Privacy Policy
1. USER INFORMATION
YAISY FERRERA, as Data Controller, informs you that, in accordance with Regulation (EU) 2016/679 of April 27 (GDPR) and Organic Law 3/2018 of December 5 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), your data will be processed as described in this Privacy Policy.
In this Privacy Policy, we describe how we collect your personal data and why we collect it, what we do with it, with whom we share it, how we protect it, and the options you have regarding the processing of your personal data.
This Policy applies to the processing of personal data collected by the company for the provision of its services. By accepting the measures of this Policy, you agree to the processing of your personal data as defined herein.
2. CONTACT
Company name: YAISY FERRERA
Trade name: Japanese Head Spa Tenerife
Address: Calle del Lomo 28 (38400), Puerto de la Cruz
Email: tenerife@japaneseheadspa.es
3. KEY PRINCIPLES
• Lawfulness: We will only collect your personal data for specific, explicit, and legitimate purposes.
• Data Minimization: We limit the collection of personal data to what is strictly relevant and necessary for the purposes for which it has been collected.
• Purpose Limitation: We will only collect your personal data for the stated purposes and in accordance with your wishes.
• Data Security: We apply appropriate and proportionate technical and organizational measures to the risks to ensure that your data does not suffer damage, such as unauthorized disclosure or access, accidental or unlawful destruction, loss, alteration, or any other form of unlawful processing.
• Access and Rectification: We provide means for you to access or rectify your data whenever you deem appropriate.
• Data Retention: We retain your personal data in a lawful and appropriate manner and only for as long as necessary for the purposes for which it was collected.
• International Transfers: If your data is transferred outside the EU/EEA, it will be adequately protected.
• Third Parties: Access to and transfer of personal data to third parties are carried out in accordance with applicable laws and regulations and with appropriate contractual safeguards.
• Direct Marketing and Cookies: We comply with applicable legislation on advertising and cookies.
4. COLLECTION AND PROCESSING OF YOUR PERSONAL DATA
The types of data that may be requested and processed include:
• Identifying data.
We also automatically collect data about your visit to our website as described in the cookie policy.
Whenever we request your personal data, we will clearly inform you of which personal data we collect and for what purpose. In general, we collect and process your personal data for the purpose of:
• Providing information, services, products, relevant information, and updates in the sector.
• Sending communications.
5. LEGAL BASIS
In accordance with applicable data protection regulations, your personal data may be processed when:
• You have given your consent for the processing. You may withdraw your consent at any time.
• There is a legal obligation.
• There is a legitimate interest that is not overridden by your privacy rights, such as sending commercial information through newsletter subscription or due to your status as a client.
• It is necessary for the provision of one of our services through a contractual relationship between you and us.
6. DISCLOSURE OF PERSONAL DATA
Data may be disclosed to companies related to YAISY FERRERA for the provision of various services as Data Processors. The company will not transfer data except when legally required.
7. YOUR RIGHTS
In relation to the collection and processing of your personal data, you may contact us at any time to:
• Access your personal data and any other information indicated in Article 15.1 of the GDPR.
• Rectify inaccurate or incomplete personal data in accordance with Article 16 of the GDPR.
• Request the erasure of your personal data in accordance with Article 17 of the GDPR.
• Request restriction of processing of your personal data in accordance with Article 18 of the GDPR.
• Request data portability in accordance with Article 20 of the GDPR.
• Object to the processing of your personal data in accordance with Article 21 of the GDPR.
If you have given your consent for a specific purpose, you have the right to withdraw that consent at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal.
You may exercise these rights by sending a reasoned and duly identified request to:
tenerife@japaneseheadspa.es
You also have the right to file a complaint with the competent supervisory authority (www.aepd.es) if you believe that the processing does not comply with current regulations.
8. LEGAL INFORMATION
The requirements of this Policy complement and do not replace any other existing requirements under applicable data protection law, which shall prevail in any case.
This Policy is subject to periodic review, and the company may modify it at any time. When this occurs, we will notify you of any changes and ask you to review the most recent version of our Policy and confirm your acceptance.