Privacy policy
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), we inform you about the processing of personal data collected through this website.
1. Data controller
- Controller: Ametzak Peluquería y Estética
- Address: Maurice Ravel Etorb., nº2 · Uribarri · 48007 Bilbao, Bizkaia
- Email: info@ametzak.g44.es
- Telephone: 946 640 521
2. Purposes of processing
We process the data provided by the User for the following purposes:
- Handling requests for information, quotes or appointments.
- Answering enquiries sent by email, telephone or WhatsApp.
- Complying with legal obligations applicable to the sector.
- Sending commercial communications or newsletters, only if the User expressly authorises it.
3. Legal basis
The legal basis for processing is the User’s consent and the performance of the contractual or pre-contractual relationship arising from the request for services. For the newsletter, the legal basis is express consent, which may be withdrawn at any time.
4. Data retention
Data will be kept for as long as necessary to fulfil the purpose for which it was collected and, where applicable, for the applicable legal periods.
5. Recipients and transfers
Data will not be disclosed to third parties unless legally required. It may be processed by service providers (web hosting, messaging tools) acting as data processors, under the corresponding confidentiality agreements.
6. User rights
The User may at any time exercise the rights of access, rectification, erasure, objection, restriction and portability by sending an email to info@ametzak.g44.es, stating the right they wish to exercise and attaching a copy of a document proving their identity.
The User may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if they consider that the processing does not comply with the regulations.
7. Security
We have adopted the technical and organisational measures necessary to guarantee the security and integrity of personal data and prevent its alteration, loss or unauthorised processing.
