Política de Privacidad

Privacy Policy

At COSMIC SOUL, we value the energy with which each person approaches our universe.
That’s why we handle your personal data with the utmost respect, care, and transparency, in accordance with Regulation (EU) 2016/679 (GDPR) and Spain’s Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD).

1. Data Controller

Owner: COSMIC SOUL — Vanina Angela Meggiolaro De Cesari
Email: hola@cosmicsoul.es
Address: Palma de Mallorca, Illes Balears, Spain

2. Purpose of Data Processing

We use your personal data to:

  • Respond to your enquiries, requests, or messages sent via our contact form or email.

  • Manage orders placed through our online store.

  • Send you information about our products, workshops, and news (only if you have given your consent).

Your data will not be used for any purposes other than those mentioned above.

3. Legal Basis for Processing

The legal basis for processing your data is your consent, which you provide when you contact us or register on our store.
In the case of online purchases, the processing is also based on the performance of the sales contract.

4. Data Disclosure

We do not share your data with third parties, except when required by law or when necessary to provide our services (for example, courier companies or secure payment platforms).
Under no circumstances do we sell, transfer, or exchange your data with third parties for commercial purposes.

5. Data Retention

We will retain your personal data only for as long as necessary to fulfil the purpose for which it was collected.
For communications or enquiries, the data will be deleted once the matter has been resolved.
For commercial operations, we will retain it for the legally required periods (for example, for tax or accounting obligations).

6. Your Rights

You may exercise your rights at any time:

  • Access: know which personal data we hold about you.

  • Rectification: correct inaccurate or incomplete data.

  • Erasure: request deletion of your data when it is no longer necessary.

  • Restriction: limit how your data is processed in certain cases.

  • Portability: receive your data in an electronic format or request that we transfer it to another controller.

  • Objection: object to the processing of your data, especially for marketing purposes.

You can also withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, please email hola@cosmicsoul.es with the subject “Data Protection”.

If you believe your data is being processed in violation of the law, you may file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

7. Data Security

At COSMIC SOUL, we apply both technical and organisational measures to protect your personal data and prevent its loss, misuse, or unauthorised access.
We treat your information with the same care we put into each of our candles — with attention, respect, and commitment.

8. Policy Updates

This Privacy Policy may be updated periodically to reflect changes in our processes or legal requirements.
Last updated: October 2025