Privacy Policy

1. Data Controller

MAGMA Masajes (hereinafter, the "CONTROLLER") informs users of this website that their personal data will be processed in accordance with the provisions of European Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and the Spanish Organic Law 3/2018 of 5 December (LOPDGDD).

• Commercial name: MAGMA Granada
• Location: Granada, Spain
• Contact email: magmaspazen@gmail.com
• WhatsApp / Phone: +34 641 35 17 87

2. Purposes and Processing Operations

The processing of data provided voluntarily by users (through WhatsApp, email, or telephone) is carried out for the following purposes:

• Manage information inquiries about our massage experiences, couples’ sessions, and private spa rituals.
• Coordinate appointment bookings, dates, times, and schedule confirmations requested by the client.
• Respond to questions regarding arrival, amenities, and available facilities.
• Comply with applicable legal, accounting, and fiscal requirements.

3. Legal Basis for Processing

The legal basis for processing your data is the consent of the user granted when contacting us voluntarily to request information, enquire about services, or book an appointment, as well as the execution of pre-contractual measures.

4. Data Retention Criteria

Data will be retained only for as long as necessary to fulfill the purpose for which it was collected or to maintain the commercial relationship, and subsequently during the statutory periods required by law to address potential liabilities. When no longer needed, data is deleted with appropriate security measures.

5. Data Disclosure to Third Parties

Personal data will not be communicated or transferred to third parties without prior express consent, unless required by competent authorities or under applicable legal obligations.

6. User Rights

Users may exercise the following rights at any time under GDPR:

• Access: Confirm whether MAGMA is processing your personal data and obtain a copy.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request the deletion of your data when it is no longer necessary for the purposes for which it was collected.
• Restriction and Objection: Request limitation of processing or object to data processing.
• Portability: Receive your data in a structured, commonly used machine-readable format.
• Withdraw consent: Withdraw consent previously granted at any time without affecting prior lawful processing.

To exercise these rights, please send a written request accompanied by proof of identity to magmaspazen@gmail.com.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe your rights have not been respected.

7. Security Measures

MAGMA implements appropriate technical and organizational measures to ensure the security, confidentiality, and integrity of personal data, preventing accidental or unauthorized alteration, loss, access, or disclosure.

8. Cookie Policy and Technical Cookies

This website does not use third-party advertising, profiling, or analytical tracking cookies (such as Google Analytics or Facebook Pixel). We only use a strictly necessary technical cookie (magma_age_verified), exempt from the consent requirement under Article 22.2 of the Spanish LSSI and AEPD guidelines, solely to remember age verification (+18) during user navigation.