Privacy Policy

1. Introduction and Data Controller

This Privacy Policy sets out the data processing practices of Matemint PCK BCN Recovery Studio S.L. (Company Registration No: B-67891234, Carrer d'Ausiàs Marc 48, 08010 Barcelona, Spain), operating under the website matemintpckbcn.com. We are committed to upholding high standards of data protection under the General Data Protection Regulation (EU) 2016/679 (GDPR), the Spanish Organic Law 3/2018 (LOPDGDD), and relevant global privacy standards including the California Consumer Privacy Act (CCPA/CPRA).

2. Information We Collect

We collect personal information through two main mechanisms:

• Direct Communication (Contact Form): When you submit an enquiry regarding recovery consultations, assessments, or thermal suites, we collect your full name, email address, chosen sport/recovery category, and message text. We only collect details that you voluntarily supply.
• Technical & Browsing Data: Standard server access logs automatically record information including your truncated IP address, browser user agent, referring URL, time of access, and pages viewed. This data is collected for server health and site security.

3. Legal Bases for Processing

We process your personal data under the following legal frameworks:

• Consent (Art. 6(1)(a) GDPR): When you opt-in to optional analytics cookies or check the consent box on our consultation enquiry form.
• Legitimate Interests (Art. 6(1)(f) GDPR): To respond to your direct queries, maintain website stability, monitor abuse, and ensure technical security.
• Pre-Contractual Steps (Art. 6(1)(b) GDPR): To coordinate schedule requests and provide consultation details before you visit our studio.

4. Cookies and Web Storage

We use technical cookies necessary for website operation, along with localStorage to store your cookie consent preferences so you are not prompted repeatedly. Non-essential cookies, such as privacy-respecting aggregate analytics, are only activated if you explicitly select "Accept All" or opt-in via our preferences modal. Full information is available in our dedicated Cookie Policy.

5. Third-Party Processors and Hosting

Our static site is hosted on secure web infrastructure located within the European Economic Area (EEA). We do not sell, rent, or lease your personal data to commercial data brokers. Where external hosting or email routing vendors are utilized, they act strictly under binding Data Processing Agreements ensuring equivalent security safeguards.

6. Data Security and Retention

We maintain technical and organizational measures to safeguard your personal data against accidental loss, unauthorized access, or improper alteration. All web transmissions are encrypted via modern Transport Layer Security (TLS/HTTPS).

Enquiry data submitted via our contact forms is retained only as long as necessary to answer your consultation questions and manage ongoing athletic scheduling, typically not exceeding 12 months from your last interaction, unless longer retention is required by Spanish commercial or tax regulations.

7. Your GDPR Rights (European Union & UK)

If you reside within the EEA or the UK, you have enforceable rights regarding your personal information:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal records.
• Right to Erasure ('Right to be Forgotten'): Request deletion of your personal data where there is no overriding legal ground for retention.
• Right to Restriction of Processing: Request suspension of processing under specific legal disputes.
• Right to Data Portability: Obtain your data in a structured, machine-readable format.
• Right to Object: Object to processing carried out under legitimate interest grounds.

To exercise these rights, please contact our Data Protection Officer at [email protected]. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD).

8. California Privacy Rights (CCPA / CPRA)

For California residents, we confirm that we do not sell or share personal information for cross-context behavioral advertising. You have the right to know what personal information is collected, request deletion, and not receive discriminatory treatment for exercising your privacy rights.

9. Children's Privacy

Our website and recovery services are not directed to individuals under the age of 16 without parental or guardian consent. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal information to us, please notify us immediately for prompt deletion.

10. Updates to This Policy

We may revise this Privacy Policy periodically to reflect changes in regulatory guidance or studio operations. The revised version will be published here with an updated effective date.

11. Contact Our Privacy Team

For any questions, requests, or privacy concerns, please contact:
Data Protection Officer
Matemint PCK BCN Recovery Studio S.L.
Carrer d'Ausiàs Marc 48, 08010 Barcelona, Spain
Email: [email protected]