Book

This is a translation. If there is any difference, the Spanish version prevails.

Privacy

Who processes your data

What data we ask for

In the booking form we ask for: your name, mobile number, town, the service, your preferred day and time slot, the language in which you are viewing the website, whether it is a gift and, if you wish, a comment. We do not ask for any health information in the booking form.

On the booking confirmation page we also ask you for: your address, directions to get there (if you wish), your email, your first name and surname(s), your signature and your yes/no answers to the health questionnaire. We only ask for health information in that private questionnaire: the questions are yes/no, your answers are encrypted on your phone or computer before they are sent, and only our coordination team sees them. We never ask you for health information on WhatsApp.

The health questionnaire and the booking confirmation page

When we have agreed a day and time with you, we send you a personal link. On that page you see your appointment, give us your address and an email address, answer a short yes/no questionnaire about your health and sign. Each adult who is going to receive a massage has their own link: nobody can answer or sign for another person.

We use the answers to decide whether we can give you the massage and how to adapt it (area, pressure or product), and so that your therapist knows only the outcome. It is a wellness massage: the questionnaire is not a medical check-up and does not replace your doctor. We use these answers because you give them to us when you answer and sign the questionnaire. You can ask us to delete them at any time, on WhatsApp or by email, without telling us anything about your health; anything done before you ask us remains valid, but without the questionnaire we cannot confirm new appointments. After the appointment, we keep the answers blocked, only to defend ourselves if there is a claim, as we explain below.

We do not ask you for the names of illnesses or medicines, for medical reports or photos, or to write anything about your health. We will never ask you for health information on WhatsApp. If you tell us something about your health on WhatsApp anyway, we do not use it: we ask you to answer the questionnaire on the website and we delete that message.

Only our coordination team sees the full answers. Your therapist receives your name, the address and the time of your appointment, and from the questionnaire she only knows whether the massage is standard, adapted (area, pressure or product), or needs a new date. Neither the questionnaire nor its outcome is ever sent to advertising tools, and that page has no Meta pixel and no analytics.

The website is hosted by Vercel and the data is stored in an Upstash database. Both are US companies, and the database is in the US (Virginia). This transfer outside the European Union is made with the safeguards these companies offer for sending data outside the EU, and you can ask us for a copy of those safeguards. Your name, your address, the directions to get there, your email, your answers and your signature are encrypted on your own phone or computer before they are sent. Vercel and Upstash only store this data encrypted and do not have the key to read it: it is only decrypted in our coordination team's dashboard, with a key that we keep. The name we book the appointment under, the service, the day, the time and the town are stored without this encryption, because we need them to organise our schedule. From your signature we keep only the image, not how you draw it (speed or pressure). Then our coordination team gives your therapist what she needs to come to you for your appointment and sends you the confirmation by email through our email provider.

If the appointment does not take place, we delete your answers and your signature after 3 months. If it does take place, we stop using your answers after the appointment and keep them blocked, together with your signature, only to defend ourselves if there is a claim, for 3 years from your last appointment; after that, we delete them. We keep your name, your address and your email while you are a client and, after that, for as long as the law requires for invoices and claims.

Only one answer leads to a decision made without a person checking it first: if you report symptoms in a leg, we cannot give you the massage. This is for your safety. In that case we show you a warning telling you to get medical help, and the appointment is cancelled free of charge. Even so, our coordination team checks it afterwards, and you can ask for a person to look at it, give us your point of view and tell us if you disagree.

You can ask to see, correct or delete your data, object, restrict its use, ask for a copy and withdraw your consent, by email at info@calmanido.com or on WhatsApp at +34 614 84 04 17, without telling us anything about your health. If you ask for a copy of your health answers, we give it to you through a secure channel, never on WhatsApp. If you think we have not processed your data properly, you can make a complaint to the Spanish Data Protection Agency (www.aepd.es).

What we use your data for

To reply to your request and to organise your appointment. If you tick the WhatsApp box, we also use your data to send you offers and available times; you can unsubscribe at any time.

The legal basis for using your data

Replying to your booking request: steps you have asked us to take before a possible contract. Sending offers on WhatsApp: only with your consent, which you can withdraw at any time.

How long we keep your data

Requests that do not lead to a booking are deleted after 12 months.

Who we share your data with

With Vercel, which hosts the website; with Upstash, which stores booking requests and bookings; with our email provider, to send you the confirmation; with WhatsApp, if you message us there; and with your therapist, the details she needs to come to your appointment. Vercel and Upstash are US companies and the database is in the US (Virginia), with the safeguards that these companies offer for sending data outside the EU. What you enter on the booking confirmation page (your address, questionnaire answers and signature) is end-to-end encrypted: these companies cannot read it. Booking requests are not encrypted in this way. We do not sell your data or pass it on to anyone for advertising.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability by writing to us at info@calmanido.com or on WhatsApp at +34 614 84 04 17. If you are not satisfied, you can make a complaint to the Spanish Data Protection Agency (aepd.es).