Privacy policy
Last updated: 18 September 2026
This is a courtesy translation. These documents are governed by Spanish law, and in the event of any discrepancy the Spanish version prevails.
Here we explain what personal data we collect through this website, what we use it for and what you can do about it, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Act 3/2018 (LOPDGDD).
1. Data controller
- Controller: Laura Victoria González Aranda
- Tax ID (NIF): 53697345G
- Address: Paseo de Sancha nº 10, 29016 Málaga
- Phone: 952 21 31 91
- Email: lauragonar.80@gmail.com
2. What we collect and why
Contact form
We collect your first name, last name (optional), email address and the content of your message, for the sole purpose of dealing with your enquiry or appointment request and replying to you.
- Legal basis: your consent, given by ticking the box on the form before sending it (art. 6.1.a GDPR).
- Retention: as long as needed to reply and, afterwards, for the limitation period of any legal liability. You can ask us to delete it at any time.
- Required fields: the fields marked as required are needed in order to reply; without them we cannot deal with your request.
Calls and WhatsApp
If you call us or message us on WhatsApp, we process the data you give us in order to handle your appointment or enquiry. The WhatsApp conversation takes place on the platform of WhatsApp Ireland Limited, subject to its own terms and privacy policy, over which we have no control.
Job applications
If you send us your CV on WhatsApp, by phone or in person, we process the data it contains for the sole purpose of considering your application and contacting you if it matches an opening.
- Legal basis: your consent, given by sending us the application on your own initiative (art. 6.1.a GDPR).
- Retention: a maximum of one year from receipt, so we can let you know if an opening comes up. After that we delete it, and you can ask us to delete it sooner at any time.
- Recipients: none. CVs are not passed to third parties or shared with other companies.
Browsing
This website uses no analytics or advertising tools, and does not build profiles of its visitors. For details on cookies, see the cookie policy.
3. Who receives your data
We do not sell or pass on your data to third parties. We do use providers that process it on our behalf as data processors, under a contract signed in accordance with article 28 of the GDPR:
- Web hosting: Vercel Inc. (440 N Barranca Avenue #4133, Covina, CA 91723, Estados Unidos), which hosts the site and technically processes requests.
- Email delivery: Resend, Inc. (United States), which delivers messages sent from the contact form to the salon.
Both providers are located in the United States, outside the European Economic Area. Those international transfers rely on the standard contractual clauses approved by the European Commission and, where applicable, on the EU-US Data Privacy Framework.
We may also disclose data to public authorities where there is a legal obligation to do so.
4. Your rights
You can exercise the following rights at any time:
- Access: find out what data of yours we process.
- Rectification: correct anything inaccurate.
- Erasure: ask us to delete it.
- Objection: object to a specific processing activity.
- Restriction: ask us to keep it only for claims.
- Portability: receive it in a structured, commonly used format.
- Withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand.
To exercise them, write to lauragonar.80@gmail.com stating which right you wish to exercise and attaching a document proving your identity. We will reply within one month at most.
If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (AEPD).
5. Security
We apply reasonable technical and organisational measures to protect your data against loss, misuse or unauthorised access. The site is served entirely over an encrypted connection (HTTPS).
6. Minors
The forms on this website are not aimed at children under 14. If you are under that age, please ask a parent or guardian to contact us on your behalf.
7. Changes to this policy
We may update this policy to reflect regulatory changes or new processing activities. The date of the last revision appears at the top of the page.
