top of page

Data protection

1. USER INFORMATION

Grupo Instituto Europeo de Belleza y Estética, as the Data Controller, informs you that, in accordance with the provisions of Regulation (EU) 2016/679 of April 27 (GDPR) and Organic Law 3/2018 of December 5, on Data Protection and Guarantee of Digital Rights (LOPDGDD), we will process your data as reflected in this Privacy Policy.

In this Privacy Policy, we describe how we collect your personal data and why we collect it, what we do with it, with whom we share it, how we protect it, and your options regarding the processing of your personal data.

This Policy applies to the processing of your personal data collected by the company for the provision of its services. By accepting the measures of this Policy, you agree that we process your personal data as defined herein.

​

2. CONTACT DETAILS

Company name: Grupo Instituto Europeo de Belleza y Estética
Trade name: Japanese Head Spa
Tax ID (CIF): B09783143
Address: Calle La Hoz 17, 29002 Málaga, Spain
Email: hola@japaneseheadspa.es

​

3. KEY PRINCIPLES

  • Lawfulness: We will only collect your personal data for specific, explicit, and legitimate purposes.

  • Data Minimization: We limit the collection of personal data to what is strictly relevant and necessary for the purposes for which it is collected.

  • Purpose Limitation: We will only collect your personal data for the declared purposes and only according to your wishes.

  • Data Security: We apply appropriate and proportionate technical and organizational measures to the risks to ensure that your data is not subject to damage such as unauthorized disclosure or access, accidental or unlawful destruction, accidental loss or alteration, or any other form of unlawful processing.

  • Access and Rectification: We provide the means for you to access or rectify your data whenever you deem it appropriate.

  • Storage: We retain your personal data lawfully and appropriately and only for as long as necessary for the purposes for which it was collected.

  • International Transfers: When your data is to be transferred outside the EU/EEA, it will be adequately protected.

  • Third Parties: Access to and transfer of personal data to third parties are carried out in accordance with applicable laws and regulations and with appropriate contractual safeguards.

  • Direct Marketing and Cookies: We comply with applicable legislation regarding advertising and cookies.

​

4. COLLECTION AND PROCESSING OF YOUR PERSONAL DATA

The types of data that may be requested and processed are:

  • Identifying data.

We also automatically collect data about your visit to our website as described in our cookie policy.

Whenever we request your personal data, we will clearly inform you which data we collect and for what purpose. In general, we collect and process your personal data in order to:

  • Provide information, services, products, relevant updates, and news in the sector.

  • Send communications.

​

5. LEGAL BASIS

In accordance with applicable data protection regulations, your personal data may be processed provided that:

  • You have given us your consent for the purposes of the processing — you may withdraw your consent at any time.

  • It is required by law.

  • There is a legitimate interest that is not overridden by your privacy rights, such as sending commercial information via our newsletter or because you are a customer.

  • It is necessary for the provision of one of our services under a contractual relationship between you and us.

​

6. DISCLOSURE OF PERSONAL DATA

Data may be communicated to companies related to Aida García Bueno for the provision of various services in their capacity as Data Processors. The company will not make any transfers, except when required by law.

​

7. YOUR RIGHTS

Regarding the collection and processing of your personal data, you may contact us at any time to:

  • Access your personal data and any other information indicated in Article 15.1 of the GDPR.

  • Rectify your personal data if it is inaccurate or incomplete, in accordance with Article 16 of the GDPR.

  • Delete your personal data, in accordance with Article 17 of the GDPR.

  • Restrict the processing of your personal data, in accordance with Article 18 of the GDPR.

  • Request the portability of your data, in accordance with Article 20 of the GDPR.

  • Object to the processing of your personal data, in accordance with Article 21 of the GDPR.

If you have given consent for a specific purpose, you have the right to withdraw your consent at any time without affecting the lawfulness of the processing based on consent prior to its withdrawal.

You may exercise these rights by sending a written and verified request to hola@japaneseheadspa.es.

You also have the right to file a complaint with the competent Supervisory Authority (www.aepd.es) if you consider that the processing does not comply with current regulations.

​

8. LEGAL INFORMATION

The requirements of this Policy supplement, and do not replace, any other existing legal requirements under applicable data protection laws, which shall prevail in any case.

This Policy is subject to periodic review, and the company may modify it at any time. When this occurs, we will notify you of any changes and ask you to review the latest version of our Policy and confirm your acceptance.

 

bottom of page