In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR), and with Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), Be Shambhala hereby informs users about the processing of their personal data as follows:
1. Data Controller
- Identity: Be Shambhala
- Address: Av. de España, 24, 29649 Calahonda, Málaga, España
- Email: masajes.shambala@gmail.com
- Phone: 674 83 14 64
2. Purposes of Processing The personal data provided by users will be processed for the following purposes:
- To handle enquiries submitted through the contact forms or by email.
- To send information about the services offered by Be Shambhala, provided that the data subject’s express consent has been obtained.
- To manage registrations for the programs and activities organized by Be Shambhala.
- To comply with applicable legal obligations.
3. Legal Basis for Processing The processing of the user’s personal data is based on:
- The consent given by the data subject through a clear affirmative action (Art. 6.1.a GDPR).
- The need to perform a contract or to take pre-contractual steps at the data subject’s request (Art. 6.1.b GDPR).
- Compliance with legal obligations (Art. 6.1.c GDPR).
4. Data Retention Personal data will be kept for as long as necessary to fulfil the purposes described and, thereafter, for as long as a legal retention obligation exists or until the data subject requests its erasure.
5. Recipients of the Data Personal data will not be disclosed to third parties except in the following cases:
- Compliance with legal obligations.
- Service providers acting as data processors with whom Be Shambhala has entered into the corresponding data processing agreements.
6. Rights of Data Subjects Users may exercise their rights in accordance with the provisions of the GDPR and the LOPDGDD. These rights are:
- Right of access: To obtain confirmation as to whether their personal data is being processed and to access such data.
- Right to rectification: To request the correction of inaccurate or incomplete data.
- Right to erasure: To request the deletion of their personal data when it is no longer necessary for the purposes for which it was collected.
- Right to object: To object to the processing of their personal data on grounds relating to their particular situation.
- Right to restriction of processing: To request that the processing of their personal data be restricted in certain circumstances.
- Right to data portability: To receive their personal data in a structured, commonly used format, or to request its transmission to another data controller.
To exercise these rights, data subjects may send a communication to the email address masajes.shambala@gmail.com, indicating the right they wish to exercise and enclosing a copy of a document proving their identity.
7. Security Measures Be Shambhala applies appropriate technical and organizational security measures to protect users’ personal data against unauthorized access, loss, destruction, damage, or unauthorized disclosure.
8. Updates to the Privacy Policy This Privacy Policy may be updated to reflect legislative or case-law changes or changes in Be Shambhala’s own practices. In any case, users will be notified through the usual channels before any such changes are made.