HB AESTHETICS SLU informs its users that they can exercise their rights of access, rectification, limitation, deletion, portability, and opposition to the processing of their personal data, as well as the right not to be subject to automated decisions, including profiling, before the Data Controller, in addition to withdrawing the consent granted.

Right of access: This is the right of users to obtain confirmation on whether their data is being processed and, if so, the specific personal data being processed and the legal information about the processing (purposes, legal basis, retention periods, transfers, source of data, etc.).

Right of rectification: This is the right of the data subject to correct inaccurate or incomplete data. In the case of the website, such correction can only be made on the information under the control of the website, such as the deletion of comments published on the site, images, or web content containing the user's personal data.

Right to restrict processing: This is the right to restrict the purposes of processing originally foreseen by the Data Controller in certain cases.

Right to deletion (‘right to be forgotten’): This is the right of the user to delete personal data, except for the exceptions provided for in the GDPR itself (freedom of expression and information, retention periods, formulation, submission, or defense of claims, etc.).

Right to data portability: This is the right to receive the personal data that the user has provided in a structured, commonly used, and machine-readable format, and to transmit it to another data controller when the processing is based on consent or the performance of a contract and is carried out by automated means.

Right of opposition: This is the right of the user to prevent or stop the processing of their personal data by the website when the processing is based on legitimate interest, public interest, or when it is for direct marketing purposes.

Right not to be subject to automated decisions, including profiling: When the processing is not necessary for the conclusion or performance of a contract, nor authorized by European Union or Member State law, nor based on consent, users have the right not to be subject to a decision based solely on automated processing, including profiling, when this has legal effects or similarly significantly affects them.

Right to withdraw consent: Users have the right to withdraw their consent to any processing based on that consent, at any time and at no cost.

To exercise the data protection rights described above, users must follow the instructions outlined below:
Send a letter to the address CALLE TERRES BLANQUES 12, 17740 VILAFANT (GIRONA) (Attention: HB AESTHETICS SLU) or an email to dpo@hb-aesthethics.com

The letters sent by the interested parties requesting the exercise of a specific right must consider the following:

• - They must reliably identify themselves, and in case of doubts about their identity, they may be asked to complete the request (for example, requesting more information such as the National ID number, the ID card itself, the provided email address, etc.).
• - The request may be made by a legal or voluntary representative, provided that the person is properly identified and authorized by the interested party (through an express authorization granted by the interested party to exercise personal rights regulated under data protection laws).
• - The specific right to be exercised. If a specific processing is not mentioned, information will be provided about all processing operations involving the interested party’s personal data. If information is requested about a specific processing, only information regarding that processing will be provided. If the request is made by phone, the interested party will be asked to make the request in writing. Information on how to do so and the address to send it will be provided. Information will never be provided over the phone.
• - Postal or email address for notifications.
• - Documents supporting the request made, if necessary.
• - The medium used must allow proving the submission of the request and the receipt by the recipient.

Finally, we inform the interested parties that they have the right to file a complaint with the Spanish Data Protection Agency if they become aware of or believe that a specific event may involve a breach of the applicable data protection regulations.

HB AESTHETICS SLU is committed to adopting the necessary technical and organizational measures, in line with the risk level resulting from the processing carried out by it and explained in the terms and conditions section, to ensure its integrity, confidentiality, and availability.