Privacy Policy
This is an English translation provided for convenience. In the event of any discrepancy, the Spanish version prevails.
1. INFORMATION FOR USERS
DOJO Málaga by Japanese Head Spa, as Data Controller, informs you that, in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Spanish Organic Law 3/2018 of 5 December on the protection of personal data and the guarantee of digital rights (LOPDGDD), we will process your data as set out in this Privacy Policy.
In this Privacy Policy we describe how and why we collect your personal data, what we do with it, who we share it with, how we protect it and the choices you have regarding the processing of your personal data.
This Policy applies to the processing of your personal data collected by the company for the provision of its services. If you accept the measures in this Policy, you agree that we may process your personal data as defined in this Policy.
2. CONTACT
Company name: Victor y Ma Jose ESPJ
Trade name: DOJO Málaga Japanese Head Spa
Tax ID (CIF): E55479661
Registered address: Avenida la Paloma 47, 29003, Málaga
Email: [email protected]
3. KEY PRINCIPLES
- Lawfulness: We will only collect your personal data for specified, explicit and legitimate purposes.
- Data minimisation: We limit the collection of personal data to what is strictly relevant and necessary for the purposes for which it was collected.
- Purpose limitation: We will only collect your personal data for the stated purposes and only in accordance with your wishes.
- Data security: We apply technical and organisational measures that are appropriate and proportionate to the risks, to ensure that your data does not suffer harm such as unauthorised disclosure or access, accidental or unlawful destruction, accidental loss or alteration, or any other form of unlawful processing.
- Access and rectification: We provide means for you to access or rectify your data whenever you see fit.
- Retention: We keep your personal data lawfully and appropriately, and only for as long as necessary for the purposes for which it was collected.
- International transfers: where your data is to be transferred outside the EU/EEA, it will be adequately protected.
- Third parties: Access to and transfer of personal data to third parties are carried out in accordance with the applicable laws and regulations and with appropriate contractual safeguards.
- Direct marketing and cookies: We comply with the applicable legislation on advertising and cookies.
4. COLLECTION AND PROCESSING OF YOUR PERSONAL DATA
The types of data that may be requested and processed are:
- Identification data.
We also automatically collect data about your visit to our website as described in the cookie policy.
Whenever we ask for your personal data, we will clearly tell you which personal data we are collecting and for what purpose. In general, we collect and process your personal data in order to:
- Provide information, services, products, relevant information and news from the sector.
- Send communications.
5. LEGAL BASIS
Under the applicable data protection legislation, your personal data may be processed where:
- You have given us your consent for the purposes of the processing. You may, of course, withdraw your consent at any time.
- It is required by law.
- There is a legitimate interest that is not overridden by your privacy rights, such as sending commercial information either because you have subscribed to our newsletter or because you are a customer.
- It is necessary for the provision of any of our services under a contractual relationship between you and us.
6. DISCLOSURE OF PERSONAL DATA
Data may be disclosed to companies related to Maria José y Víctor for the provision of the various services as Data Processors. The company will not disclose data to third parties except where required by law.
7. YOUR RIGHTS
In relation to the collection and processing of your personal data, you may contact us at any time to:
- Access your personal data and any other information referred to in Article 15.1 of the GDPR.
- Rectify your personal data where it is inaccurate or incomplete, in accordance with Article 16 of the GDPR.
- Erase your personal data in accordance with Article 17 of the GDPR.
- Restrict the processing of your personal data in accordance with Article 18 of the GDPR.
- Request the portability of your data in accordance with Article 20 of the GDPR.
- Object to the processing of your personal data in accordance with Article 21 of the GDPR.
If you have given your consent for a specific purpose, you have the right to withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
You may exercise these rights by sending a reasoned and substantiated request to [email protected]
You also have the right to lodge a complaint with the competent supervisory authority, the Spanish Data Protection Agency (www.aepd.es), if you consider that the processing does not comply with the regulations in force.
8. LEGAL INFORMATION
The requirements of this Policy supplement, and do not replace, any other existing requirement under the applicable data protection law, which shall prevail in any case.
This Policy is subject to periodic review and the company may amend it at any time. When this happens, we will notify you of any changes and ask you to read the latest version of our Policy again and to confirm your acceptance.
