Your rights under the General Data Protection Regulation
Last updated: August 2026
Espacio Yoga y Vitalidad is committed to complying with the General Data Protection Regulation (GDPR) (EU) 2016/679. This page outlines how we handle personal data in accordance with GDPR requirements and explains your rights as a data subject.
Espacio Yoga y Vitalidad acts as the data controller for personal information collected through our website and services. Our contact details are:
Espacio Yoga y Vitalidad
Calle de la Serenidad, 42
28001 Madrid, Spain
Email: [email protected]
We process personal data under the following lawful bases:
As a data subject within the European Economic Area, you have the following rights:
You have the right to request a copy of the personal data we hold about you and information about how it is processed.
You may request that we correct any inaccurate personal data or complete any incomplete data we hold.
You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose or you withdraw consent.
You may request that we limit how we use your data in certain situations, such as when you contest its accuracy.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
You may object to processing of your data based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently engage in such automated decision-making.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In complex cases, this period may be extended by two additional months, and we will inform you of any such extension.
We may need to verify your identity before processing your request. There is generally no fee for exercising your rights, although we may charge a reasonable fee for manifestly unfounded or excessive requests.
Your personal data is primarily processed within the European Economic Area. If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
We retain personal data only as long as necessary for the purposes for which it was collected. Retention periods vary based on the nature of the data and our legal obligations. When data is no longer needed, it is securely deleted or anonymized.
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or destruction. These measures are regularly reviewed and updated.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, inform affected individuals without undue delay.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).
We may update this GDPR information periodically. Significant changes will be communicated through our website.