Privacy Policy

Face Atelier Spain, S.L., hereinafter Amarama, works to ensure the privacy of your personal data. We have updated our Privacy Policy to clearly explain how we collect, use, and safeguard the data of individuals who contact our Center:

Data Controller

Any data subject who provides personal data to Amarama through our website or by other means (e.g., social media) is hereby informed that the data is processed by:

Face Atelier Spain, S.L.

Tax ID: B-65026403

Registered office: Calle Córcega, 173, Bajos, 08036 Barcelona.

Phone: 93 410 30 03

Email: amarama@amarama.es

Data Protection Officer

We also inform you that we have a Data Protection Officer (DPO) who ensures compliance with data protection regulations. The contact details of our DPO are:

Email: szamora@icab.cat

Purposes of Data Processing

At Amarama, we process data for the following purposes, depending on why you have provided it to us:

• To contact the sender of the information, respond to their request, inquiry or consultation, and provide follow-up.
• To manage the provision of requested services, including billing and collection.
• To manage the purchase of products, either in person at our Center or online.
• To manage user registrations on the website and assign logins.
• To manage the Newsletter database for sending commercial communications and corporate updates.
• To manage appointment requests, whether regular or urgent, with our professionals for the specialties listed on our website.
• All purposes are related to the Center’s main objective: providing aesthetic services and products, such as facial and body cleansing, massages, hydrating and contouring treatments, laser hair removal, treatment monitoring, record management, statistics, and other related services.

Duration of Data Processing

• Data related to customer relations and billing will be retained for as long as the service is active. Once the relationship ends, data may be stored for the legally required period and until any liabilities expire.
• Data for inquiries and requests will be kept for as long as needed to respond, with a maximum of one year or while mutual interest exists, including for statistical and historical purposes.
• In the absence of specific timeframes, data will be retained while the relationship between the Center and the client continues.
• Data used for sending commercial communications and profiling will be stored indefinitely until the user requests removal.

Legal Basis for Processing

• The legal basis for processing your data for the above purposes is the execution of the service, sale of products, or related contract.
• Data will be retained while mutual interest exists — whether due to an active contract, service, or consent. Additionally, data may be retained to comply with sector-specific legal obligations and statutory deadlines.
• The clear and affirmative consent of the data subject.

However, please remember you have the right to object to this processing through any of the methods described in this Policy.

Data Disclosure

Your data may be disclosed to the following entities:

• To our partners and suppliers essential for providing the service (software providers, web services, shipping companies for e-commerce orders).
• To regular collaborators for services not provided directly by us, but recommended due to their professionalism.
• To financial institutions involved in billing and payments.
• To public authorities, where legally required and for the defined purposes.

Your Rights

Everyone who provides us with data has the following rights:

• Customers may exercise the right to access, rectify, oppose, or erase their data by contacting us at the addresses provided (physical location, email, or via our website). They may also request data portability, restrict processing where applicable, or object to specific processing activities.
• The requester must prove their identity by providing a valid copy of their ID.
• The data subject has the right to withdraw their consent at any time.
• Lastly, data subjects have the right to lodge a complaint with the Spanish Data Protection Agency or another relevant authority. Website: www.aepd.es

International Transfers

Your data will not be transferred outside the European Union. If such a transfer is required, your explicit consent will be obtained.

Third-Party Data

If you provide data on behalf of third parties, you accept the responsibility of informing them beforehand, in accordance with Article 14 of the GDPR and its conditions.

Data Updates

If your data changes or you find inaccuracies, please notify us so we can update our records accordingly.

January 27, 2021