Privacy policy

1. Data controller

• Controller: Calma Mallorca — [Nombre y NIF del titular]
• Address: [Dirección], Illes Balears, Spain
• Email: hola@calmamallorca.site

This policy describes how we process the personal data of those who contact us through this website or WhatsApp, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD).

2. What data we process

This website contains no forms and does not collect personal data by itself. The only data we process is what you voluntarily provide when you message us on WhatsApp to ask for information or book a session:

• Name or WhatsApp profile name.
• Telephone number.
• Message content: chosen ritual, address or location of the session (villa, hotel, marina and berth), date and time, number of people and preferences.
• Where applicable, health information relevant to the session (for example injuries, pregnancy or allergies) that you choose to share with us for your safety.

3. Purpose and legal basis

• To handle your enquiry or booking and provide the requested service: coordinating time, place, access and therapist. Legal basis: performance of a contract or pre-contractual steps at your request (Art. 6(1)(b) GDPR).
• To adapt the session to your health when you provide that information. Legal basis: your explicit consent, given when you share it with us (Art. 9(2)(a) GDPR). You may withdraw it at any time.
• To comply with legal obligations, in particular tax and accounting obligations (Art. 6(1)(c) GDPR).

We do not send newsletters or unsolicited commercial communications, we do not build profiles and we do not make automated decisions.

4. Retention

We keep conversation data for the duration of the client relationship and, once the service has been provided, for as long as necessary to deal with possible liabilities and comply with legal obligations (generally up to five years for tax documentation). Health data is deleted once the session or relationship ends, unless you ask us to keep it for future bookings.

5. Recipients

We do not transfer your data to third parties or sell it. Access is limited to the therapist assigned to your session, so that she can provide it, and to the providers we need in order to operate:

• WhatsApp (Meta Platforms Ireland Ltd.), as the communication channel. Use of WhatsApp is governed by its own terms and privacy policy; any international transfers carried out by Meta are covered by the safeguards provided for in the GDPR.
• Web hosting provider (Hostinger), which only processes technical server logs.
• Tax adviser, in relation to invoicing where applicable.

6. Cookies

This website uses only technical or session cookies that are strictly necessary for it to work, which do not require consent. We do not use analytics, advertising or third-party cookies. Fonts are served from our own server, so no request is made to third-party font services.

7. Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent given, by writing to hola@calmamallorca.site or to the same WhatsApp number from which you contacted us. We will reply within one month at most.

If you believe we have not handled your rights correctly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Security

We apply reasonable technical and organisational measures to protect your data: password-protected and encrypted devices, access limited to staff who need it, and periodic deletion of old conversations.

9. Minors

Our services are aimed exclusively at persons over 18 years of age. We do not knowingly process data of minors.

10. Changes to this policy

We may update this policy to reflect legal or service changes. The current version will always be the one published on this page, with its update date.