PRIVACY POLICY

WE RECOMMEND THAT YOU READ AND UNDERSTAND OUR PRIVACY POLICY BEFORE PROVIDING YOUR PERSONAL DATA AND GIVING CONSENT FOR ITS PROCESSING.

1. Who is responsible for processing your data?

• Identity: Reset Labs, SL
• Tax ID (CIF): B87346896
• Email: hello@reset-this.com

2. What data do we process?

Reset will process the data you have voluntarily provided, as well as inferred data—this refers to data obtained through the application of algorithms to analyze information from social media, satisfaction surveys, and communications received at hello@reset-this.com. 

Depending on the services or features you wish to use, we may need to process different types of data, generally including:

• Identification data (e.g., your name, surname, address, postal code, city, province, phone number, mobile, email, language, country, and Instagram username).
• Personal characteristics (e.g., gender, date of birth, preferences regarding benefits, ingredients, etc.).
• Economic and transactional data (e.g., payment details, purchase information, orders, returns, etc.).
• Connection, geolocation, and browsing data (if you interact with us via mobile, for instance).
• Commercial information (e.g., newsletter subscription status).

When we request your personal data to grant you access to certain features or services, we will mark required fields as mandatory. These are necessary to provide the service or allow access to the functionality. Please note that if you choose not to provide these required fields, you may not be able to complete your registration as a customer or use certain services or features.

3. For what purpose do we process your personal data, and on what legal basis?

We will process your personal data for the following purposes, based on the respective legal grounds and retention periods outlined below:

Purpose 1: Website Registration

We need to process your data to identify you as a customer and grant you access to the features, products, and services available to you.

• Legal basis: The processing of your data is necessary for the execution of the terms that regulate the use of the Website. If you choose to access or log in through a social network, the reason we are authorized to process your data is the consent you provide when authorizing the transfer of your data from the social network.
• Retention period: We will process your data as long as you remain a registered customer, until you choose to cancel your account.

Purpose 2: Order Processing, Fulfillment, and Execution of the Purchase Agreement

Includes (i) order preparation and delivery management, (ii) payment processing and, where applicable, exchanges and/or returns, (iii) VAT refund management (if applicable), (iv) invoicing and receipt issuance for online store purchases, (v) fraud prevention, and (vi) quality surveys. 

• Legal basis: The execution of the sales or service provision contract that binds us to you. We consider that we have a legitimate interest in carrying out the necessary checks to detect and prevent possible fraud when you make a purchase. We understand that the processing of this data is beneficial for all parties involved in the payment process of a purchase, particularly for the customer, as it allows us to take protective measures against fraud attempts by third parties.
• Retention period: We will process your data for the time necessary to manage the purchase of the products or services acquired, including possible returns, complaints, or claims related to the purchase of the specific product or service.

Purpose 3: Marketing Communications and Newsletter Subscription

Includes sending commercial communications about Reset Labs products, promotions, and services via electronic means, such as email and push notifications (if enabled on your mobile device). If you no longer wish to receive push notifications, you can disable this option in your device settings.

• Legal basis: The legitimate basis for processing your data for marketing purposes is the consent you provide, for example, when you agree to receive personalized information through various channels, when you authorize the sending of push notifications to your mobile device, or when you accept the legal terms to participate in a promotional action or to publish your photos on the Platform or our social media channels.
• Retention period: Unless you request to unsubscribe, we will assume that you remain interested in receiving our communications. If you participate in promotional actions, we will retain your data for a period of six (6) months after the action has ended.

Purpose 4: To manage or resolve your request or inquiry through Customer Service.

We only process the personal data that is strictly necessary to handle or resolve your request or inquiry.

• Legal basis: We consider that we have a legitimate interest in addressing the requests or inquiries you submit through the various available contact channels. We understand that processing this data is also beneficial for you, as it allows us to assist you properly and resolve your inquiries. When you contact us, particularly for the management of issues related to your order or the product/service purchased through the Website, the processing is necessary for the execution of the sales or service provision contract. When your inquiry relates to exercising the rights described in section 5 or to claims related to our products or services, our legal basis for processing your data is compliance with legal obligations.
• Retention period: We will process your data for the time necessary to handle your request or inquiry, keeping it blocked until the statute of limitations for possible liability actions expires. 

Purpose 5: Profiling and Marketing Analytics

This data processing involves analyzing your user or customer profile to determine your preferences and, therefore, which products and services best suit your style when sending you information. Additionally, we may display advertisements on the Internet that you may see while browsing websites and apps, such as social media platforms. The ads you see may be shown randomly, but in some cases, they may be related to your purchase history, preferences, and browsing behavior.

If you are a social media user, we may share certain information with the platforms we collaborate with so they can show you ads from our brand and, in general, offer you or other similar users advertising based on your profile on those social networks. We recommend reviewing the privacy information of the social networks you participate in.

Additionally, we use your data to conduct measurement and segmentation analysis of the ads we display to users on certain partner platforms. To achieve this, we collaborate with third parties that provide the necessary technology (e.g., through cookies, pixels, SDKs) to use these services. Please note that, while we do not share personally identifiable data with these partners, we may provide a unique identifier (e.g., the advertising ID associated with your device, a cookie identifier, etc.).

For more information on this, please review our Cookie Policy. Additionally, you can reset your advertising identifier or disable ad personalization on your device by modifying your preferences in the settings section of your device.

• Legal basis: We consider that we have a legitimate interest in profiling based on the information we have about you (such as your browsing activity, preferences, or purchase history) and the personal data you have provided us, such as age range or language. We believe that processing this data is also beneficial for you, as it allows us to enhance your user experience and provide you with information that aligns with your preferences.
• Retention period: We will process your data unless you request to unsubscribe or cancel your registration as a customer.

Purpose 6: Contact

• Legal Basis: We consider that we have a legitimate interest in processing your personal data for maintaining the contractual, commercial, or professional relationships that connect us.
• Retention Period: We will process your data as long as these relationships remain in place or for the periods established by applicable law, keeping them blocked until the statute of limitations for potential liability actions expires.

4. Who will receive your data?

4.1 Data Communication

Your personal data will only be shared with third parties when legally required.

4.2 Data Processors

Reset will collaborate with third-party service providers who may have access to your personal data and will process it on behalf of Reset as a result of their service provision. Reset follows strict criteria in selecting service providers to ensure compliance with data protection obligations and is committed to signing the corresponding data processing agreement with them.

Specifically, Reset will engage third-party service providers operating in, but not limited to, the following sectors: logistics services, legal advisory, supplier approval, multidisciplinary professional services, maintenance-related companies, technology service providers, IT service providers, physical security companies, instant messaging service providers, infrastructure management and maintenance companies, and call center service providers.

4.3 Security Measures

Reset implements information security measures such as firewalls and access control procedures, all aimed at preventing unauthorized access to data and ensuring its confidentiality.

To achieve these objectives, the user agrees that Reset may collect data for the purpose of authenticating access controls.

Additionally, any transaction carried out through Reset is processed using secure payment systems. Confidential payment data is transmitted directly and in encrypted form (SSL) to the corresponding entity.

Reset declares that it has adopted all necessary technical and organizational measures to ensure the security and integrity of personal data, as well as to prevent its loss, alteration, or unauthorized access by third parties.

4.4 Use of Cookies

We use cookies to facilitate your navigation on Reset, understand how you interact with us, and, in certain cases, display advertisements based on your browsing habits. You can find additional information in our Cookies Policy.

5. What are your rights regarding your personal data?

The rights you have regarding the processing of your personal data in relation to Reset are:

• Right to request access to your personal data.
• Right to request rectification or deletion of your data.
• Right to request the restriction of data processing.
• Right to data portability.
• Right to object to data processing.
• Right not to be subject to automated decision-making, including profiling.
• Right to withdraw consent given for receiving commercial communications.

6.- What Does the Right of Access Entail?

You have the right to obtain confirmation of whether or not your personal data is being processed and to receive the following information:

• The purposes of the processing.
• The categories of data being processed.
• The recipients or categories of recipients to whom the data has been or will be disclosed.
• If possible, the expected retention period for your personal data or, if not possible, the criteria used to determine this period.
• In such cases, we will provide you with a copy of the personal data being processed. Additionally, if you request it through electronic means, the information will be provided in a commonly used electronic format.

You may exercise this right every six months, unless there is a legitimate reason to request it more than once within that period. We will inform you of the actions taken as a result of your request within one month.

7.- What Does the Right to Rectification Entail?

You have the right to obtain the rectification of inaccurate personal data concerning you. To do so, you must provide, when necessary, supporting documentation proving the inaccuracy or incompleteness of the data being processed.

8.- What Does the Right to Erasure Entail?

You have the right to request the deletion of your personal data when one of the following circumstances applies:

• The data is no longer necessary for the purposes for which it was collected or processed.
• You withdraw your consent, and there is no other legal basis for processing.
• You object to the processing, and no overriding legitimate grounds justify continuing the processing.
• The data has been processed unlawfully.

9.- What Does the Right to Restriction of Processing Entail?

You have the right to obtain the restriction of processing of your data when one of the following conditions applies:

• You have contested the accuracy of your personal data, for a period that allows the data controller to verify its accuracy.
• You consider the processing to be unlawful, and instead of requesting the deletion of your personal data, you request the restriction of its use.
• The data controller no longer needs your personal data for processing purposes, but you require it for the establishment, exercise, or defense of legal claims.
• You have objected to the processing, while it is being verified whether the data controller’s legitimate grounds override yours.

Once you have obtained the restriction of processing under this section, you will be informed by the data controller accordingly.

10.- What Does the Right to Data Portability Entail?

You have the right to receive the personal data concerning you, which you have provided to the data controller, in a structured, commonly used, and machine-readable format and to transmit it to another data controller when:

• The processing is based on your consent.
• The processing is carried out by automated means.

When exercising your right to data portability, you also have the right to have your personal data transmitted directly from one controller to another, whenever technically feasible.

The right to data portability does not extend to data that the data controller has inferred based on information derived directly from the use of the services provided.

11.- What Does the Right to Object Entail?

You have the right to object to the processing of your personal data at any time. If you exercise this right, the data controller will cease processing your personal data, unless compelling legitimate reasons can be demonstrated that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

12.- What Does the Right Not to Be Subject to Automated Decisions, Including Profiling, Entail?

You have the right not to be subject to a decision based solely on automated processing, including profiling, if such decisions produce legal effects on you or significantly affect you in a similar way.

However, this right will not apply if:

• The decision is necessary for entering into or performing a contract.
• The decision is authorized by law.
• The decision is based on your explicit consent.

13.- What Does the Right to Withdraw Consent for Receiving Commercial Communications Entail?

In all commercial communications sent to you via electronic means, a "UNSUBSCRIBE" link or similar will be provided, allowing you to request that no further commercial communications be sent to you. This withdrawal will not affect the lawfulness of processing based on consent given before its withdrawal.

The processing time for your request is 48-72 hours, so you may still receive some commercial communications during this period.

How to Exercise Your Rights?

You can exercise the aforementioned rights free of charge by indicating the reason for your request and the right you wish to exercise through the following channels:

• By email: hello@reset-this.com
• By postal mail: Reset Labs, SL, Doctor Fourquet nº 3, 28012 Madrid, Spain

Additionally, you can contact the Spanish Data Protection Agency (AEPD) for further information about your rights. If you are not satisfied with the response to your request, you may file a complaint with the Data Protection Officer (DPO) or, if necessary, submit a formal complaint to the Spanish Data Protection Agency, the competent supervisory authority.