Privacy Policy

1. USER INFORMATION

GCV E.S.P.J, as Data Controller, informs you that, in accordance with Regulation (EU) 2016/679 of April 27 (GDPR) and Organic Law 3/2018 of December 5 on Data Protection and Guarantee of Digital Rights (LOPDGDD), we will process your data as described in this Privacy Policy.

In this Privacy Policy, we explain how we collect your personal data and why we collect it, what we do with it, who we share it with, how we protect it, and your options regarding the processing of your personal data.

This Policy applies to the processing of your personal data collected by the company for the provision of its services. By accepting the terms of this Policy, you agree to the processing of your personal data as defined herein.

2. CONTACT

Company name: GCV E.S.P.J
Trade name: Japanese Head Spa Marbella
Tax ID (CIF): E75876649
Address: Nuestra Señora de Gracia 10, local 5 (29602) Marbella, Málaga
Email: marbella@japaneseheadspa.es

3. KEY PRINCIPLES

Lawfulness: We will only collect your personal data for specific, explicit, and legitimate purposes.
Data Minimization: We limit the collection of personal data to what is strictly relevant and necessary for the purposes for which it is collected.
Purpose Limitation: We will only collect your personal data for the stated purposes and according to your preferences.
Data Security: We apply appropriate technical and organizational measures proportionate to the risks to ensure your data is not subject to unauthorized access, disclosure, loss, or alteration.
Access and Rectification: We provide means for you to access or correct your data at any time.
Retention: We retain your personal data lawfully and only as long as necessary for the purposes for which it was collected.
International Transfers: If your data is transferred outside the EU/EEA, it will be adequately protected.
Third Parties: Access to and transfer of personal data to third parties is carried out in accordance with applicable laws and with appropriate safeguards.
Direct Marketing and Cookies: We comply with applicable legislation regarding advertising and cookies.

4. COLLECTION AND PROCESSING OF YOUR PERSONAL DATA

The types of data that may be requested and processed include:

Identifying data

We also automatically collect data about your visit to our website as described in the Cookies Policy.

Whenever we request your personal data, we will clearly inform you of what data we collect and for what purpose. In general, we collect and process your personal data to:

Provide information, services, products, relevant industry updates, and news
Send communications

5. LEGAL BASIS

In accordance with applicable data protection regulations, your personal data may be processed when:

You have given your consent (which you may withdraw at any time)
It is required by law
There is a legitimate interest that does not override your privacy rights (e.g., sending commercial information if you subscribe to our newsletter or are a client)
It is necessary for the performance of a contract between you and us

6. SHARING OF PERSONAL DATA

Your data may be shared with companies related to GCV E.S.P.J for the provision of services, acting as Data Processors. The company will not transfer data to third parties except where legally required.

7. YOUR RIGHTS

Regarding the collection and processing of your personal data, you may contact us at any time to:

Access your personal data and information under Article 15.1 GDPR
Rectify inaccurate or incomplete data (Article 16 GDPR)
Request deletion of your data (Article 17 GDPR)
Restrict processing (Article 18 GDPR)
Request data portability (Article 20 GDPR)
Object to processing (Article 21 GDPR)

If you have given consent for a specific purpose, you may withdraw it at any time without affecting the lawfulness of prior processing.

You can exercise these rights by sending a justified request to: marbella@japaneseheadspa.es

You also have the right to file a complaint with the competent supervisory authority (www.aepd.es) if you believe the processing does not comply with current regulations.

8. LEGAL INFORMATION

The requirements of this Policy complement, and do not replace, any other applicable data protection laws, which shall prevail in all cases.

This Policy is subject to periodic review, and the company may modify it at any time. When this occurs, we will notify you of any changes and ask you to review the latest version and confirm your acceptance.