ANDREA PLANELLS GUASCH informs Users that they may exercise their rights of access,

rectification, restriction, erasure, data portability, and objection to the processing of their personal data,

as well as the right not to be subject to automated decision-making, including profiling, by contacting the

Data Controller, and may also withdraw their consent.

Right of Access: This is the user’s right to obtain confirmation as to whether their

data is being processed and, if so, the specific personal data being processed and the legal

information regarding the processing (purposes, legal basis, retention periods, transfers, origin of the

data, etc.).

Right to Rectification: This is the data subject’s right to have data amended that

proves to be inaccurate or incomplete. In relation to the website, this right can only be exercised

in respect of information under the website’s control, for example,

deleting comments posted on the website itself, images or web content containing

the user’s personal data.

Right to Restriction of Processing: This is the right to have the purposes of processing

originally envisaged by the data controller restricted in certain circumstances.

Right to Erasure: This is the right to have the user’s personal data erased,

except as provided for in the GDPR itself (freedom of expression and information, obligations to

retention, the establishment, exercise or defence of legal claims, etc.).

Right to Data Portability: The right to receive the personal data that the user has

provided, in a structured, commonly used and machine-readable format, and to transmit it to another

controller where the processing is based on consent or on the performance of a

contract and is carried out by automated means.

Right to Object: This is the user’s right to prevent the processing of their

personal data or to have such processing ceased by the website where

the processing is based on legitimate interests or the public interest, or where it involves

direct marketing processing.

Right not to be subject to automated decision-making, including profiling:

Where the processing is not necessary for the conclusion or performance of a contract, nor is it

authorised by European Union or Member State law, nor is it based on

consent, you have the right not to be subject to a decision based solely on

automated processing, including profiling, which produces legal effects or

significantly affects you in a similar manner.

Right to withdraw consent: For any processing based on your consent,

you have the right to withdraw it at any time and free of charge.

To exercise any of the data protection rights described above, you must

follow the instructions below:Submit a written request to the address C/DEL CIGNE, NUM.3 SA CARROCA, 07817

CARROCA, LA (ILLES BALEARS) (for the attention of ANDREA PLANELLS GUASCH) or

by email to Info@era-massage.com.

The written request submitted by the data subject (the person concerned) seeking to exercise

their rights must take the following into account:

o The applicant must provide reliable proof of identity and, should there be any doubts regarding the

identity of the applicant, they will be asked to rectify the request (e.g. by providing further

information, such as their National Identity Card number, the National Identity Card document, the email address

provided, etc.)

o The request may be made by a representative, whether legal or voluntary, provided that the representative is

duly identified and authorised by the data subject (by means of an

express authorisation from the data subject to exercise the personal rights regulated in the

personal data protection regulations).

o A statement specifying the request (the right(s) you wish to exercise). If you do not

refer to a specific processing operation, you will be provided with a response regarding all

processing operations affecting your personal data. If you request information regarding

a specific processing operation, only information relating to that operation will be provided. If you make the request by telephone, you will be

advised to submit it in writing and will be informed of how to do so and the address

to which it should be sent. Information will never be provided over the telephone.

o Postal or email address for the purposes of notifications.

o Supporting documents for the request you are making, if necessary.

o The applicant must use any means that allows for proof of the dispatch and

receipt of the request.

Finally, we inform you that you have the right to lodge a complaint with the Spanish Data Protection Agency

in the event that you become aware of, or consider that a situation may constitute a

breach of the applicable data protection regulations.

ANDREA PLANELLS GUASCH undertakes to implement the necessary technical and organisational measures,

commensurate with the level of risk associated with the processing operations carried out by the company and set out in this section, in order to ensure the integrity, confidentiality and availability of the data.