Privacy Policy
Last updated: 30 September 2026
1. Who is responsible for your personal data?
This Privacy Policy explains how DE | NOISE processes personal data when you visit denoisebcn.com, contact us or book an appointment.
The data controller is:
Vitalia Magda, operating under the name DE | NOISE
Address: C. de Sicília, 153, Eixample, 08013 Barcelona, Spain
Email: contact@denoisebcn.com
You can contact us at this email address with questions about your personal data or to exercise your rights.
2. What information do we process?
Depending on how you interact with us, we process:
  • Contact information: your name, telephone number and email address.
  • Appointment information: your selected service, specialist, appointment date and time, booking reference and appointment status.
  • Service and payment records: information about services received, amounts paid and payment method, where recorded in our salon management system.
  • Communications: information you provide when contacting us about appointments, services or other enquiries.
  • Technical information: information involved in delivering and protecting the website, such as IP addresses, browser information and diagnostic records.
  • Analytics and advertising information: where you have given the relevant consent, cookie identifiers, page views, website interactions and referral or advertising information.
Our online booking form does not ask for medical information. Please do not include sensitive health information in general website enquiries.
3. Why do we use your information?Bookings and salon services
We use your contact and appointment details to arrange appointments, manage changes or cancellations, communicate about your booking and provide the services you request.
The legal basis is taking steps at your request before entering into a contract and performing that contract.
Enquiries
We use information you provide to respond to your questions. For enquiries about a potential booking, processing is necessary to take steps at your request. For other enquiries, we rely on our legitimate interest in responding to people who contact our business.
Accounting and legal obligations
Where applicable, we retain and process transaction and billing records to comply with accounting, tax and other legal obligations.
Security and administration
We process necessary technical information to maintain our website and booking service, investigate errors and protect against misuse.
The legal basis is our legitimate interest in operating secure and reliable services, balanced against your rights.
Website analytics and advertising
With your consent, we use Google Analytics to understand website usage and Google Ads and Meta technologies to measure advertising performance and support advertising audiences.
You can choose analytics and advertising separately through our cookie settings. Refusing these optional technologies does not prevent you from booking an appointment.
4. Marketing communications
We do not currently send promotional email, SMS or WhatsApp campaigns.
If we introduce marketing communications, we will explain the intended use of your information and obtain consent where required before sending them. We will provide a way to unsubscribe.
Making a booking, reading this policy or accepting website cookies does not by itself subscribe you to promotional messages.
Communications needed to manage an appointment are separate from promotional campaigns.
5. Who receives your information?
Information is accessed by authorised salon personnel and service providers where necessary for their roles.
Our principal services include:
  • Altegio: appointment and salon management.
  • Tilda: operation of the main website.
  • Hosting and technical service providers: operation, maintenance and security of our booking service and supporting systems.
  • Google: website analytics and advertising technologies, subject to your relevant consent.
  • Meta: advertising technologies, subject to your advertising consent.
Relevant information may also be disclosed to professional advisers or public authorities where necessary to meet legal obligations or handle legal claims.
Service providers’ privacy information is available here:
6. International data transfers
Our booking service is hosted on a Hetzner server located in Finland, within the European Economic Area.
We also use external service providers whose operations can involve international processing:
  • Altegio processes appointment and client information on our behalf. Altegio publicly describes its hosting as located in the European Union.
  • Tilda’s Data Processing Agreement identifies processing in the European Union and the United States, including storage and backup of website projects. It describes the use of adequacy assessments and contractual safeguards where required.
  • Google’s advertising and analytics services involve international processing, including in the United States. Google describes reliance on the EU–US Data Privacy Framework for relevant transfers and Standard Contractual Clauses for other applicable transfers.
  • Meta’s published information describes reliance on the EU–US Data Privacy Framework for certain transfers, including data associated with its business tools.
The location of a primary server does not necessarily identify every location where a provider or its authorised service providers process information.
Further information about the providers’ processing and transfer arrangements is available in Altegio’s Privacy Policy, Tilda’s Data Processing Agreement, Google’s international transfer information and Meta’s published transfer information.
For questions about the providers used by DE | NOISE or the safeguards relevant to your information, contact contact@denoisebcn.com.
7. How long do we keep your information?
We apply different retention periods depending on the purpose of processing:
  • Client and appointment history: ordinarily retained for up to 24 months after the last completed appointment. Information necessary for an outstanding appointment, unresolved complaint, legal obligation or legal claim is assessed separately.
  • General enquiries that do not result in a booking: retained for up to 12 months after the enquiry is closed.
  • Technical logs: retained for up to 30 days, unless specific records are needed to investigate a security incident or handle a legal claim.
  • Routine backups: retained on a rolling basis for up to 90 days. Information deleted from active systems can remain in backups until the relevant backup expires.
  • Accounting and tax records: retained for the periods required by applicable Spanish law. Where the six-year commercial accounting requirement applies, the period runs from the last relevant accounting entry. Specific legal requirements can require longer retention.
  • Google Analytics: our property is configured with a 14-month retention period for user-level and event-level data covered by this setting. New activity renews the retention period for user-level data. Standard aggregated reports are not subject to this same setting.
Cookie lifetimes are described separately in our Cookie Policy. Withdrawing cookie consent does not automatically delete appointment records or information previously collected.
8. Cookies and your choices
Our website provides separate controls for analytics and advertising cookies.
You can accept all optional categories, reject them, or select your preferences. You can change your choice later using the Cookie settings button on the website.
For details about the technologies used and their storage periods, please see our Cookie Policy: https://denoisebcn.com/cookiepolicy
Withdrawing cookie consent stops the relevant future tracking. It does not automatically erase information previously collected or delete your appointment records.
9. Your data-protection rights
Subject to the conditions and exceptions in applicable law, you can request:
  • Access to your personal data.
  • Correction of inaccurate or incomplete information.
  • Erasure of your information.
  • Restriction of processing.
  • A portable copy of information where the right to data portability applies.
  • An objection to processing based on legitimate interests.
Where processing relies on consent, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
To make a request, contact contact@denoisebcn.com. We may ask for information reasonably necessary to confirm your identity.
You can also lodge a complaint with the Spanish Data Protection Agency, Agencia Española de Protección de Datos (AEPD), or another competent supervisory authority.
10. Providing information
To arrange a booking, we need sufficient information to identify your appointment and contact you about it. If required booking details are not provided, we may be unable to complete your request.
Consent to optional analytics or advertising is not a condition of receiving salon services.
11. Updates to this policy
We will update this policy when our services or data-processing practices change. The date at the top indicates the latest revision.
For questions, contact contact@denoisebcn.com.
Made on
Tilda