PRIVACY POLICY OF THE WEBSITE

spaziobodywork.com

I. PRIVACY POLICY AND DATA PROTECTION

In compliance with current legislation, Spazio Bodywork (hereinafter also referred to as the “Website”) commits to adopting the necessary technical and organizational measures appropriate to the level of security required for the collected data.

Laws Incorporated into This Privacy Policy

This privacy policy complies with Spanish and European regulations on personal data protection on the internet. Specifically, it adheres to the following laws:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of individuals concerning the processing of personal data and the free movement of such data (GDPR).
• Organic Law 3/2018 of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
• Royal Decree 1720/2007 of December 21, which approves the Regulation for the development of Organic Law 15/1999 of December 13, on the Protection of Personal Data (RDLOPD).
• Law 34/2002 of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the Data Controller

The data controller for personal data collected on Spazio Bodywork is Sandra Lacanna, with NIF X6020244V (hereinafter, the “Data Controller”).

Contact information:

• Address: Polígono 4 Parcela 132 – 07300 Inca – Baleares (GB Son Bordills 7, Inca 07300 Inca – Baleares)
• Phone: 693 059 088
• Email: info@spaziobodywork.com

Personal Data Registration

In compliance with the GDPR and LOPD-GDD, we inform you that personal data collected by Spazio Bodywork through the forms on this website will be incorporated into our database to facilitate, fulfill, and execute the commitments established between Spazio Bodywork and the User or to respond to requests or inquiries.

Unless an exception applies under Article 30.5 of the GDPR, a record of processing activities will be maintained, specifying the processing activities carried out according to their purpose and the corresponding circumstances established by the GDPR.

Principles Applied to the Processing of Personal Data

The processing of User personal data will be subject to the following principles as established in Article 5 of the GDPR and Article 4 and following of Organic Law 3/2018 on Data Protection and Digital Rights Guarantee:

• Principle of lawfulness, fairness, and transparency: User consent will always be required after being transparently informed of the purposes for which personal data is collected.
• Principle of purpose limitation: Personal data will be collected for specific, explicit, and legitimate purposes.
• Principle of data minimization: Only strictly necessary personal data will be collected.
• Principle of accuracy: Personal data must be accurate and kept up to date.
• Principle of storage limitation: Personal data will be kept only as long as necessary for processing purposes.
• Principle of integrity and confidentiality: Personal data will be processed securely to guarantee its confidentiality.
• Principle of proactive accountability: The Data Controller is responsible for ensuring compliance with these principles.

Categories of Personal Data

The only personal data processed by Spazio Bodywork is identifying information. No special categories of personal data, as defined in Article 9 of the GDPR, are processed.

Legal Basis for Processing Personal Data

The legal basis for processing personal data is consent. Spazio Bodywork commits to obtaining explicit and verifiable consent from Users for the processing of their data for one or more specific purposes.

The User has the right to withdraw consent at any time, and withdrawal will not affect the legality of prior processing.

If Users are required to provide data via forms for inquiries, requests for information, or other website interactions, they will be informed whether completing the fields is mandatory to fulfill the intended action.

Purpose of Personal Data Processing

Personal data is collected and managed by Spazio Bodywork to facilitate, fulfill, and execute commitments between the Website and the User or to respond to inquiries.

Additionally, data may be used for personalization, operational, and statistical purposes, as well as for marketing research to tailor content to Users and improve website quality, functionality, and navigation.

At the time of data collection, the User will be informed of the specific purposes for which the data will be used.

Retention Period for Personal Data

Personal data will only be stored for the minimum period necessary to fulfill the purposes for which it is processed and, in any case, for 18 months, or until the User requests its deletion.

Users will be informed at the time of data collection about the retention period or the criteria used to determine it.

Recipients of Personal Data

Personal data may be shared with the following entities:

• Trade Name: WEBEMPRESA
• NIF/CIF: B65739856
• Address: C/ Almagro 11 6º 7ª 1, 28010 Madrid (Spain)

If data is transferred to third countries or international organizations, Users will be informed about the recipient entity and whether an adequacy decision exists.

Personal Data of Minors

According to Articles 8 of the GDPR and 7 of Organic Law 3/2018, only individuals aged 14 or older can provide lawful consent for their data to be processed by Spazio Bodywork.

For minors under 14 years old, parental or guardian consent is required.

Security and Confidentiality of Personal Data

Spazio Bodywork commits to adopting necessary security measures to protect personal data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

The website uses an SSL certificate (Secure Socket Layer), ensuring that personal data is transmitted securely and confidentially.

However, given the nature of the internet, Spazio Bodywork cannot guarantee absolute security. Users will be notified without undue delay if a personal data breach occurs that poses a high risk to their rights.

All personal data will be treated confidentially, and Spazio Bodywork ensures compliance with confidentiality obligations by employees and associated parties.

User Rights Over Their Data

Users may exercise the following rights under the GDPR and Organic Law 3/2018:

• Right of access: Users can request confirmation of whether their data is being processed.
• Right of rectification: Users can request the correction of inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”): Users can request the deletion of their data under certain conditions.
• Right to restrict processing: Users can request the restriction of processing in specific situations.
• Right to data portability: Users can request their data in a structured, machine-readable format.
• Right to object: Users can object to data processing at any time.
• Right not to be subject to automated decisions: Users have the right to not be subject to automated decision-making, including profiling.

To exercise these rights, Users may submit a written request with the subject “GDPR – spaziobodywork.com”, including:

1. Name, surname, and a copy of ID or passport.
2. Specific request and purpose.
3. Address for notifications.
4. Date and signature.
5. Supporting documents for the request.

Requests should be sent to:

• Postal Address: Polígono 4 Parcela 132 – 07300 Inca – Baleares (GB Son Bordills 7, Inca 07300 Inca – Baleares)
• Email: info@spaziobodywork.com

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

By using this Website, the User agrees to this Privacy Policy. Spazio Bodywork reserves the right to modify the policy in accordance with legal updates. Users are encouraged to review it periodically.

This Privacy Policy complies with Regulation (EU) 2016/679 and Organic Law 3/2018.