Privacy Policy

This is a courtesy translation. The contractual relationship and the applicable law are the Spanish ones: in the event of any discrepancy, the Spanish version of this document prevails.

Data controller

The controller is Julianny Núñez García, NIF (Spanish tax number) 54559264K, with address at Carrer d'Estruc, 12, 08002 Barcelona, España, email annysbeautysalon@gmail.com and telephone +34 676 74 62 80.

Data, purposes and legal basis

We process the data provided in order to handle enquiries, to book and manage appointments, and to process orders, payments, deliveries, invoicing, returns and legal obligations. The legal basis is the performance of the contract or of pre-contractual measures, compliance with legal obligations and, where applicable, consent or legitimate interest.

Recipients and retention

Data may be disclosed only to the providers needed to deliver the service, such as the payment institution, transport companies, technology hosting, professional advisers and public authorities where there is a legal obligation. It will be kept for the duration of the commercial relationship and for the periods required to meet legal responsibilities.

Measuring our advertising

We use Google Ads to find out which adverts lead to bookings. When you book an appointment we tell Google that a booking has taken place, together with the price of the service and an internal identifier for it. That identifier holds none of your details: it is there so the same booking is not counted twice.

Only if you accept cookies do we also add encrypted versions of your email address and phone number: a code your address cannot be reconstructed from, although it does let Google recognise you if it already holds that address. It is used to match your booking to the advert you clicked on when cookies are not enough.

If you do not accept, the tag runs in restricted mode: it sets no cookies, it does not send your email address or your phone number, and Google receives nothing that can identify you.

Where you came from. When you arrive from an advert or from one of our links, we store alongside your booking which advert or which site you came from — an identifier issued by the advertising platform itself, plus the tags on the link. It tells us which campaigns actually bring bookings, and we keep it for 90 days; after that only the aggregate remains (“came from advertising”, “came from Instagram”), which no longer identifies you. The legal basis is our legitimate interest in measuring how well our own advertising works. That data does not leave our systems: it is only shared with Google if you have accepted cookies. If you ask us to erase your data, where you came from is erased along with your booking.

The legal basis for sending your encrypted email address and phone number and for advertising cookies is your consent; for the notice without personal data, our legitimate interest in measuring how well our advertising works. The recipient is Google Ireland Limited, which may process the data outside the European Economic Area under the safeguards provided for by European law. You can withdraw your consent whenever you like from the “Cookie preferences” link at the foot of any page, which also deletes the advertising cookies already set.

Rights

You may request access to, rectification or erasure of your data, or object to, restrict or request the portability of it, by writing to annysbeautysalon@gmail.com and identifying your request. You may also lodge a complaint with the Agencia Española de Protección de Datos (the Spanish data protection authority) at www.aepd.es.

Security and updates

We apply reasonable measures to protect personal data. This policy may be updated when the processing carried out or the applicable obligations change.