Privacy policy
Last updated: 20 October 2026
This page explains, in plain terms, what personal data we process when you visit our website, contact us or book an appointment, what we use it for and what your rights are, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
- Controller: DANFERRO INVEST, S.L. (trade name: Cool Nails Beauty & Care)
- Tax ID (NIF): B24895542
- Address: Carrer de Milà i Fontanals, 17, 08012 Barcelona
- Email: coolnailsgracia@gmail.com
- Phone / WhatsApp: +34 614 89 47 92
2. What data we process, why and on what basis
| When | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| You contact us by email or WhatsApp | Name, phone, email and whatever you tell us | Answer your enquiry | Your request and our legitimate interest in answering it | As long as needed to answer, and up to 1 year after |
| You book an appointment (Treatwell, WhatsApp or email) | Name, phone, email, service, date and time, appointment history | Manage your appointment, send reminders and provide the service | Performance of the service you request | While you are a client and then for legal periods (e.g. 6 years for accounting and tax records) |
| You send us a job application | CV, photo, contact details and photos of your work | Assess your application to work at Cool Nails | Your consent by sending it | Up to 1 year, unless you ask us to delete it sooner |
| You browse the website and accept cookies | Browsing data and online identifiers | Visit statistics and measuring our Google ads | Your consent | See the cookie policy |
We do not use your data for automated decision-making or profiling. We will not send you marketing by email or WhatsApp without your consent.
3. Who else may access your data
We do not sell or share your data. Only the providers we need to operate have access, under contract and with safeguards:
- Treatwell: online booking platform. When you book through Treatwell, it also processes your data under its own privacy policy.
- Google (email, Analytics and Ads) and Meta (WhatsApp): communications and statistics.
- Netlify: website hosting.
- Our accountants and public authorities when required by law (e.g. the tax agency).
Some of these providers (Google, Meta, Netlify) may process data outside the European Economic Area, mainly in the US. They do so under the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission.
4. Your rights
You can ask us at any time to access, rectify or erase your data, object to or restrict its processing, or receive it in a portable format (portability). If you gave us your consent, you can withdraw it at any time without affecting prior processing.
Email us at coolnailsgracia@gmail.com stating which right you wish to exercise. We will reply within one month. If we cannot identify you, we may ask you to prove your identity.
If you believe we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
5. Security
We apply reasonable technical and organisational measures to protect your data against loss, unauthorised access or misuse.
6. Changes
We may update this policy if the law or the way we work changes. The date of the last update is shown above.
More information in our legal notice and cookie policy.