Privacy Policy
Privacy is of the utmost importance to Serenity Nerja Spa, and we are committed to maintaining an open and transparent approach when processing your personal data. We therefore have a policy in place that sets out how your personal data is processed and protected.
Who is the data controller?
Serenity Nerja Spa
Company name: MALAGA SPA SL
Tax Identification Number: B56259583
Address: Azahara Building, C. Mérida, Unit 8, 29780 Nerja, Málaga
Email: serenitynerjaspa@gmail.com
Why do we process your personal data?
At Serenity Nerja Spa, we process the information provided to us by data subjects for the purposes of carrying out the administrative, accounting and tax management of the services requested, as well as sending marketing communications about our products and services, for which you have given your consent.
How long will we keep your data?
The data will be retained for as long as the business relationship continues and, where applicable, for the number of years necessary to comply with any applicable legal obligations.
What is the legal basis for the processing of your data?
We set out the legal basis for the processing of your data below:
• Performance of a contract: Provision of the requested services
• Consent of the data subject: Sending marketing communications.
To whom will your data be disclosed?
Your data will only be disclosed to third parties for whom we have duly obtained your consent, and in order to comply with legal obligations.
Data transfers to third countries
YES, to countries outside the European Union
What are your rights when you provide us with your personal data?
Anyone has the right to obtain confirmation as to whether or not we at Serenity Nerja Spa are processing personal data relating to them.
Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its erasure when, amongst other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, data subjects may request that the processing of their data be restricted, in which case we will only retain it for the purpose of establishing or defending legal claims.
In certain circumstances and for reasons relating to their particular situation, data subjects may object to the processing of their data. In this case, Serenity Nerja Spa will cease processing the data, except where there are compelling legitimate grounds, or for the purposes of establishing, exercising or defending legal claims.
You may exercise your rights in practice as follows: by contacting the data controller at the email address given above, attaching a copy of your national identity card or other identity document.
If you have given your consent for a specific purpose, you have the right to withdraw that consent at any time, without this affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
If you feel that your rights regarding the protection of your personal data have been infringed, particularly if you have not received a satisfactory response when exercising your rights, you may lodge a complaint with the relevant Data Protection Supervisory Authority via its website: WWW.AEPD.ES
How did we obtain your data?
The personal data we process at Serenity Nerja Spa has been provided directly by the data subject. The categories of data processed are:
• Personal details
• Postcodes and email addresses
• Business information