data Controller” due to the existence of these social media profiles and the User’s decision to follow the company, and vice versa.
By deciding to join Cotton Wild‘s corporate profile as a follower or by giving a “Like” to the content or profile, the User accepts this policy, which explains their rights and how their data is used.
As the data controller, Cotton Wild ensures the confidentiality of the processing and compliance with User rights, always under the provisions of the mentioned legislation and regulations.
Furthermore, Users are informed that these social media platforms are used to announce news or relevant information related to the services offered or topics considered to be of interest to Users. By using the functionalities of these platforms, Users may receive news with such information on their feed or profile.
However, it is important to note that there is no direct affiliation between Cotton Wild and these platforms or social networks. Therefore, Users will accept the platform’s usage policy and conditions once they access them and/or validate their notices, terms, and conditions in the registration process. Cotton Wild is not responsible for the use or processing of their data outside the strict relationship and service provision indicated in this policy.
11. MODIFICATION OF THIS PRIVACY POLICY
Cotton Wild reserves the right to modify this policy to adapt it to future legislative or jurisprudential developments, as well as to future uses it may plan for the personal data of the users of the Website. In case such a modification affects the users regarding the processing of their data, for example, if there will be any additional processing not previously informed, they will be notified accordingly.
It is recommended that the user, in any case, read the Personal Data Protection Policy of the website each time they access it.
12. INTEGRATION WITH THE REST OF THE LEGAL TEXTS
This privacy policy is complemented by the Legal Notice and Cookie Policy associated with this website