Privacy Policy

1. Information for users

IKI THAI MASSAGE SPA S.L. is the data controller for the personal data provided by users and processes that data in accordance with the GDPR, the Spanish LOPDGDD and any other applicable data protection rules.

The purpose of this processing is to maintain the commercial relationship with the user and to handle requests submitted through the website.

Planned processing operations

  • •Responding to enquiries, requests, orders or any other communication sent by the user.
  • •Sending commercial communications by electronic or physical means within the applicable legal framework.
  • •Carrying out internal statistical analysis in order to improve services and the user experience.
  • •Managing informative communications linked to the activity of the website.

Data retention and disclosure

Data will be kept for as long as there is a mutual interest in maintaining the purpose of the processing. Once it is no longer necessary, it will be securely deleted.

Personal data will not be disclosed to third parties unless there is a legal obligation to do so.

User rights

Address for exercising your rights: Carrer Aragó 277, local 2, 08007 Barcelona.

  • •Withdraw consent at any time.
  • •Access, rectify and erase personal data, and request portability.
  • •Request restriction of processing or object to it.
  • •Lodge a complaint with the supervisory authority at aepd.es.

2. Mandatory or optional nature of the information provided

By completing the forms on the website, the user expressly, freely and unambiguously accepts the processing of their data in order to deal with the relevant request. Fields marked as mandatory are necessary for the service to be provided correctly.

Users guarantee that the data they provide is accurate and undertake to inform us of any changes. If all mandatory data is not supplied, we cannot guarantee that the information or services provided will fully meet their needs.

The controller will not transfer personal data to third parties unless required by law or unless the user has given prior, express and informed consent.

3. Security measures

The controller applies appropriate technical and organisational measures to guarantee the security, confidentiality and integrity of personal data, in accordance with current legislation.

Data is processed lawfully, fairly and transparently, and is limited to what is strictly necessary for the purposes described in this policy.