Privacy Policy

1. Who is the data controller?

This website, depilestil.com, is owned by Depilestil Barcelona or Jenny Lisbeth Bermudez.
Address: C/ Fontanella, 16, 1º 1ª, 08010 Barcelona (Spain)
Phone: 678 87 63 77
Phone 2: 933 424 501
Contact email: info@depilestil.com
Main domain: depilestil.com
Tax ID (NIF/CIF): 46495023V

This Policy explains how we process your personal data when you contact us, book an appointment or use our on-site and online services, in accordance with the GDPR and the LOPDGDD.

2. Principles and legal basis

We process data in line with the principles of lawfulness, fairness, transparency, data minimisation and storage limitation. The usual legal bases are:

Performance of a contract/pre-contract: managing appointments and providing services.
Legal obligation: invoicing, accounting and tax obligations.
Legitimate interest: website security and basic handling of recurring queries.
Consent: commercial communications and, where applicable, special category data that you voluntarily provide (e.g. allergies or skin sensitivity). You may withdraw your consent at any time.

3. What data do we process?

Identification and contact details: name, phone number, email.
Appointment/service details: areas to be treated, preferences and operational notes.
Billing data: tax ID, address, payment details (we do not store full card data).
Health data (optional): information you provide voluntarily (e.g. allergies to cosmetics or sensitivity to wax) to tailor the service; only with your explicit consent and with restricted access.

4. Purposes

To manage information requests and appointments.
To provide aesthetics/hair removal services and their follow-up (reminders, aftercare guidance).
To issue invoices and comply with legal obligations.
To send, when you authorise it, commercial information about Depilestil services (without disclosing your data to third parties for their own purposes).

5. Data retention

We keep data for as long as necessary for each purpose and then block it for the relevant limitation periods. For commercial and tax purposes, certain documentation must be kept for 6 years (Art. 30 of the Spanish Commercial Code) and tax records for the periods required by tax regulations.

6. Recipients and processors

We do not sell your data. We may share it with:

Service providers who work for us (web hosting, booking tools, IT maintenance, email delivery), under data processing agreements and following our instructions.
Public authorities when there is a legal obligation to do so.
We do not carry out automated decision-making with legal effects on individuals.

7. International transfers

No international data transfers outside the EEA are envisaged. If, for certain support services, such transfers were necessary, they would be carried out with appropriate safeguards (e.g. Standard Contractual Clauses and impact assessments), and you would be informed in advance.

8. Commercial communications

We will only send electronic communications if you have requested or authorised them beforehand. All messages are identified as advertising and you may unsubscribe at any time via the link provided or by writing to info@depilestil.com.

9. Social media and messaging

If you interact with our profiles or contact us via messaging/WhatsApp, your data will only be used to manage your enquiry. Please bear in mind the terms and privacy policies of each platform, which are unrelated to Depilestil. This Policy applies additionally when the data is incorporated into our own systems.

10. Security

We apply technical and organisational measures appropriate to the level of risk: access controls, encryption/pseudonymisation where appropriate, activity logs, backups and internal confidentiality policies. We review and improve these measures on a regular basis.

11. Minors

Our services are not intended for children under 14. If, in exceptional cases, we collect information about a minor, we will require the consent of a parent or legal guardian and may request documentation to verify it.

12. Exercising your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, as well as withdraw your consent at any time, by contacting info@depilestil.com or by post at the address indicated (ref. “Data Protection”), attaching proof of identity where necessary. If you are not satisfied, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).

13. Cookies

The use of cookies or similar technologies is described in the Cookies Policy, where you can set your preferences and revoke your consent. This Cookies Policy is independent from this Privacy Policy (you can access it from the site footer).

14. Accuracy and updating of data

You are responsible for ensuring that the information you provide is truthful, accurate and up to date. If we detect clearly incorrect or false data, we may deny or suspend the service until it is corrected, in order to protect your security and that of third parties.

15. Changes to this Policy

We may modify this Policy to adapt it to regulatory or processing changes. We will publish the current version on depilestil.com and indicate the date of the last update. If changes affect processing based on consent, we will ask you again for your authorisation where required by law.

16. Contact

For any questions related to privacy, please write to info@depilestil.es or call 678 87 63 77. You can also lodge a complaint with the AEPD via its online headquarters.