Contact form: your name, your email address and your message. We only use them to answer your enquiry.
WhatsApp, phone or email: if you write to us or call, we process your number or email address and what you tell us, to reply and manage your appointment.
Clients: if you book a session, we process your contact and appointment details to provide the service, take payment and issue an invoice if you ask for one.
Health data: before a massage it's normal to talk about injuries, pain or health conditions. We only use this information to adapt the treatment, and only with your explicit consent. Please don't send it through the website form; we'll talk about it in person.
Website analytics: anonymous, aggregated browsing data (see section 6).
3. Legal basis
Your consent (GDPR art. 6.1.a), to answer messages sent through the form. You can withdraw it at any time.
Providing the service you ask for (GDPR art. 6.1.b), to manage appointments and sessions.
Your explicit consent (GDPR art. 9.2.a), for health data.
Legal obligations (GDPR art. 6.1.c), for invoicing and accounting.
Legitimate interest (GDPR art. 6.1.f), for anonymous website analytics used to improve the site.
4. How long we keep data
Form messages and enquiries: as long as needed to reply and, at most, one year afterwards if you don't become a client.
Client data: for as long as you are a client and then for the period required by law (for example, tax rules require invoices to be kept).
Health data: while you are a client, or until you ask us to delete it.
5. Who we share it with
We don't sell or share your data. To run the website we use these providers, which process data only on our behalf:
EmailJS (privacy policy): sends form messages to our email address.
Google Ireland Limited (Gmail): receives and stores emails.
WhatsApp Ireland Limited: if you message us on WhatsApp.
Umami Software, Inc.: website analytics (see section 6).
Elfsight (privacy policy): shows our Google reviews on the home page. To load them, your browser connects to their servers, which receive your IP address.
Some of these providers may process data outside the European Economic Area. When they do, they use the safeguards required by the GDPR, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
6. Analytics and cookies
To understand how the website is used we use Umami Cloud, provided by Umami Software, Inc. Umami:
Does not use cookies.
Does not use local storage or persistent tracking identifiers.
Does not track you across websites.
Does not collect data that identifies you.
Your IP address is used only briefly to estimate location and count unique visits, using codes that change every day. Raw IP addresses are never stored, and all data is aggregated and anonymous. More information at
umami.is/privacy.
This website doesn't set its own cookies. The Elfsight reviews widget may store technical data in your browser in order to work. You can delete or block it in your browser settings.
Links to WhatsApp and Instagram take you to their websites, which have their own privacy and cookie policies.
7. Your rights
At any time you can ask to:
access, correct or delete your data;
object to its processing or restrict how it's used;
receive it in a format you can take to another service (portability);
withdraw your consent, without affecting anything done before.
Email us at sportmassage.isabelle@gmail.com saying which right you want to exercise. If you think we haven't handled your data properly, you can complain to the Spanish Data Protection Agency:
www.aepd.es.
8. Security
The website runs on HTTPS and we take reasonable measures to protect your data against loss, unauthorised access or misuse.