This policy explains how John Peter Wellness processes the personal data you provide through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).
1. Data controller
- Owner[PENDIENTE: company name or full name]
- Trade nameJohn Peter Wellness
- Tax ID (NIF/CIF)[PENDIENTE: tax ID]
- Address[PENDIENTE: full address], Marbella (Málaga), Spain
- Email[PENDIENTE: contact email]
- Phone[PENDIENTE: phone]
- Registry[PENDIENTE: Málaga Commercial Registry details, if a company; delete this line if self-employed]
2. What data we process
- Contact form: name, company, email, phone, project type and the message you write to us.
- Email, phone and WhatsApp: the data you give us when contacting us through these channels.
- Browsing: technical data, such as your IP address or browser, needed to display the website. See our cookie policy.
We do not process special categories of data. If you act on behalf of a company, please provide business data only.
3. Why we use it and legal basis
- To handle your request for information, advice or a quote. Legal basis: your consent when submitting the form and pre-contractual steps taken at your request (art. 6.1.a and 6.1.b GDPR).
- To manage the business relationship if you become a client: proposals, orders, installation, invoicing and technical service. Legal basis: performance of the contract and tax and accounting legal obligations (art. 6.1.b and 6.1.c GDPR).
- To send you commercial information about products and news, only with your express consent, which you may withdraw at any time (art. 6.1.a GDPR and art. 21 LSSI-CE). [PENDIENTE: confirm whether the client will send marketing communications; if not, delete this item]
4. How long we keep it
We keep request data for as long as needed to handle it and for no more than [PENDIENTE: period, e.g. 2 years] if no business relationship follows. Client data is kept for the duration of the relationship and afterwards for the legal retention periods (6 years for accounting and tax records). Data processed on the basis of consent is kept until you withdraw it.
5. Who we share it with
We do not share your data with third parties unless required by law. Our web hosting and email providers ([PENDIENTE: hosting and email provider name]) may access it as data processors under contract in order to provide the service.
Where your project requires it, and only with your knowledge, we may share the necessary data with the manufacturer (Living Earth Crafts / Earthlite, with a European hub in Rotterdam, the Netherlands) to prepare the proposal, order or installation. [PENDIENTE: confirm with the client; if the manufacturer is outside the EU, state the safeguards for the international transfer]
If you message us on WhatsApp, the service is provided by WhatsApp Ireland Ltd. (Meta), which may transfer data outside the European Economic Area with the safeguards provided for in the GDPR.
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to [PENDIENTE: data protection email] or by post to the address above, enclosing a copy of your ID.
If you believe we have not processed your data correctly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Security
We apply appropriate technical and organisational measures to protect your data against loss, misuse or unauthorised access. The website runs over an encrypted connection (HTTPS).
8. Minors
This website is aimed at professionals and businesses. We do not knowingly collect data from children under 14.
9. Changes to this policy
We may update this policy to reflect legal or service changes. The date of the last update is shown at the top of this page.