Privacy policy

Owner: Soledad Jiménez Gallardo. Trading name: SOLE CENTRO DE IMAGEN INTEGRAL. Tax ID: 52351740Z. Registered address stated in the original legal notice: Urb. Condal no. 35, 29780 Nerja (Málaga), Spain. Centre: Avd. Constitución s/n (opposite no. 1), 29780 Nerja (Málaga). Contact: info@solecentrodeimagen.com · +34 952 523 813.

This policy describes processing under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018.

We receive the details you provide when contacting us: name, telephone, email and message. Orders also require products, quantities, amount, delivery address and order reference. The contact form sends your message from this website: it is stored in our database and forwarded to us by email so that we can reply.

Hosting infrastructure may process technical data such as IP addresses and security logs. If you accept analytics, Google Analytics receives browsing data (pages viewed, device, language, approximate location and how you reached the website) to produce usage statistics; with the Ad measurement category, Google Ads also learns whether a visit that came from an ad ended in an enquiry or purchase. We do not use remarketing or other networks' pixels. Google Maps receives technical data only when you allow it to load. Stripe handles payment in its own environment; this website does not receive or store your full card number.

Do not include medical information or other special-category data in the general enquiry form. Any clinical records are handled separately with their own privacy information and lawful basis.

Enquiries: replying on the basis of consent and, for requested services, steps prior to entering a contract. Appointments and orders: performance of the contract. Invoicing and tax duties: legal obligations.

Website security and fraud prevention: legitimate interests, respecting your rights. Optional external content and visit statistics with Google Analytics: consent. Cookie acceptance and enquiry submission do not authorise advertising.

Necessary hosting and technical providers (Nicalia, web hosting; Supabase, database hosted in the European Union), email services, payment services (Stripe), carriers and advisers may access data as needed to provide services or comply with the law. Google receives data when an authorised map loads; WhatsApp and social networks apply their policies when you choose to use them.

Some providers may process data outside the European Economic Area. Safeguards must match the contracted provider and service, such as a current adequacy decision or standard contractual clauses where appropriate. Request details of the actual providers and safeguards at info@solecentrodeimagen.com.

Enquiries are retained for the time needed to respond and address liabilities. Order and billing records are retained for applicable tax, accounting and claims periods, generally four years for tax duties and six years for commercial records, without prejudice to other statutory periods.

Cookie choices expire after six months. The basket remains in local storage until cleared or browser data is deleted.

Request access, rectification, erasure, objection, restriction and portability where applicable at info@solecentrodeimagen.com or by post to the controller. Withdraw consent without affecting prior lawful processing. Additional identity information will only be requested when necessary.

We normally respond within one month. Complex requests may take up to two additional months, with notice. You may complain to the Spanish Data Protection Agency: https://www.aepd.es.

Access should be restricted to people who need to handle the data. Technical and organisational safeguards must remain proportionate to risk. Incidents will be handled in accordance with GDPR duties.

We will update this policy when processing or providers change and request fresh consent when required.