Privacy Policy

In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, we provide you below with all relevant information on how we process the personal data that you, as a user, share with us.

This Privacy Policy will be applicable to the processing carried out by COOSY SHOP, SLU, (hereinafter, COOSY) of personal data collected by the following means:

the website
customer service
physical stores
video surveillance in stores

1.- Data controller

Company name: COOSY SHOP, SLU

CIF: B-94073459

Address: C/ Oliva 31, 36001, Pontevedra

Telephone: 91 521 98 72

Email: rgpd@coosy.es

2.- Data subject to processing, purpose, legal basis and time during which we will retain your personal data

We will process your data for the following purposes, legal basis and retention periods described below:

2.1. Register as a Client

Data: Name, surname, courtesy title (optional), date of birth, postal address, email, bank details, telephone number and access credentials.
Purpose: To manage your registration as a user of the online store, manage changes and returns, direct access to the status of your orders, purchase history, etc., notify you of changes to our services and, occasionally, send you promotional news via email or mobile phone.
Legal basis: The execution of a contract to which the user is a party and, in the case of sending promotional news, legitimate interest.
Retention periods: The personal data you provide us will be retained for a period of 5 years unless other limitation periods apply.

2.2. Become part of the COOSY Club

Data: Data required to create an account as a registered user.
Purpose: To offer registered users, who have previously accepted to receive newsletters, exclusive benefits and experiences. These benefits include: (i) managing the balance of points obtained from purchases made; (ii) receiving benefits from exclusive promotions; (iii) receiving communications related to the COOSY Club.
Legal basis: The execution of a contract to which the user is a party.
Retention periods: The personal data you provide us will be retained for a period of 5 years unless other limitation periods apply.

23. Buy online store

Data: Name, surname, email, postal address, bank details, date of birth, mobile phone, product purchased, company from which you purchased the product (optional).
Purpose: The purpose is to manage your purchase and send your order.
Legal basis: The execution of a contract in which the user is a party.
Retention periods: The personal data you provide us will be retained for a period of 5 years, unless other limitation periods apply.

2.4. Purchase and deferral of payment

Data: Name, surname, gender, date of birth, postal address, email, bank details and telephone number.
Purpose: The main purpose is to manage the deferral of your payment, for the development, fulfillment and execution of the sales contract.
Legal basis: Execution of the contract or pre-contract.
Retention periods: The personal data that you provide us will be retained for a period of 5 years unless other limitation periods are required.

2.5. Management of changes and returns

Data: Name, surname, email, postal address, bank details, date of birth, mobile phone, product purchased, company from which you purchased the product (optional).
Purpose: The purpose is to manage changes and returns of your orders.
Legal basis: The execution of a contract in which the user is a party.
Retention periods: The personal data you provide us will be retained for a period of 5 years, unless other limitation periods apply.

2.6. Web Browsing

Data: Technical information, including your IP address, login details, browser and version, operating system, and analytical information, relating to your visits to our website. You can find out more about the use of these devices and how to manage them in our Cookie Policy.
Purpose: To allow you to participate in interactive features of our website when you choose to do so. To compile statistical analysis, research and profiles based on your browsing and content interests, or other valuable information that will enable us to improve our website and our service. Detect, prevent and address technical issues.
Legal basis: Consent, except for information collected by functional cookies which is legitimate interest.
Conservation periods: Those established in the Cookies Policy.

2.7. Newsletter Sending

Data: Email.
Purpose: To send you personalized electronic communications about our products (Newsletter, advertising information and brand news, promotions and exclusive offers), via email.
Legal basis: Consent, which will be deemed to have been granted by checking the corresponding opt-in box.
Retention periods: The personal data provided will be retained as long as you do not request its removal, since until that time we will understand that you are still interested in receiving our communications.

2.8. Sending Push Notifications

Data: User IP
Purpose: To keep you informed about COOSY news and offers.
Basis for legitimacy: Consent, which will be deemed to have been granted by checking the corresponding authorization box.
Storage periods: If you do not wish to receive them, you must deactivate this option from the configuration panel of your browser. This process may vary depending on the browser you use.

2.9. Sending CV

Data: The identifying, academic and professional data that appear in the CV of the interested party
Purpose: To manage personnel selection processes.
Legal basis: The application at the request of the employee of pre-contractual measures or the intention to conclude a contract.
Data retention periods: The data you send us to apply for a job will be kept for up to one year after receipt of the application.

2.10. Franchise opening application

Data: Name, surname, email and town.
Purpose: To manage the application of the interested party to open a franchise.
Legal basis: Execution of the contract or pre-contract.
Retention periods: In the event that the interaction established with the user to manage the franchise application concludes with the signing of a contract, the personal data that you provide will be retained for the duration of the contractual relationship and for a period of 5 years unless other limitation periods apply.

2.11. Customer Service

Data: Name, email, telephone number and query.
Purpose: Manage your query.
Legal basis: Execution of the contract or pre-contract or consent in case the consultation is not related to any purchase or post-purchase service.
Retention periods: The personal data you provide us will be retained until your enquiry is completed, unless there is another legitimate basis for retaining it for a longer period of time.

2.12. Physical store customer registration

Data: Name and surname, email, telephone number, postal code.
Purpose: Sending commercial communications by electronic or postal means.
Legal basis: Consent.
Retention periods: The personal data you provide us will be retained as long as you do not request its removal.

2.13. Video surveillance

Data: Image.
Purpose: To ensure the safety of people, property and facilities.
Legal basis: Legitimate interest of the data controller.
Data retention periods: Personal data collected through the video surveillance system will be retained for 30 days from the date the images are collected, unless a longer period is established by legal regulations.

3.- Recipients of personal data

3.1. Data communication.

COOSY will not communicate the data you provide us unless you authorize it, there is a legal or contractual obligation or unless there is an express judicial request or requirement from authorities of the Security Forces and Corps.

In any case, in order to carry out its activity, COOSY may contract with third parties (natural or legal persons) to provide a service on its own behalf, such as certain courier services that transport and send your order.

3.2. Data Processors.

COOSY may also share your personal data with third-party collaborators who will process it on behalf of and on behalf of our company, as a result of the provision of services that we provide. COOSY, in accordance with the principle of responsibility contained in the GDPR, undertakes to sign the corresponding data processing contracts with suppliers. Specifically, COOSY will contract the provision of services by third-party suppliers who carry out their activity, by way of example and not limitation, in the following sectors: logistics services, financial institutions, multidisciplinary professional services companies, technology service providers, instant messaging service providers, and call center service companies. COOSY will not share your information with third parties located in countries outside the EEA that do not have adequacy decisions from the European Commission or that do not provide adequate guarantees for the transfer of data.

4.- Rights of interested parties

The interested party may exercise, by contacting COOSY SHOP SLU, by means of a request to the email address rgpd@coosy.es or to the address Calle Miguel Yuste 16, 1ª, Madrid, any of the following rights:

Right of access to your personal data
Right to rectification or deletion
Right to restriction of processing
Right to data portability
Right to object to processing
Right not to be subject to automated decision-making, including profiling.

We also inform you, in the event that consent has been granted for a specific purpose, that you have the right to withdraw consent at any time, without affecting the legality of the processing based on consent prior to its withdrawal.

Finally, we inform you of your right to file a claim with the data protection control authority, in particular, with the Spanish Data Protection Agency (Additionally, we inform you that you can contact the Spanish Data Protection Agency to obtain additional information about your rights. ( https://www.aepd.es/es ).

5.- Links to other websites

Our website may contain links to other websites not operated by us. If you click on a third party link you will be redirected to that third party's website. We have no control over, and assume no responsibility for, the privacy policies or practices of third party sites or services.

We encourage you to review the Privacy Policy of every site you visit.

6.- Privacy of the minor

COOSY does not direct its service to anyone under the age of 18.

We do not intend to collect personal information from children under the age of 18. If you are a parent or guardian and are aware that your child or minor under your guardianship has provided us with personal data, please contact us.

Users guarantee the truthfulness and authenticity of the information and data they communicate by virtue of the use of this website. Any false or inaccurate statement that may occur as a result of the information and data provided, as well as any prejudice that such information may cause, shall be the sole responsibility of the users.

If we learn that we have collected personal data from children under the age of 18 without verification that consent was given or authorized by the holder of parental authority or guardianship over the child, we will take steps to remove that information from our servers and reserve the right to discontinue providing the service.

7. Changes to this Privacy Policy

COOSY may update this Privacy Policy at any time. The privacy policy published at the specific time will apply, so we ask you to review it from time to time. In the event that substantial changes are introduced, you will be conveniently informed so that you can be aware of said changes and, if applicable, exercise your rights if you do not agree.

Latest version: January 2025.