Last updated: May 28, 2026
In compliance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD) and Spanish Law 34/2002 on Information Society Services (LSSI-CE), users are informed of the terms under which their personal data will be processed.
We process the following categories of data depending on the contact channel:
Special categories of data (Art. 9 GDPR) are not deliberately requested or processed.
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| To handle enquiries and requests received via the form, email, WhatsApp or phone. | Art. 6.1.b GDPR — pre-contractual measures at the request of the data subject. |
| Management and confirmation of appointments. | Art. 6.1.b GDPR — performance of a service contract. |
| Compliance with tax and accounting obligations. | Art. 6.1.c GDPR — legal obligation. |
| Statistical measurement of website use (Google Analytics). | Art. 6.1.a GDPR — explicit consent via the cookie banner. |
| Advertising and conversion measurement (Google Ads). | Art. 6.1.a GDPR — explicit consent via the cookie banner. |
Data will not be shared with third parties except as required by law. The following service providers may have access to data as data processors:
Some processors (in particular Google LLC) may process data in the United States. Such transfers take place under the EU-US Data Privacy Framework (European Commission Adequacy Decision of 10 July 2023) and, failing that, under Standard Contractual Clauses approved by the European Commission.
As a data subject, you may exercise the following rights at any time:
To exercise these rights, write to santamalasana@gmail.com or by post to Paseo de las Delicias 3, 28045 Madrid (Spain), with the subject “Data Protection”, attaching a copy of your ID or equivalent document.
If you believe that the processing of your data does not comply with applicable law, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): C/ Jorge Juan, 6 – 28001 Madrid — www.aepd.es.
The Owner implements appropriate technical and organisational measures (encryption in transit via HTTPS, access controls, backups) to ensure the security of personal data and to prevent its alteration, loss or unauthorised access, in accordance with Art. 32 GDPR.
This website uses first-party and third-party cookies. Full details are provided in the Cookies Policy. You can change your preferences at any time by clicking .
The services on this website are intended for persons over 14 years of age. Where data of minors are processed, the consent of the holder of parental authority or guardianship will be required, in accordance with Art. 7 LOPDGDD.
The Owner reserves the right to amend this policy to adapt it to legislative or jurisprudential changes. Amendments will be published on this page together with the update date.
Choose how to book: