Privacy policy

Privacy Policy — REVERSE LONGEVITY

Privacy Policy

1. Data Controllers

The controller of your personal data is REVERSE LONGEVITY, S.L. (hereinafter, “REVERSE” or “RVRS”), with Tax ID No. B88657747, and registered address at Calle Ramírez de Arellano 26, local offices 3, 28043, Madrid.

This Privacy Policy governs access to and use of the website (hereinafter, the “Website”) that REVERSE makes available to Internet users (hereinafter, the “Users”) interested in the content (hereinafter, the “Content”) and services (hereinafter, the “Services”) offered by REVERSE on it.

Contact email: soporte@rvrs.es

2. Recommendations

Please read carefully and follow the recommendations below:

  • Keep your device equipped with properly updated antivirus software against malicious software and spyware applications that may jeopardise your Internet browsing and the information stored on your device.
  • Read and review this Privacy Policy and all legal texts made available by REVERSE on the website.
  • User registration is optional to use the website services; however, it requires prior acceptance of this Privacy Policy.

3. Personal information we collect

For the proper functioning of the website, REVERSE may have access to the following data provided, where applicable, by the user:

  1. Contact data: name, postal and shipping address, telephone number, email address.
  2. Health data: provided optionally and voluntarily by the user through the cosmetovigilance channel.
  3. Banking and financial data: card details, payment method, transaction details.
  4. Data relating to enquiries and communications: information provided when contacting customer support, including the content of enquiries, requests, incidents, complaints and any other data voluntarily provided by the user. In particular, and only to the extent that the user themselves communicates them, data related to habits, preferences, nutritional goals or, exceptionally, health-related information may be processed when necessary to address the enquiry submitted.
  5. Device information: IP address, browser, unique identifiers.
  6. Usage information: interaction with the website, pages visited, browsing time.

4. For what purposes and on what legal basis is your personal data processed?

Purpose Legal basis
Managing user registration, account creation, authentication and access to the private area Art. 6.1(b) GDPR: Performance of a contract
Managing the purchase of products through the website, including payments, returns, exchanges, warranties and after-sales support Art. 6.1(b) GDPR: Performance of a contract
Handling information requests, contact, security incidents or support, and managing adverse reactions Art. 6.1(a) GDPR: User consent
Sending commercial communications, newsletters, promotions, discounts or news about products and services Art. 6.1(a) GDPR: User consent. In the case of previous customers, the exception under Article 21.2 of the LSSI may be considered for products or services similar to those contracted, provided that a simple and free opt-out or unsubscribe mechanism is offered.
Ensuring the security of the website, user account and platform, preventing unauthorised access, detecting fraudulent activities, misuse or security incidents Art. 6.1(f) GDPR: Legitimate interest of the controller in ensuring platform security and preventing fraud. Where applicable, compliance with legal obligations.
Evaluation and monitoring of Product safety as described in the Cosmetovigilance, Safety and Claims section Art. 9.2(a) GDPR: explicit user consent

5. Accuracy of data provided by Users

The User guarantees the accuracy of the personal data provided and undertakes to notify REVERSE of any changes. In any event, the User shall be responsible for the accuracy of the data provided, and REVERSE reserves the right to exclude from the services any User who has provided false data, without prejudice to any other actions that may be taken under applicable law.

Users are advised to protect their data with the utmost diligence using appropriate security tools. REVERSE shall not be liable for any theft, unlawful modification or loss of data.

Any modification or update of data must be communicated to REVERSE through the communication channels provided in this Privacy Policy.

6. Data retention

Protecting the privacy and personal data of Users is very important to REVERSE. Therefore, REVERSE does everything possible to prevent User data from being used inappropriately. Only authorised personnel have access to User data.

The User's personal data will be retained while it remains in REVERSE's database for the processing purposes for which it was provided, unless the User has withdrawn their consent by requesting deletion of their account or removal of certain personal data from the website. Subsequently, where necessary, the information will be kept in a blocked state for the legally established periods.

REVERSE undertakes to comply with its obligation of secrecy and confidentiality regarding personal data in accordance with applicable legislation.

7. User rights

Users have the right to:

  1. Access their personal data;
  2. Request rectification of any inaccurate data;
  3. Request erasure of their data;
  4. Request restriction of the processing of their data;
  5. Object to the processing of their data;
  6. Request portability of their data.

Users shall also have the right not to be subject to decisions based solely on automated data processing.

The User may exercise all of these rights by sending an email to soporte@rvrs.es, stating the reason for their request. The User may also send their request by post to the following address: Calle Ramírez de Arellano 26, local offices 3, 28043, Madrid.

Without prejudice to any other administrative remedy or legal action, the User shall have the right to lodge a complaint with a Supervisory Authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement, if they consider that the processing of their personal data is not compliant with the regulations, as well as if they are not satisfied with the exercise of their rights. The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and outcome of the complaint.

8. Data security

Protecting the privacy and personal data of Users is very important to REVERSE. Accordingly, REVERSE has taken all measures within its reach to prevent data from being used improperly, allowing access only to authorised personnel.

REVERSE maintains appropriate security for the protection of personal data in accordance with applicable legislation and has established all technical means within its reach to prevent loss, misuse, alteration, unauthorised access and theft of data provided by the User through the website, without prejudice to informing the User that security measures on the Internet are not impregnable.

REVERSE undertakes to comply with the duty of secrecy and confidentiality regarding personal data in accordance with applicable legislation. REVERSE shall not be liable for any damages that may arise from the User's failure to comply with the obligations set out in this document.

9. Data recipients and international transfers

As a general rule, REVERSE will not disclose Users' personal data to third parties, except in those cases where such disclosure is necessary for the proper provision of services, management of the relationship with the User, processing of orders, payments, invoicing, shipments, returns, customer support, compliance with legal obligations or defence of its rights and legitimate interests.

In particular, the personal data necessary for invoicing, logistics and order management, including, among others, name, surname, contact details, shipping address, order information and, where applicable, data necessary for payment processing, may be disclosed to CENTER FOR INTELLIGENT RESEARCH IN CRYSTAL ENGINEERING, S.L. (“CIRCE”), which will process such data as an independent data controller for the management of the activities assigned to it.

REVERSE may also allow access to personal data by providers that supply technological, hosting, e-commerce, maintenance, support, customer service, analytics, marketing, payment processing, logistics or other auxiliary services. When such providers process data on behalf of REVERSE, they will act as data processors and will be subject to the corresponding contractual obligations of confidentiality, security and data protection.

When such third parties act as data processors, REVERSE will adopt appropriate contractual, technical and organisational measures to ensure the confidentiality, security and integrity of the personal data processed, formalising, where appropriate, the corresponding data processing agreements with the legally required safeguards.

REVERSE may also share personal data with partners or marketing and advertising providers for commercial, analytical, segmentation or personalised advertising activities, provided that an appropriate legal basis exists and, in particular, where the User has given consent in cases where it is required. In such cases, those third parties may process the data in accordance with their own privacy policies and, where applicable, as independent data controllers.

The Services are provided through the Shopify e-commerce platform. Shopify may process certain personal data on behalf of REVERSE to provide the contracted services. Further information can be found in Shopify's Privacy Policy.

REVERSE may also disclose Users' personal data when necessary for compliance with legal, tax, accounting, consumer or data protection obligations, as well as to respond to requests from administrative or judicial authorities, law enforcement agencies, competent public bodies or in the context of legal proceedings or claims.

If any of the providers, partners or third-party recipients of the data is located outside the European Economic Area, REVERSE will adopt the necessary measures to ensure that the international transfer of data is carried out in accordance with the safeguards provided for in applicable regulations, including, where appropriate, adequacy decisions by the European Commission, the signing of standard contractual clauses or other valid mechanisms recognised under the GDPR.

The REVERSE team, as well as collaborators and providers that may access personal data in the course of providing services to REVERSE, will be subject to the corresponding confidentiality obligations regarding the information to which they have access.

In those cases where the User must register, access, make payments, interact with or use third-party platforms, environments or services, such as Shopify, payment gateways, logistics operators, marketing tools or other external services, the terms and conditions and privacy policies of such third parties may apply. Consequently, REVERSE shall not assume responsibility for data processing carried out by such third parties within their own scope of activity and in accordance with their respective terms and privacy policies.

10. Questions

If you have any questions about our Privacy Policy, please contact us by sending an email to soporte@rvrs.es.

11. Acceptance and Consent

The User declares that they have been informed of the conditions regarding personal data protection, accepting and consenting to the processing thereof by REVERSE, in the manner and for the purposes indicated in this Privacy Policy.