Your cart

Your cart is empty

Continue shopping

Privacy policy

Purpose and Legal Framework

This Policy explains how Mesosystem - Investimentos, LDA (operating as MCCM Medical Cosmetics) collects, uses, shares, and protects personal data, in compliance with the GDPR, Law No. 58/2019, and other applicable legislation. It complements the Terms and Conditions and the Cookies Policy.

Data Protection Officer

Mesosystem - Investimentos, LDA (MCCM Medical Cosmetics) – NIPC 516445863
Domiciled at: Rua da Gandra, Lote 10, 4805-017 Caldas das Taipas, Guimarães, Portugal
Contact: info@mesosystem.com

Platform Users, Customers, and Prospective Customers

Below is a description of the personal data that may be collected, the purpose of its processing, and the legal basis for processing.

PROCESSED DATA

  • Sensitive Data: Skin type.

  • Identification Data: First name, last name, identification document number, address (city, country, postal code), date and place of birth.

  • Academic and Professional Data: Profession, level of education, professional experience, company name, and identification as a healthcare professional.

  • Contact Data: Email address and telephone number.

  • Financial Data: Bank details and financial information.

PURPOSES OF PERSONAL DATA PROCESSING

  • Ensure the security of the service and manage inquiries, information requests, or complaints submitted via the Contact Form.

  • Manage participation through comments on blogs and social networks (Facebook, LinkedIn, and Instagram).

  • Processing may also include sending commercial communications, advertisements, product promotions, and newsletters, with the user’s prior and explicit consent (obtained via acceptance of the MCCM Club Terms and Conditions).

  • MCCM Medical Cosmetics may create a commercial profile based on the provided information. No automated decisions will be made based on this profile.

  • If registration occurs via social login, access to personal data is limited to the user’s consent on the relevant social network. Actions and data processing by these social networks are governed by their respective privacy policies.

LEGAL BASIS FOR PERSONAL DATA PROCESSING

  • In general, the legal basis legitimizing MCCM Medical Cosmetics’ data processing is compliance with legal obligations, public interest, or exercise of public authority.

  • Processing for commercial communications and newsletters requires the explicit consent of the data subjects, obtained through a clear affirmative action and revocable at any time.

  • Other processing activities are legitimized by the company’s legitimate interest in responding to requests, managing inquiries, and sending communications related to the contracted services.

Collection of Personal Data and Record of Processing

MCCM Medical Cosmetics processes personal data lawfully, fairly, and transparently, limiting purposes to those for which the data was collected. Collected data is integrated into the company’s processing records and will be processed confidentially, ensuring adequate security for protection.

Data Sharing and International Data Transfer

  • Data will not be disclosed to third parties, except as provided by law.

  • However, data may be shared with distributors in the user’s country of origin acting as subcontractors. This sharing may involve an International Data Transfer to countries outside the EU/EEA.

  • This operation is safeguarded by the signature of the Standard Contractual Clauses approved by the European Commission, ensuring a full level of security.

Data Retention Period

Personal data will be retained for the period strictly necessary for the purposes for which it was collected, in compliance with legal retention deadlines.
After this period, data will be blocked for provision to competent authorities or for response to complaints and will be deleted after the statutory limitation period expires.

Duty of Confidentiality

MCCM Medical Cosmetics ensures the confidentiality of data processing and the implementation of appropriate technical and organizational security measures.
The company undertakes to apply the necessary security levels to protect data against accidental loss and unauthorized access.
Information will only be disclosed for the strict execution of requests or to comply with legal obligations.

Data Subject Rights (GDPR)

Data subjects have the right to exercise their data protection rights at any time, in accordance with the General Data Protection Regulation (GDPR).
These rights can be exercised by writing to info@mesosystem.com or sending a letter to Rua da Gandra, Lote 10, 4805-017 Caldas das Taipas, Guimarães, Portugal, always using the reference “GDPR Rights”.

The rights that can be exercised are:

  • Right of Access: To request and obtain confirmation on whether personal data is being processed by MCCM Medical Cosmetics, and if so, access detailed information on the purpose of processing, the categories of data, and the recipients.

  • Right to Rectification: To obtain the rectification of inaccurate personal data and to complete incomplete data by submitting a supplementary statement if necessary.

  • Right to Erasure (“Right to be Forgotten”): To request that personal data be deleted without undue delay when it is no longer necessary or when consent is withdrawn.

  • Right to Restrict Processing: To obtain restriction of processing when contesting accuracy, processing is unlawful, or for exercise or defense of rights in legal proceedings.

  • Right to Object: To object at any time, for reasons related to your particular situation, to the processing of personal data, including for direct marketing or profiling purposes.

  • Right to Data Portability: To receive personal data provided to MCCM Medical Cosmetics in a structured, commonly used, and machine-readable format and transmit it to another controller when processing is based on consent or contract.

  • Right not to be Subject to Automated Individual Decisions: To not be subject to decisions based solely on automated processing, including profiling, producing legal effects or similarly significantly affecting the data subject.

Data subjects also have the right to lodge a complaint with the competent supervisory authority. In Portugal, this authority is the Comissão Nacional de Proteção de Dados (CNPD).

E-Commerce

This website includes an e-commerce section.
Personal data requested for registration and purchase will be processed on a proper legal basis, as informed at the time of the transaction and in the General Terms and Conditions of Sale.

Changes to the Privacy Policy

We reserve the right to make changes to this Policy at any time.
If the way personal data is processed changes, this Policy and the corresponding Legal Notice will be updated.
We encourage regular review of these updates.

Additional Information

For more information about the protection and use of your data, please contact info@mesosystem.com.

© 2025 MCCM Medical Cosmetics