privacy policy

1. Data of the Data Controller

  • Company Name: Vermend Group, hereinafter «the Company».
  • Trade Name: Chōwa Hair Spa
  • Registered Address: Rambla del Poblenou 133, Barcelona
  • Tax ID (NIF): B65502528
  • Phone: 650 598 559
  • Email: info@chowaspacapilar.com

1.1. Applicable Regulations

Our Privacy Policy has been designed in accordance with EU General Data Protection Regulation (GDPR) 2016/679 of the European Parliament and of the Council of 27 April 2016, regarding the protection of natural persons with respect to the processing of personal data and the free movement of such data, repealing Directive 95/46/EC, as well as Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (Spain). By providing us with your data, you declare that you have read and understood this Privacy Policy, giving your unequivocal and express consent to the processing of your personal data in accordance with the purposes and terms set out herein. The Company may amend this Privacy Policy to adapt it to legislative, case law, or interpretative developments of the Spanish Data Protection Agency. These privacy conditions may be supplemented by the Legal Notice, Cookie Policy, and General Conditions that, where appropriate, apply to certain products or services, if such access involves any special features in terms of personal data protection.

1.2. Data Protection Officer

Currently, Chōwa Hair Spa does not have a Data Protection Officer (DPO), as it is not required under the circumstances defined by Regulation (EU) 2016/679 (GDPR). However, any issues related to the processing of personal data may be addressed to the contact email indicated in this policy.

2. Purpose of Processing Personal Data

At Chōwa Hair Spa we process the personal data provided by users exclusively for the following purposes:
  • Managing information requests submitted through the website contact form.
  • Coordinating reservations or appointments requested by the user.
  • Responding to queries sent via WhatsApp or email.
  • Data will not be used for commercial purposes nor will promotional communications be sent without the user’s prior consent.
  • Displaying advertising on external platforms (Instagram and Google) based on general interests and segmentation provided by those platforms.

2.1. Data Retention Period

We will retain your personal data from the time you grant us your consent until you revoke it or request a restriction on processing. In such cases, we will keep your data blocked for the legally required retention periods.

3. Legal Basis and Data Collected

The legal basis for processing your data is the express consent given through a positive and affirmative act (completing the relevant form and ticking the acceptance checkbox) at the time of providing your personal data.

3.1. Consent to Process Your Data

By filling out the forms, ticking the “I accept the Privacy Policy” box, and clicking to submit the data, or by sending emails to the Company via the designated accounts, the User expressly states that they have read and accepted this Privacy Policy and grants unequivocal and express consent to the processing of their personal data in accordance with the stated purposes.

3.2. Categories of Data

The categories of personal data processed at Chōwa Hair Spa are exclusively identification data, specifically:
  • Name
  • Phone
  • Email
  • In some cases, we use third-party platforms to display personalised advertising, such as: Meta Platforms Ireland Ltd. (Instagram) and Google Ireland Ltd. (Google Ads). These platforms may collect certain browsing data anonymously or in aggregate to display relevant ads, according to their own privacy policies. Chōwa Hair Spa does not directly share personal data with these platforms, but user activity on our website or social profiles may be subject to their conditions.
No special categories of personal data are processed (such as health, financial, employment data, etc.).

4. Security Measures

As part of our commitment to ensuring the security and confidentiality of your personal data, we inform you that we have adopted the necessary technical and organisational measures to safeguard personal data and prevent its alteration, loss, or unauthorised processing or access, taking into account the state of technology, the nature of the stored data, and the risks to which they are exposed, in accordance with Art. 32 of EU GDPR 679/2016.

5. Data Disclosure

No data transfers or international data transfers are envisaged, except those authorised by tax, commercial, and telecommunications legislation, or in cases where a judicial authority requires it.

6. User Rights

Any data subject has the right to obtain confirmation as to whether or not we are processing personal data concerning them. Data subjects have the right to access their personal data, request rectification of inaccurate data, or request deletion when, among other reasons, the data is no longer necessary for the purposes it was collected. In certain circumstances, data subjects may request the restriction of processing, in which case data will only be retained for the exercise or defence of legal claims. For reasons related to their particular situation, data subjects may also object to processing. The Data Controller will stop processing the data, unless compelling legitimate grounds prevail, or for the exercise or defence of possible claims. In accordance with current legislation, you have the following rights: the right to request access to your personal data, the right to request rectification or erasure, the right to request restriction of processing, the right to object to processing, the right to data portability, and the right to withdraw consent. You also have the right to lodge a complaint with the Spanish Data Protection Agency.

6.1. How to Exercise Your Rights

To exercise your rights, you must contact the Data Controller, requesting the relevant form to exercise the chosen right. Optionally, you may contact the competent Supervisory Authority for additional information about your rights. The contact details to exercise your rights are phone: 650 598 559 and email: info@chowaspacapilar.com. Please remember to attach a copy of a document that allows us to identify you.

7. Consent to Receive Electronic Communications

Likewise, in accordance with Law 34/2002 of 11 July on Information Society Services and Electronic Commerce, by completing the data collection form and ticking the “I accept the sending of electronic communications” checkbox, you expressly consent to receive information about the Company by email, phone, fax, or other electronic means.