In accordance with the obligations defined in current legislation on information society services and electronic commerce, as well as personal data protection regulations, we inform you that the owners of this website have drawn up this privacy policy to regulate and structure the processing of your personal data and to provide users with appropriate information regarding these activities, stating the following:
KI.SUI is the trade name owned by the company IMPORT YOY COSMETICS S.L., DATA CONTROLLER of the personal data of USERS who visit this website, as well as of the personal data processing resulting from the activities advertised on it, such as establishing a contractual or pre-contractual relationship as a customer or as an interested party in our content. We will therefore process your personal data in accordance with Regulation (EU) 2016/679 of April 27 (GDPR) and Organic Law 3/2018 of December 5 (LOPDGDD).
The main purpose of KI.SUI is to establish a contractual or pre-contractual relationship with website users, who may be individuals or professionals, for the sale of products advertised on the site: https://kisuihair.com/, whether or not a commercial relationship is ultimately formalized. It also includes responding to inquiries and interacting with those interested in one or more products.
The processing activities include:
The legal basis allowing the CONTROLLER to process your personal data, in compliance with Article 6.1 of the GDPR, depends on the various uses on its website, as follows:
SALES:
To manage our e-commerce and provide USERS with the necessary information to formalize the sales processes for the different products offered, the CONTROLLER will process your data under:
Article 6.1(c) of the GDPR, for compliance with legal obligations.
Article 6.1(b) of the GDPR, for the performance of a contract or to take steps prior to entering into a contract.
Article 6.1(a) of the GDPR, with the USER’s consent, for sending commercial communications or newsletters.
Article 6.1(f) of the GDPR, for the legitimate interest of the CONTROLLER in conducting market research, statistical analysis, etc.
LOYALTY PROGRAMS:
To provide customer benefits and share information regarding affiliate programs, point systems, or discount vouchers, with USER consent under Article 6.1(a) of the GDPR.
NEWSLETTER OR COMMERCIAL INFORMATION:
To provide USERS with promotional information:
Article 6.1(b) of the GDPR, for the performance of a contract or to take steps prior to entering into a contract.
Article 6.1(c) of the GDPR, for legal obligations.
Article 6.1(a) of the GDPR, for commercial communications or newsletter subscriptions with consent.
Article 6.1(f) of the GDPR, for the legitimate interest of the CONTROLLER.
MARKET RESEARCH AND STATISTICAL ANALYSIS:
To improve our services and analyze statistical and market data for each USER, the CONTROLLER processes your data under the legitimate interest basis defined in Article 6.1(f) of the GDPR.
HAIR DIAGNOSIS QUESTIONNAIRE:
To offer a better service, our website includes a brief questionnaire to gather generic customer information to help recommend suitable products. The CONTROLLER processes this data under Article 6.1(f) (legitimate interest) and Article 6.1(a) (with user consent) of the GDPR.
WEBSITE REGISTRATION:
To facilitate future purchases and provide commercial information, USERS may register as clients (optional for purchases). This processing is based on Article 6.1(a) of the GDPR and users may withdraw consent without affecting the contractual or pre-contractual relationship.
SOCIAL MEDIA LINKS:
To promote its activity and products, the CONTROLLER has created social media profiles linked from the website. Posts on these profiles are governed by the “SOCIAL MEDIA” section of this Privacy Policy and are based on the legitimate interest under Article 6.1(f) of the GDPR.
REVIEWS, RATINGS, OR TESTIMONIALS:
This feature is used to ensure quality through feedback from those who have tried the CONTROLLER’s products. This processing is based on Article 6.1(f) (legitimate interest) and Article 6.1(a) (user consent) of the GDPR.
All data processing will be carried out under the appropriate legal basis outlined above and following these principles:
KI.SUI commits to respecting the data retention periods and will not store data longer than necessary to fulfill its purpose or legal requirements. Once no longer necessary, data will be deleted with appropriate security measures to ensure anonymization or complete destruction.
Customer data will not be stored for more than five years from the last purchase or for the duration required by fiscal or commercial regulations. Visitors who do not enter into a (pre)contractual relationship and do not consent to commercial use of their data will have their data deleted within a maximum of ten days, except data required by web service providers (e.g., to track visits).
KI.SUI informs USERS of their rights:
Contact to exercise your rights:
IMPORT YOY COSMETICS S.L., Calle Progreso nº 7; CP 36202; Vigo – Pontevedra, or via email at: [email protected]
MANDATORY OR OPTIONAL NATURE OF USER DATA:
By checking the appropriate boxes and entering data into fields marked with an asterisk (*) on the contact or download forms, USERS expressly and freely agree that their data is necessary for the provider to fulfill their request. Including data in the remaining fields is voluntary.
The USER guarantees that the personal data provided to the CONTROLLER is accurate and agrees to communicate any changes. The CONTROLLER informs that all requested data is mandatory to ensure optimal service. If not provided, the service may not fully meet the USER’s needs.
In accordance with current personal data protection regulations, KI.SUI complies with all GDPR and LOPDGDD provisions for processing personal data, particularly the principles outlined in Article 5 of the GDPR. These include lawful, fair, and transparent processing, data minimization, and relevance for the purposes for which they are processed.
KI.SUI ensures that it has implemented appropriate technical and organizational measures to protect USERS’ rights and freedoms and has provided the necessary information to enable them to exercise those rights.
For further privacy guarantees, you may contact the CONTROLLER or the designated Data Protection Officer via: KI.SUI, Calle Progreso nº 7; CP 36202; Vigo – Pontevedra, or email: [email protected]
KI.SUI informs USERS that it has created profiles on platforms such as Google, as well as social media networks like Facebook, TikTok, YouTube, and Instagram. The CONTROLLER is responsible for processing USER data on these platforms in accordance with the GDPR and LOPDGDD.
Purpose:
USERS can always manage their connections, remove content, and control privacy settings.
Once USERS follow or join the CONTROLLER’s social media, they may post comments, links, photos, videos, or other multimedia content. USERS must own the content or have the proper permissions.
Any content deemed offensive, unethical, or in violation of intellectual property rights or laws is expressly prohibited. The CONTROLLER reserves the right to remove such content immediately and permanently block the USER.
KI.SUI is not responsible for content freely posted by USERS. USERS should be aware that their content may be visible to others and they are responsible for managing their own privacy.
Images shared on social media will not be stored by the CONTROLLER but will remain on the social media platform.
Access and registration via the CONTROLLER’s social media are prohibited for users under 14 years of age. If a USER has special needs, a legal guardian or representative must provide valid documentation authorizing use.
KI.SUI is expressly exempt from any liability for use of its social media by minors or individuals with special needs. The CONTROLLER’s social media accounts do not knowingly collect personal data from minors. If you are a minor, do not register, use the CONTROLLER’s social media, or provide any personal information.
Review date: March 24, 2025.
About
