PRIVACY AND DATA PROTECTION POLICY

II. APPLICABLE REGULATIONS

This Privacy Policy is adapted to current Spanish and European regulations regarding personal data protection on the internet. Specifically, it complies with:

• Regulation (EU) 2016/679 (GDPR) of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data.
• Organic Law 3/2018 (LOPDGDD) on Personal Data Protection and Guarantee of Digital Rights.
• Law 34/2002 (LSSI-CE) on Information Society Services and Electronic Commerce.

III. DATA PROCESSING AND PURPOSES

1. Contact Data and Inquiries

In the event that the User contacts SU NAILS through the email or phone number provided on the website, the personal data provided (name, email, phone number) will be processed exclusively to respond to inquiries, requests for information, or appointment bookings.

Legal Basis: User consent granted when making the inquiry (Art. 6.1.a GDPR) and legitimate interest or application of pre-contractual measures (Art. 6.1.b GDPR).

2. Web Analytics with Umami (Cookie-free)

This Website uses Umami Analytics, a privacy-focused web analytics solution. Umami does not use cookies, does not store persistent identifiers in the user's browser, and does not collect personally identifiable information (PII).

Collected metrics (such as visited pages, browser type, or country of origin) are completely anonymous and aggregated, used solely to measure traffic and improve the website's browsing experience.

Legal Basis: Legitimate interest of the controller (Art. 6.1.f GDPR) for statistical analysis and technical optimization of the website without infringing on user privacy.

IV. ABSENCE OF COOKIES AND TRACKERS

In compliance with the provisions of the LSSI-CE and in line with the GDPR, we inform users that www.sunails.es does not use advertising, profiling, or intrusive analytics cookies.

Since no cookies or local storage technologies are used for individualized tracking, displaying a cookie consent banner or popup when accessing the website is not required.

V. DATA RETENTION

Personal data provided through direct contact channels (email or phone) will be retained only for as long as necessary to handle the inquiry or manage the commercial relationship/service delivery, and subsequently for the statutory periods required to meet potential legal liabilities.

VI. RECIPIENTS AND INTERNATIONAL TRANSFERS

User personal data will not be transferred or sold to third parties under any circumstances, except under strict legal obligation. Furthermore, no international data transfers to third countries are performed.

VII. USER RIGHTS

The User may exercise their rights of access, rectification, erasure, restriction of processing, objection, and data portability recognized by the GDPR at any time.

To exercise these rights, the User must send a written request stating the reference "Data Protection - www.sunails.es" along with a copy of their ID/Passport or equivalent identification document to:

• Email: SU@SUNAILS.ES
• Postal Address: Avenida de Barcelona 30, 18006 Granada, Spain

Additionally, if the User considers that their data protection rights have been violated, they have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) on its website https://www.aepd.es/.

VIII. DATA SECURITY

SU NAILS adopts the necessary technical and organizational measures to ensure the security of personal data and prevent its alteration, loss, or unauthorized access. The Website has an SSL (Secure Socket Layer) security certificate, ensuring that information transmitted between the user and the server is encrypted.

IX. ACCEPTANCE AND CHANGES TO THE PRIVACY POLICY

The use of the Website implies the reading and understanding of the terms set forth in this Privacy Policy. SU NAILS reserves the right to modify this policy to adapt it to legislative or jurisprudential developments. Users are recommended to check this page periodically.

X. VIDEO SURVEILLANCE DATA PROCESSING INFORMATION

In compliance with Article 22 of the LOPDGDD and the GDPR, individuals entering our physical premises (Avenida de Barcelona 30, Granada) are informed that the establishment is equipped with a video surveillance system.

• Data Controller: THU TRANG BUI (SU NAILS).
• Purpose: To ensure the security of customers, employees, property, and physical premises.
• Legal Basis: Performance of a task carried out in the public interest or legitimate interest of the controller to protect its facilities and individuals (Art. 6.1.f GDPR and Art. 22 LOPDGDD).
• Retention Period: Captured images will be deleted within a maximum period of one month (30 days) from recording, except when they must be retained to be made available to Law Enforcement Agencies or Courts of Justice.
• Recipients: Images will not be transferred to third parties, except under legal obligation to Law Enforcement Agencies or Judicial Authorities.
• Exercise of Rights: To exercise rights of access or restriction regarding video recordings, the interested party must send a written request to SU@SUNAILS.ES or to our postal address. Due to the nature of video images, applicants must provide a copy of their ID and a recent photograph, specifying the date, time, and approximate location where they were present to verify their identity in the footage.