top of page

Privacy Policy

1. USER INFORMATION

Grupo Instituto Europeo de Belleza y Estética, as the Data Controller, informs you that, in accordance with the provisions of Regulation (EU) 2016/679 of April 27 (GDPR) and Organic Law 3/2018 of December 5 on Data Protection and Guarantee of Digital Rights (LOPDGDD), we will process your data as reflected in this Privacy Policy.

In this Privacy Policy, we describe how we collect your personal data and why we collect it, what we do with it, with whom we share it, how we protect it, and your options regarding the processing of your personal data.

This Policy applies to the processing of your personal data collected by the company for the provision of its services. If you accept the measures of this Policy, you agree that we process your personal data as defined herein.

​

2. CONTACT INFORMATION

Company Name: Grupo Instituto Europeo de Belleza y Estética
Trade Name: Japanese Head Spa Málaga
Tax ID (CIF): B09783143
Address: Calle La Hoz 17, 29002 Málaga
Email: hola@japaneseheadspa.es

​

3. KEY PRINCIPLES

  • Lawfulness: We only collect your personal data for specific, explicit, and legitimate purposes.

  • Data Minimization: We limit the collection of personal data to what is strictly relevant and necessary for the purposes for which it was collected.

  • Purpose Limitation: We only collect your personal data for the stated purposes and only according to your wishes.

  • Data Security: We apply appropriate and proportional technical and organizational measures to the risks in order to ensure that your data is not subject to damage such as unauthorized disclosure or access, accidental or unlawful destruction, accidental loss or alteration, or any other form of unlawful processing.

  • Access and Rectification: We provide the means for you to access or correct your data whenever you deem appropriate.

  • Storage: We retain your personal data lawfully and appropriately and only for as long as necessary for the purposes for which it was collected.

  • International Transfers: When your data may be transferred outside the EU/EEA, it will be properly protected.

  • Third Parties: Access to and transfer of personal data to third parties are carried out in accordance with applicable laws and regulations and with appropriate contractual safeguards.

  • Direct Marketing and Cookies: We comply with applicable laws regarding advertising and cookies.

​

4. COLLECTION AND PROCESSING OF YOUR PERSONAL DATA

The types of data that may be requested and processed are:

  • Identifying information.

We also automatically collect data about your visit to our website as described in our cookie policy.

Whenever we request your personal data, we will clearly inform you which data we collect and for what purpose. In general, we collect and process your personal data for the purpose of:

  • Providing information, services, products, relevant updates, and news in the sector.

  • Sending communications.

​

5. LEGAL BASIS

In accordance with data protection regulations, your personal data may be processed when:

  • You have given us your consent for the purposes of the processing — you may, of course, withdraw your consent at any time.

  • Required by law.

  • There is a legitimate interest that is not overridden by your privacy rights, such as sending commercial information through our newsletter or because you are a customer.

  • It is necessary for the provision of any of our services through a contractual relationship between you and us.

​

6. DISCLOSURE OF PERSONAL DATA

Data may be communicated to companies related to Aida García Bueno for the provision of various services in their capacity as Data Processors. The company will not transfer data to third parties except when required by law.

​

7. YOUR RIGHTS

In relation to the collection and processing of your personal data, you may contact us at any time to:

  • Access your personal data and any other information indicated in Article 15.1 of the GDPR.

  • Correct your personal data if it is inaccurate or incomplete, in accordance with Article 16 of the GDPR.

  • Delete your personal data in accordance with Article 17 of the GDPR.

  • Restrict the processing of your personal data in accordance with Article 18 of the GDPR.

  • Request the portability of your data in accordance with Article 20 of the GDPR.

  • Object to the processing of your personal data in accordance with Article 21 of the GDPR.

If you have given your consent for a specific purpose, you have the right to withdraw it at any time, without affecting the lawfulness of the processing based on the consent before its withdrawal.

You may exercise these rights by sending a written, motivated, and verified request to hola@japaneseheadspa.es.

​

You also have the right to file a complaint with the competent Supervisory Authority (www.aepd.es) if you believe that the processing does not comply with current regulations.

​

8. LEGAL NOTICE

The requirements of this Policy supplement, and do not replace, any other existing legal requirements under applicable data protection laws, which shall prevail in any case.

This Policy is subject to periodic review, and the company may modify it at any time. When this occurs, we will notify you of any changes and ask you to review the latest version of our Policy and confirm your acceptance.

 

bottom of page