Privacy policy
What data we process, why, and how you can exercise your rights.
This policy explains how we process your personal data under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). In short: this website has no forms and no cookies, and we only process the data you give us to book an appointment or to message us. If the language versions differ, the Spanish text prevails.
1. Data controller
Marcelo Gaston Solla García (MR22 Barber Shop), DNI 10223015K, C. Playa Cho León, 32, 35660 Corralejo (Las Palmas), Spain. Contact: WhatsApp +34 686 73 12 88 · post to C. Playa Cho León, 32, 35660 Corralejo (Las Palmas), Spain.
2. What data we process
- Visiting the website. We do not ask you for any data. The hosting provider logs technical data for each visit (IP address, date and time, page requested and browser) to serve the pages and keep the site secure.
- Bookings. If you book through GoBarber: name, phone or email, service, barber, date and time of the appointment.
- Messages. If you write to us on WhatsApp or Instagram: your username, your number and the content of your messages.
- In the shop. The data needed to issue an invoice, if you ask for one.
3. Purposes and legal basis
| Purpose | Legal basis (art. 6 GDPR) |
|---|---|
| Managing your appointment and providing the service | Performance of a contract or pre-contractual steps at your request (6.1.b) |
| Answering your messages and enquiries | Pre-contractual steps at your request (6.1.b) and legitimate interest in replying to you (6.1.f) |
| Serving the website and keeping it secure | Legitimate interest (6.1.f) |
| Meeting accounting and tax obligations | Legal obligation (6.1.c) |
We will only send you marketing messages with your prior consent, which you can withdraw at any time. We do not make automated decisions or build profiles.
4. Retention
We keep appointment and message data while you are a client and, afterwards, only for as long as needed to deal with any possible liability. Invoices are kept for the periods set by law (commercial and tax rules). Hosting logs are kept for the limited period set by the provider.
5. Recipients and providers
- Netlify, Inc. (website hosting), as data processor.
- GoBarber (booking platform), which processes your appointment data to manage it.
- WhatsApp and Instagram (Meta), if you choose to contact us there, under their own terms.
We do not sell or pass on your data to third parties, except where required by law (for example, to the Spanish Tax Agency).
6. International transfers
Netlify is based in the United States. When a provider processes data outside the European Economic Area, it does so with the appropriate safeguards provided for in the GDPR, such as the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent you have given at any time. Contact us using the details in section 1. If you believe your data has not been handled properly, you can lodge a complaint with the Spanish Data Protection Agency, the Agencia Española de Protección de Datos (www.aepd.es).
8. Minors
Appointments for children under 14 are booked by a parent or guardian, who gives us the data needed.
9. Security and changes
We apply reasonable technical and organisational measures to protect your data. If this policy changes, we will update the date at the top of the page.