Skip to main content

Privacy Policy

1. General Information and Mandatory Information

The operator of this website takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations (in particular the European General Data Protection Regulation GDPR and the Spanish Data Protection Act LOPDGDD) as well as this privacy policy.

When you use this website, various personal data are collected. Personal data is any data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

2. Data Controller

The controller responsible for data processing on this website is:

Galyna Heil
Ruta del Norte 34
35508 Costa Teguise, Lanzarote
Spain

NIF:
Phone / WhatsApp: +49 173 800 05 30

3. Data Collection on Our Website

a) Hosting and Server Log Files

Our website is hosted by IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany). When you visit our website, the provider of the pages automatically collects information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL (the previously visited page)
  • Host name of the accessing computer
  • Time of the server request
  • IP address

This data is technically necessary to display our website to you stably and securely. This data is not merged with other data sources. The legal basis for data processing is Art. 6 (1) (f) GDPR (legitimate interest in the error-free and technically secure provision of the website). We have concluded a data processing agreement (DPA) with IONOS to ensure the protection of your data.

b) Local Hosting of Videos and Fonts (Maximum Privacy)

To maximise the protection of your privacy, this website completely dispenses with the integration of third-party servers for media and design:

Fonts: All fonts used on this website are installed locally on our own server at IONOS. When the page loads, no connection is established to Google servers (Google Fonts) or other providers.

Videos: All treatment videos are stored directly on our own server and are played from there. There is no connection or data transfer to platforms such as YouTube or Vimeo.

Therefore, no data is transferred to unauthorised third parties through these elements when you visit our website.

c) External Links (Google Maps & WhatsApp)

Our website contains plain text links to external services (e.g. for directions on Google Maps). Since these services are not embedded directly into our website, no data is transferred to Google or other platforms during normal loading and browsing on our website. Only when you actively click on the corresponding link do you leave our website, and the data protection regulations of the respective provider apply.

d) No Tracking, No Cookies, No Analytics Tools

This website is structured to be absolutely data-efficient. We do not use any web analysis tools (such as Google Analytics), no advertising pixels (such as the Meta Pixel) and do not use cookies for marketing or tracking purposes. Your browsing behaviour on this page is not evaluated.

4. Contact via WhatsApp

A direct link to our customer service via the WhatsApp messaging service is integrated into our website (https://wa.me/491738000530). If you click on this link and send us a message, we will process your mobile phone number, your name (if stored on WhatsApp) and the content of your message in order to process and answer your enquiry.

Please note that communication via WhatsApp takes place directly via the servers of WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). It cannot be ruled out that data will also be transferred to the parent company Meta Platforms Inc. in the USA.

Data processing is carried out on the basis of your voluntary contact in accordance with Art. 6 (1) (a) GDPR as well as for the performance of pre-contractual measures (appointment requests, consultations) in accordance with Art. 6 (1) (b) GDPR. If you do not wish to use the WhatsApp service, you can, of course, also contact us by phone at any time in the traditional way.

5. Your Rights as a Data Subject

Within the framework of the applicable statutory provisions (GDPR), you have the right at any time to:

  • Access (Art. 15 GDPR): You can request information at any time about what personal data we have stored about you.
  • Rectification (Art. 16 GDPR): You can request the correction of inaccurate data.
  • Erasure (Art. 17 GDPR): You have the right to request the deletion of your data stored by us, provided that no statutory retention obligations conflict with this.
  • Restriction of processing (Art. 18 GDPR): You can request that the processing of your data be restricted or temporarily blocked.
  • Data portability (Art. 20 GDPR): You can request that we transfer your data to you in a commonly used, machine-readable format.
  • Withdrawal of your consent (Art. 7 (3) GDPR): If you have given us consent to process your data (e.g. when contacting us via WhatsApp), you can withdraw this consent at any time with effect for the future.

If you wish to assert any of these rights, a brief message by phone or WhatsApp to the contact details provided above is sufficient.

6. Right to Lodge a Complaint with a Supervisory Authority

In the event of data protection breaches, you have the right to lodge a complaint with the competent supervisory authority. Since the beauty studio is located in Lanzarote, the primary competent authority is the Spanish Data Protection Agency:

Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6
28001 Madrid
Website: https://www.aepd.es