“Eba Beauty Marbella” is deeply committed to complying with Spanish and European regulations on the protection of personal data and guarantees full compliance with the obligations set forth, as well as the implementation of the security measures stipulated in the General Data Protection Regulation (GDPR) (EU) 2016/679, of April 27, and in Organic Law 3/2018, of December 5, on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD, hereinafter LOPD).
In accordance with these regulations, we inform you that the use of our website may require the provision of certain personal data through contact forms or by sending emails, and that this data will be processed by “Eba Beauty Marbella,” the Data Controller, whose information is as follows
- Company Name: EBA Aesthetic Center, S.L.
- Tax ID (CIF): B56650906
- Registered Address: Avda. de las Naciones Unidas, 127, C.C. Cristamar, 1st Floor, Unit 13 – 29660, Marbella, Málaga – Spain
- Phone Number: 613 438 474
- Email: ebabeautymarbella@gmail.com
Collection and Processing of Personal Data
Personal data is any information relating to an individual: name, email, address, phone number, tax ID (NIF/NIE), etc. Additionally, when a User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by the User’s Internet service provider.
As the Data Controller, “Eba Beauty Marbella” has the duty to inform Users of its website about the collection of personal data that may occur, whether through email or by filling out forms included on the website.
Only the necessary data will be collected to fulfill the contracted service or to appropriately respond to the User’s information request. The data collected is identifying and corresponds to a reasonable minimum required to carry out the intended activity. In particular, no specially protected data is collected at any time. The data will not be used for any purpose other than the one for which it was collected.
Contact Forms/Email
- Purpose: To respond to information requests made through our contact form(s).
- Legal Basis: The legal basis for this processing is the User’s consent, which can be revoked at any time.
- Data Sharing: Personal data will be processed through servers managed by OVH, which will be considered a Data Processor.
Minors
Only individuals over the age of 14 may provide personal data on this website. As required by the LOPD and GDD, in the case of children under 14, parental or guardian consent is mandatory for us to process their personal data.
Furthermore, only individuals over the age of 18 may contract our services. For those under 18, parental or legal guardian consent is required for us to provide the offered services, unless the minor is legally emancipated.
Security Measures
Users of the “Eba Beauty Marbella” website are informed that technical and organizational security measures within our reach have been implemented to prevent the loss, misuse, alteration, unauthorized access, and theft of data. These measures ensure the confidentiality, integrity, and quality of the information contained, in accordance with current data protection regulations. Personal data collected in the forms are processed solely by “Eba Beauty Marbella” personnel or designated Data Processors.
The “Eba Beauty Marbella” website also includes SSL encryption, enabling Users to securely send their personal data through the website’s contact or registration forms.
Accuracy of Data
The User declares that all data provided by them is true and correct and agrees to keep it updated. The User is responsible for the accuracy of their data and is solely accountable for any disputes or conflicts arising from its inaccuracy. It is important for the User to inform “Eba Beauty Marbella” of any changes to their personal data so we can keep it up-to-date.
Data Sharing
“Eba Beauty Marbella” will not transfer or disclose your data to any third party, except in cases provided by law or when strictly necessary to provide a service. Specifically, data may be shared with:
- Technology or IT service providers
- Payment service providers
- Courier and parcel delivery companies
- Third parties or intermediaries, as service providers, who operate on our behalf (e.g., accounting or consulting firms).
Data transfers will be carried out with the strictest confidentiality, using necessary measures such as confidentiality agreements or adherence to the privacy policies established on their respective websites. The User may object to the transfer of their data to Data Processors by submitting a written request through any of the previously mentioned contact methods.
Additionally, when required, Client data may be disclosed to certain authorities in compliance with a legal obligation, such as the Spanish Tax Agency, Labor Inspectorate, etc.
Exercise of User Rights
The LOPD and GDPR grant data subjects the ability to exercise a series of rights related to the processing of their personal data. To do so, the User should contact us via email at ebabeautymarbella@gmail.com, or by written communication to the address listed in our Legal Notice, providing adequate identification. This communication should include the following information: the User’s full name, the purpose of the request, address, and supporting identification documents.
The exercise of rights must be carried out by the User themselves. However, rights may be exercised by a legal representative of the User, provided they supply documentation proving such representation.
The User may request the exercise of the following rights:
- Right to request access to personal data, which is the right to obtain information about whether their personal data is being processed, the purpose of the processing (if applicable), as well as any available information about the origin of such data and any communications made or intended to be made with it.
- Right to request rectification if the personal data is incorrect or inaccurate, or deletion of data that is inadequate or excessive.
- Right to request the restriction of processing, in which case “Eba Beauty Marbella” will retain only the data strictly necessary for the exercise or defense of claims.
- Right to object to processing, which is the right of the data subject to stop the processing of their personal data, or to halt it in cases where their consent is not necessary, for commercial prospecting files, or for making decisions based solely on the automated processing of their data, except when legitimate reasons or the exercise or defense of possible claims require continued processing.
- Right to data portability: if the User wants their data to be processed by another company, “Eba Beauty Marbella” will facilitate data portability in an exportable format.
If consent has been given for a specific purpose, the User has the right to withdraw their consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.
We commit to fulfilling all these rights within the maximum legal period (1 month).
If a User believes there is an issue with how “Eba Beauty Marbella” is handling their data, they may direct their complaints to the Security Officer or the relevant data protection authority, with the Spanish Data Protection Agency being the appropriate authority in the case of Spain.
Data Retention
The personal data of Users who use the contact form or send us an email requesting information will be processed for the time strictly necessary to respond to the information request or until the consent granted is revoked.
The personal data of Clients will be processed until the contractual relationship ends. The retention period for personal data will be the minimum necessary and may be extended up to:
- 4 years: Law on Infractions and Penalties in the Social Order (obligations regarding affiliation, enrollments, terminations, contributions, wage payments…); Articles 66 et seq. of the General Tax Law (accounting records…)
- 5 years: Article 1964 of the Civil Code (personal actions without a specific term)
- 6 years: Article 30 of the Commercial Code (accounting records, invoices…)
- 10 years: Article 25 of the Law on the Prevention of Money Laundering and Terrorist Financing
- No time limit: aggregated and anonymized data.
Social Media
“Eba Beauty Marbella” has profiles on some of the main social media platforms (Facebook, Instagram). The purpose of data processing by “Eba Beauty Marbella” is to inform its followers about its activities, using the tools provided by the respective social media platform, and to offer personalized user support. Users should keep in mind that using these social media platforms is subject to their respective terms of use and privacy policies. “Eba Beauty Marbella” recommends that Users review these terms and privacy policies before using the provided links or applications.
Under no circumstances will “Eba Beauty Marbella” extract data from social media unless it has obtained the User’s express and specific consent to do so. Additionally, “Eba Beauty Marbella” is not responsible for the privacy practices of these social media platforms or their applications, particularly concerning confidentiality, the handling of personal data, and content.
Confidentiality
The information provided by the User will, in all cases, be considered confidential and will not be used for purposes other than those described here. “Eba Beauty Marbella” agrees not to disclose or reveal information regarding the User’s intentions, the reasons for the requested advice, or the duration of their relationship with the User.
Validity
This privacy and data protection policy was drafted on October 31, 2024. It may vary according to changes in legislation and case law, and it is the responsibility of the data owner to read the updated document to understand their rights and obligations at any given time.
