Booking

Privacy Policy

WellnessCanarias

/

Privacy Policy

Privacy Policy

Privacy Policy

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (GDPR), and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD), we inform you of the following:

1. Data controller

Dragomed Galenos SL
CIF (Tax ID): B-38757464
Address: Calle Doctor Francisco Trujillo De Castro Nº 2, 3B, CP 38001, Santa Cruz de Tenerife, Spain
Email: Martabelen@mbestcare.com
Website: www.wellnesscanarias.com

2. Purpose of data processing

At Wellness Canarias, we process the information provided by interested parties for the following purposes:

  • Booking and service management: To process and manage bookings for wellness, massage and spa services contracted through our website or other means of contact.
  • Payment processing: To process payments made through the payment gateway (Redsys) for contracted services.
  • Customer communication: To respond to enquiries, information requests, booking modifications or cancellations made via email, WhatsApp or contact forms.
  • Sending commercial communications: Only when the user has given express consent, we may send information about our services, promotions and news.
  • Compliance with legal obligations: To comply with applicable legal, tax and accounting obligations.

3. Legal basis for processing

The legal basis for processing your personal data is:

  • Performance of a contract: Processing is necessary for the provision of contracted services (bookings, payments, appointment management).
  • Consent of the data subject: For the sending of commercial communications and the use of non-essential cookies.
  • Legitimate interest: For the improvement of our services and internal business management.
  • Legal obligation: For compliance with applicable tax and legal obligations.

4. Personal data we collect

The personal data we may collect includes:

  • Identification data: Name, surname, email address, telephone number.
  • Booking data: Type of service, date, time, specific treatment preferences.
  • Payment data: Your bank card details are processed directly by the secure payment gateway Redsys and are not stored on our servers.
  • Browsing data: IP address, browser type, pages visited and data collected through cookies (see our Cookie Policy).

5. Data retention period

Personal data will be kept for the time necessary to fulfil the purpose for which it was collected and to determine any possible liabilities arising from that purpose and the processing of the data. Specifically:

  • Customer and booking data: Will be kept during the contractual relationship and, once concluded, for the legally established periods to address possible liabilities (5 years under the Civil Code).
  • Tax data: Will be kept for 4 years in accordance with current tax legislation.
  • Commercial communications data: Until the user revokes their consent.

6. Data recipients

Your personal data may be disclosed to the following recipients:

  • Redsys: Payment gateway for the secure processing of card transactions. Redsys Privacy Policy.
  • Google (Google Tag Manager / Analytics): For statistical analysis of website usage. Google Privacy Policy.
  • Public authorities: When there is a legal obligation to disclose data (Tax Agency, etc.).

No international data transfers outside the European Economic Area will be made, except those arising from the use of Google services, which have adequate safeguards under the GDPR.

7. User rights

As the holder of personal data, you have the right to:

  • Right of access: To know whether we are processing your personal data and, if so, to obtain information about it.
  • Right to rectification: To request the modification of your personal data when it is inaccurate or incomplete.
  • Right to erasure: To request the deletion of your personal data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
  • Right to object: To object to the processing of your personal data in certain circumstances.
  • Right to restriction of processing: To request the restriction of the processing of your data in certain cases.
  • Right to data portability: To receive your personal data in a structured, commonly used and machine-readable format, and to transmit it to another controller.
  • Right not to be subject to automated decisions: Not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or significantly affects you.

To exercise any of these rights, you can contact us through:

  • Email: Martabelen@mbestcare.com
  • Post: Calle Doctor Francisco Trujillo De Castro Nº 2, 3B, CP 38001, Santa Cruz de Tenerife, Spain

We will respond within a maximum period of 30 days from receipt of the request. You must accompany your request with a copy of your ID or equivalent identification document.

8. Right to lodge a complaint

If you consider that the processing of your personal data does not comply with current regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD):

  • Website: www.aepd.es
  • Address: C/ Jorge Juan 6, 28001 Madrid, Spain
  • Phone: +34 901 100 099 / +34 91 266 35 17

9. Security measures

At Wellness Canarias, we have adopted the necessary technical and organisational measures to guarantee the security of your personal data and prevent its alteration, loss, unauthorised processing or access, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed.

Security measures adopted include:

  • SSL/TLS encryption in all web communications.
  • Payment processing through the secure Redsys gateway (card details are never stored on our servers).
  • Restricted access control to personal data.
  • Regular backups.

10. Changes to the privacy policy

Wellness Canarias reserves the right to modify this privacy policy to adapt it to legislative or jurisprudential developments, as well as to industry practices. In such cases, we will announce the changes introduced on this page with reasonable notice before their implementation.

We recommend reviewing this policy periodically to stay informed about how we protect your personal data.