PRIVACY POLICY OF WWW.MOONRELAXSPA.COM
Website owner information:
COMPANY NAME MOON RELAX SPA SL
NIF B19776186
DOMAIN WWW.MOONRELAXSPA.COM
POSTAL ADDRESS PLAÇA SAGRADA FAMILIA 10 6-1, 08025 BARCELONA (BARCELONA)
EMAIL ADDRESS hello@moonrelaxspa.com
TELEPHONES 684 337 186
REGISTRATION NUMBER/ ADDITIONAL DATA Registered in the Commercial Registry of Barcelona, Volume/IRUS 1000424730766, Folio 1, Sheet B-618322, Entry 1
Data protection
In accordance with current and applicable regulations on the protection of personal data, we inform you that your data will be incorporated into the processing system owned by MOON RELAX SPA SL, with Tax Identification Number (NIF) B19776186 and registered office at PLAÇA SAGRADA FAMILIA 10 6-1, 08025 BARCELONA (BARCELONA). Information regarding the processing carried out is provided below:
TREATMENTS PERFORMED
User registration
Purpose: Collection, registration and processing of data in order to register as a user.
Storage period: as long as the consent given remains valid, except where legally required.
Legitimate basis: The consent of the interested party.
Data Types: Basic information: Name and surname, Telephone, NIF, Postal address, Email address.
Online service contracting management
Purpose: Collection, registration and processing of data from web users for the proper provision of the service.
Storage period: preservation of copies of the documents until the statute of limitations expires for actions to claim possible liability.
Legitimate basis: The execution of the contract.
Data Types: Basic information: Name and surname, NIF (Spanish tax identification number), Email address, Financial or insurance information.
Assignments: Your data will be shared, if necessary, with relevant public bodies and/or administrations in order to comply with applicable regulations. Furthermore, please note that the legal basis for this transfer is compliance with the law.
Online booking management
Purpose: Registration and management of online reservations.
Storage period: for the period strictly necessary to fulfill the aforementioned purpose.
Legitimate basis: The consent of the interested party.
Data Types: Basic information: Name and surname, NIF (Spanish tax identification number), Postal address, Email address, Financial or insurance information.
Assignments: Your data will be shared, if necessary, with the Tax Agency, banks and savings banks, law enforcement agencies, and other competent authorities in order to comply with the administrative and security obligations established by applicable regulations. Furthermore, please note that the legal basis for this transfer is compliance with the law.
Customer health data management
Purpose: Collection and processing of health information voluntarily provided by the client through the pre-treatment form, in order to assess possible contraindications, adapt the service and ensure the client's safety.
Storage period: during the relationship with the client and, subsequently, during the legal limitation periods for possible liabilities.
Legitimate basis: The explicit consent of the data subject (art. 9.2.a GDPR).
Data Types: Basic data: Name and surname, Email address. Special categories: health data declared by the data subject.
Commercial actions web form
Purpose: Collection, registration and processing of data for the purposes of responding to your inquiries and/or requests, as well as for advertising and commercial prospecting.
Storage period: as long as the consent given remains valid, except where legally required.
Legitimate basis: The consent of the interested party.
Data Types: Basic information: Name and surname, Email address.
Web user management
Purpose: Collection, registration and processing of user data.
Storage period: as long as the consent given remains valid, except where legally required.
Legitimate basis: The consent of the interested party.
Data Types: Basic information: Name and surname, Email address.
Newsletter
Purpose: Managing newsletter subscriptions to send the corresponding emails.
Storage period: as long as the consent given remains valid.
Legitimate basis: The consent of the interested party.
Data Types: Basic information: Name and surname, Email address.
Installation of cookies
Purpose: Cookie management and installation.
Storage period: as long as the consent given remains valid.
Legitimate basis: The consent of the interested party.
Data Types: Basic information: Email address, IP address.
Web Form Management
Purpose: To attend to your inquiries and/or requests.
Storage period: as long as the consent given remains valid.
Legitimate basis: The consent of the interested party.
Data Types: Basic information: Name and surname, Email address, IP address.
Those in charge of the treatment
For the provision of certain services, MOON RELAX SPA SL has suppliers that may process data on behalf of the company (for example, booking platforms, web hosting, communication tools and payment gateways), with whom the corresponding processing agreements have been signed in accordance with art. 28 GDPR.
Rights of interested parties
MOON RELAX SPA SL informs Users that they may exercise their rights of access, rectification, limitation, erasure, portability, objection to the processing of their personal data and the right not to be subject to automated decisions, including profiling, before the Data Controller, as well as the withdrawal of the consent given.
Right of Access: It is the user's right to obtain confirmation as to whether their data is being processed and, if so, the specific personal data processed and the legal information of the processing (purposes, legal basis, retention periods, transfers, origin of the data, etc.).
Right of Rectification: It is the right of the affected party to have inaccurate or incomplete data corrected. With regard to the website, this right can only be exercised in relation to information under the website's control, such as deleting comments posted on the page itself, images, or web content containing the user's personal data.
Right to Restriction of Processing: It is the right to have the purposes of the processing originally intended by the controller limited in certain cases.
Right to Erasure: It is the right to delete the user's personal data, except as provided for in the GDPR itself (freedom of expression and information, retention obligations, formulation, exercise or defense of claims, etc.).
Right to Portability: The right to receive the personal data that the user has provided, in a structured, commonly used and machine-readable format, and to transmit them to another controller when the processing is based on consent or on the execution of a contract and is carried out by automated means.
Right of Opposition: It is the user's right to prevent the processing of their personal data or to have the processing of said data stopped by the website when the processing is based on legitimate interest or public interest or when it involves direct marketing processing.
Right not to be subject to automated decisions, including profiling: Where processing is not necessary for entering into or performing a contract, is not authorized by European Union or Member State law and is not based on consent, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Right to withdraw consent: For any treatment based on your consent, you have the right to withdraw it, at any time and free of charge.
To exercise any of the data protection rights described above, you must follow these instructions:
Submission of a written document to the address PLAÇA SAGRADA FAMILIA 10 6-1, 08025 BARCELONA (BARCELONA) (attention MOON RELAX SPA SL) or via email to hello@moonrelaxspa.com.
The written request submitted by the data subject (interested party) requesting the exercise of rights must take into account the following:
You must provide verifiable identification and, if there are any doubts about the identity of the applicant, you will be asked to rectify the request (e.g. by requesting more information, such as the ID number, the ID document, the email address you provided, etc.).
The request can be made by the legal or voluntary representative, when the latter is duly identified and authorized by the data subject (through an express authorization of the data subject to exercise the personal rights regulated in the regulations on the protection of personal data).
The request should specify the right(s) you wish to exercise. If you do not refer to a specific processing activity, you will receive a response regarding all processing activities that affect your personal data. If you request information about a specific processing activity, you will only receive information about that activity. If you request this information by phone, you will be instructed to submit your request in writing and will be informed of how to do so and the address to which you must send it. Information will never be provided over the phone.
Postal or electronic address for notification purposes.
Documents supporting the request you make, if necessary.
The applicant must use any means that allows proof of sending and receiving the application.
Finally, we inform you that you have the right to file a complaint with the Spanish Data Protection Agency if you become aware of or believe that an event may constitute a breach of the applicable data protection regulations.
MOON RELAX SPA SL undertakes to adopt the necessary technical and organizational measures, in accordance with the level of risks that accompany the treatments carried out by them and indicated in this same section, in order to guarantee their integrity, confidentiality and availability.
Last update: August 24, 2026
