The Oddity Supplements SL (hereinafter The Oddity), in compliance with the European General Data Protection Regulation 679/2016, guarantees the protection and confidentiality of personal data of any kind, provided by our customers, the "users", on the Website.

Basic Information

Under Article 13 of the European General Data Protection Regulation (GDPR), The Oddity, as the Data Controller responsible for processing the data, informs you of the following relevant aspects:

Additional Information

The Oddity, is the data controller responsible for the processing of the personal data that it collects and processes, making available the following means of communication by which it can be contacted:

The Oddity Supplements SL with NIF [Tax Identification Number] B67888917 with registered address at C/ Pic de Peguera 11, 17003 Girona, and email: hello@theoddity.eu  

Scope of the Policy

When you access and use our website www.theoddity.eu/, you agree to accept this privacy policy, as well as the provisions contained in the Legal Notice and Cookies policy.

At The Oddity we provide you with the information so that, prior to the recording of your personal data, you can access the Privacy Policy and any other relevant information on data protection.

Similarly, the present policy serves to provide additional, second level information, regarding those informative clauses that redirect to the same, for such purposes.

Purposes of Processing

The Oddity will process the information that you provide to us for the following purposes:

• Manage any type of order, suggestion or request regarding our professional services that you ask of us.
• Commercial communications: processing of your data in order to inform you of articles of interest and general information about our services via email.
• Administrative, accounting and fiscal management.
• Manage data provided by candidates for a job vacancy provided through Curriculum Vitae (CV), for the purposes of the selection process. You expressly authorise The Oddity to proceed with the processing of your data for the indicated purpose.

The Oddity will process your data and information provided for the selection process with the strictest confidentiality, adopting the necessary technical and organisational measures to avoid loss, misuse, alteration and/or unauthorised access.

Retention Period of Your Data

The retention period for personal data will vary depending on the service that may be contracted or provided.

In any case, it will be the minimum necessary, being retained according to the circumstances that apply in each case, and the current legislation.

Legal Basis

The legal basis for the processing of the data is the consent of the interested persons for the processing and management of any request for information or consultation about our professional services, as well as for the sending of commercial communications carried out by The Oddity and when such processing is necessary for the execution of a contract.

Source of the Data

All personal data that we process through our website come directly from the interested party.

Rights

The Oddity, in compliance with the European regulations on data protection - commonly known as GDPR – we inform you of the rights you have as the owner and subject of the personal data we collect and process, which includes the following rights:

• You have the right to withdraw, free of charge and at any time, the consent granted for the processing of your personal data.
• You have the recognised right of access to your personal data as well as the right to rectification of the same.
• You have the right to object to the processing of your personal data, as well as the right to deletion, commonly referred to as the right to be forgotten. Similarly, you have the right to object to the processing for individual automated decisions.
• You have the right to restrict the processing of personal data.
• You have the right to request the portability of your personal data.
• You have the right to file a complaint with the appropriate Data Protection Control Authority, this being the Agencia Española de Protección de Datos (Spanish Agency for Data Protection, agpd.es).

The abovementioned recognised rights may be exercised by means of a request sent via email to hello@theoddity.eu or through the contact methods that we have made available, indicating, in the subject heading of the message or communication, the reference: GDPR Rights. Similarly, if in order to process this request, we require additional information in order to prove the identity of the person exercising such rights linked to the processing of personal data, the provision of additional or documentary information proving the identity of the affected or interested party exercising the right in question will be necessary.

Withdrawal

The Oddity, under Directive 2002/58/EC in relation to the services of the information society and the possibility of sending promotional or advertising communications by electronic means, incorporates or facilitates mechanisms by which the recipients of such communications, simply and at no cost, may withdraw the consent granted for the purpose of sending the same, complying fully with European and national regulations regarding such matters.

Security Measures

The Oddity, adopts organisational and technical measures in order to guarantee the security of personal data and to prevent its alteration, loss, treatment or unauthorised access, taking into account the state of the technology, the nature of the data stored and the risks to which it is exposed, whether such risks arise from human action or from the physical or natural environment.

Cookies Policy

A "Cookie" is a small file that is stored on the user's computer and allows us to recognise you. The set of "cookies" helps us improve the quality of our website, allowing us to check which pages our users find useful and which they do not.

Cookies are essential for the functioning of the internet, providing innumerable advantages in the provision of interactive services, facilitating navigation and usability of our website. Please bear in mind that cookies cannot damage your computer and that they are activated in order to help us identify and resolve errors.

Notice of violation of personal data

In the event that your data is compromised, The Oddity will notify you and the competent supervisory authorities within 72 hours by email with information regarding the extent of the violation, the data affected, any impact on the service and the action plan by The Oddity which will include the measures to protect the data and limit any possible negative effect on the interested parties.

The "breach of personal data" refers to a security breach that leads to the destruction, loss, alteration, unauthorised disclosure or access, accidental or illegal, to the personal data transmitted, stored or processed, relating to the provision of the Service.

 This Privacy Policy was last updated on February 9th 2022.