Privacy Policy
In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, we provide you below with all the relevant information on how we process the personal data that you, as a user, share with us.
This Privacy Policy shall apply to data processing carried out by COOSY SHOP, SLU (hereinafter, “COOSY”) through the web platform: www.b2b.coosy.es (hereinafter, the “Website”).
1. Data controller
-Company name: COOSY SHOP, SLU
-NIF: B-94073459
-Registered office: Oliva Street
-Phone: (+34) 91 521 98 72
-Email: rgpd@coosy.es
2. Origin of your data
COOSY will process the data you provide, as well as any other data obtained from your browsing.
3. Data being processed, purpose, legal basis, and length of time we will retain your personal data.
Depending on the type of user, we will process the following data:
3.1. Data Processed:
3.1.1. If the user is a natural person (self-employed/professional):
- Identification data: name, surname, NIF.
- Contact information: address, email, telephone.
- Access credentials: username, password.
- Commercial data: order history, professional activity.
- Bank details: account number.
- Browsing data: (see Cookies Policy[link]).
3.1.2. If the user acts on behalf of a legal entity (company):
- Professional contact information for the representative or contact person: name, surname, email, telephone number.
- Employment data: professional activity.
3.2. Purposes, Legal Basis and Conservation:
3.2.1. REGISTRATION AND ACCESS TO THE WEBSITE
- Purpose: To process your registration and validation as a wholesale customer, as well as to facilitate access to our personalized catalog of products and prices.
- Legal basis: The execution of a contract or pre-contract in which the user is a party.
- Conservation: Until the user ceases to be a wholesale customer of COOSY or decides to unsubscribe from the Website.
3.2.2. ONLINE ORDER MANAGEMENT
- Purpose: To manage online orders, including the processing and sending of quotes, invoices, delivery notes, and commercial documentation, as well as the processing of purchases and returns.
- Legal basis: The execution of a contract in which the user is a party.
- Retention: Until the contractual relationship is maintained, once it has concluded your data will be kept blocked for 5 years until the statute of limitations for civil actions expires, and will then be deleted.
3.2.3. WEB NAVIGATION
- Purpose: To process your website browsing habits to allow you to participate in interactive features of our website when you choose to do so. To compile statistical analysis, research, and profiles based on your browsing habits and interests regarding content, or other valuable information that allows us to improve our website and our service. To detect, prevent, and address technical problems.
- Legal basis: Consent, except for information collected through functional cookies, which is based on the execution of a contract.
- Retention: until you revoke your consent. For more information, see Cookie Policy [link].
3.2.4. SENDING NEWSLETTERS
- Purpose: To send you electronic communications about our products (newsletter, advertising information and brand news, promotions, and exclusive offers) via email.
- Legal basis: Consent, which will be deemed to have been granted by checking the corresponding opt-in box.
- Retention: The personal data you provide will be retained until you unsubscribe, as until then, we will assume that you are still interested in receiving our communications.
4. Communications of personal data
4.1. Data recipients
COOSY will not share the data you provide unless you authorize it, there is a legal or contractual obligation, or unless expressly requested by a court or required by law enforcement authorities.
In any case, in order to carry out its activity, COOSY may contract with third parties (natural or legal persons) to provide certain services on its own behalf, such as certain courier services that transport and ship your order.
4.2. Data Processors
COOSY may also share your personal data with third-party collaborators who will process it on behalf of and on behalf of our company, as a result of the services we provide. COOSY, in accordance with the principle of responsibility set forth in the GDPR, undertakes to enter into the corresponding data processing contracts with its suppliers. Specifically, COOSY will contract the provision of services from third-party suppliers who operate, by way of example and not limitation, in the following sectors: logistics services, financial institutions, multidisciplinary professional services firms, technology service providers, and instant messaging service providers. COOSY will not share your information with third parties located in countries outside the EEA that do not have adequacy decisions from the European Commission or that do not provide adequate safeguards for data transfer.
5. Rights of interested parties
The interested party may exercise, by contacting COOSY SHOP SLU, by means of a request to the email address rgpd@coosy.es or to the address indicated in the header of the policy, any of the following rights:
• Right to access your personal data
• Right to rectification or deletion
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right not to be subject to automated decision-making, including profiling.
We also inform you, if consent has been given for a specific purpose, that you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.
Finally, we inform you of your right to file a complaint with the data protection supervisory authority, specifically with the Spanish Data Protection Agency. Additionally, we inform you that you can contact the Spanish Data Protection Agency for additional information about your rights: https://www.aepd.es/es.
6. Changes to this Privacy Policy
COOSY may update this Privacy Policy at any time. The privacy policy posted at the time will apply, so we ask you to review it periodically. If substantial changes are made, you will be duly informed so that you can be aware of these changes and, where appropriate, exercise your rights if you do not agree.
Latest version: August 2025