LEGAL WARNING
IEBE SL's Data Protection Policy
1. Introduction
IEBE SL (hereinafter referred to as "the Company") is committed to protecting the privacy and security of the personal data it processes. This data protection policy describes how we collect, use, store and protect the personal data of our customers, employees, suppliers and other data subjects in compliance with the General Data Protection Regulation (GDPR) and other applicable regulations.
2. Data Controller
The party responsible for the processing of personal data is IEBE SL, with tax identification number B09783143 and registered office at Calle La Hoz 17, 29002 Malaga, Spain. For any queries related to data protection, you can contact us by e-mail: wendy@academyheadspa.com or by telephone: 685 455 239.
3. Personal Data We Collect
We collect and process the following personal data:
- **Contact details:** Name, address, telephone number, email address.
- Employment data:** Information relating to contracts, pay slips, working hours and training.
- Financial data:** Payment and billing information.
- Browsing data:** Information collected through cookies and similar technologies.
4. Purposes of Processing
We process personal data for the following purposes:
- **Customer and supplier management:** For the management of commercial and contractual relations.
- Labour management:** For the management of human resources, including recruitment, payroll and training.
- Marketing:** To send commercial communications about our products and services, always with the prior consent of the interested party.
- Service improvement:** To analyse the use of our services and improve the user experience on our website.
5. Legal Basis for Processing
The processing of personal data by the Company is based on:
- **Execution of a contract:** For the management of contractual relationships with customers and suppliers.
- Fulfilment of a legal obligation:** To comply with our legal obligations in labour, tax and data protection matters.
- Consent of the data subject:** For the sending of commercial communications and the use of cookies.
- Legitimate interests:** To improve our products and services and to ensure the security of our facilities and systems.
6. Rights of Data Subjects
Data subjects have the following rights with respect to their personal data:
- **Access:** The right to obtain confirmation as to whether we are processing their personal data and to access it.
- Rectification:** The right to request the rectification of inaccurate or incomplete data.
- Deletion:** The right to request the deletion of your personal data when they are no longer necessary for the purposes for which they were collected.
- Opposition:** The right to object to the processing of your personal data in certain circumstances.
- Restriction of processing:** The right to request the restriction of the processing of your personal data in certain circumstances.
- Portability:** The right to receive their personal data in a structured, commonly used and machine-readable format and to transfer it to another data controller.
To exercise these rights, data subjects may contact us by e-mail: wendy@academyheadspa.com or by telephone: 685 455 239.
7. Security Measures
The Company implements appropriate technical and organisational measures to ensure the security of personal data and protect against unauthorised access, alteration, disclosure or destruction. These measures include:
- Use of encryption technologies.
- Access control to computer systems and facilities.
- Information security policies and ongoing staff training. - Security incident management procedures.
8. International Transfers
​
In the event that the Company transfers personal data to third countries outside the European Economic Area (EEA), it shall ensure that such transfers are carried out with appropriate safeguards, in accordance with the provisions of the GDPR.
9. Data Retention
The Company will retain personal data only for as long as necessary to fulfil the purposes for which it was collected, and in compliance with applicable legal obligations. Subsequently, the data will be deleted or securely anonymised.
10. Updating the Policy
The Company reserves the right to update this data protection policy at any time. Updates will be communicated via our website and, where appropriate, by direct notification to data subjects.
11. Contact
For any query or complaint related to data protection, you can contact our Data Protection Officer by e-mail: wendy@academyheadspa.com or by telephone: 685 455 239.