Data controller
In accordance with EU Regulation 2016/679 of 27 April, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 of 5 December, on Personal Data Protection and the Safeguarding of Digital Rights (LOPDGDD), the user is hereby informed of the following details of the data controller:
- Controller: Gillian Chalmers Buchanan Hall
- Tax ID (NIF): X0906258N
- Location: Aranjuez (Madrid), Spain
- Contact email: contacto@amebashiatsu.es
- Website: https://amebashiatsu.es
Purposes of the processing
Personal data provided by the user through the website will be processed for the following purposes:
- Managing enquiries and requests for information
When the user makes contact through any form on the website (general contact, request for tutorials and mentoring sessions, course enrolment), the data is used to respond to the enquiry or request made. - Managing enrolments and bookings
When the user requests information about courses, workshops or sessions, the data is used to process the request, communicate availability and conditions, and, where applicable, to formalise the enrolment. - Service-related informative communications
If the user requests information about a course or service, the data may be used to send information directly related to that request.
No general commercial communications are sent without the express consent of the user.
Legal basis for the processing
The legal basis for processing the data is:
- Consent of the interested party (article 6.1.a GDPR), given by voluntarily submitting any form on the website.
- Performance of a contract or implementation of pre-contractual measures (article 6.1.b GDPR), when the matter relates to enrolment in courses or sessions.
Retention period
Data will be retained for the time necessary to fulfil the purpose for which it was collected and to determine any possible liabilities that may arise from said purpose and from the processing of the data. The periods established by the regulations on archives and documentation will apply.
Specifically:
- Enquiries not resulting in enrolment: retained for a maximum of 12 months from the last contact, unless the user requests their deletion before.
- Data of persons enrolled in training programmes: retained for the legal period required by accounting and tax regulations (a minimum of 4 years).
Recipients of the data
Personal data will not be communicated to third parties, except:
- To the competent authorities in the cases provided for by law.
- To the providers that supply technical services to the controller (web hosting, form management tools, email, website maintenance), with whom the corresponding data processing agreements have been signed where necessary.
Current providers with possible access to the data as data processors:
- Web hosting: Dinahosting S.L. (España, UE).
- Website development and maintenance: ARTBYTE S.L., Tax ID B81614877, registered at Calle Ojalvo, 2, Aranjuez (Madrid). Technical access to the website for maintenance, development and updates.
- Web forms: data submitted through forms is stored in the website’s own database, hosted on the Dinahosting server. No external form management platforms are used.
No international data transfers are made outside the European Economic Area.
User rights
The user has the right to:
- Access: to know which personal data is being processed.
- Rectification: to amend inaccurate or incomplete data.
- Erasure (“right to be forgotten”): to request the deletion of data when it is no longer necessary.
- Objection: to object to the processing of their data under certain circumstances.
- Restriction of processing: to request the restriction of processing in certain cases.
- Portability: to receive the data in a structured, commonly used format.
- Withdrawal of consent: at any time, without affecting the lawfulness of the processing carried out prior to its withdrawal.
To exercise these rights, the user may contact the controller via the email contacto@amebashiatsu.es, putting “Data protection” in the subject line and providing documentation that proves their identity.
The user also has the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), at C/ Jorge Juan, 6, 28001 Madrid, or through its electronic office at https://www.aepd.es.
Data security
The controller has adopted the technical and organisational measures necessary to ensure the security of personal data and to prevent its alteration, loss, unauthorised processing or access, taking into account the state of the technology, the nature of the data stored and the risks to which it is exposed.
Modifications
This privacy policy may be updated to adapt to legislative or case-law developments, as well as to industry practices. In such cases, changes will be announced on the website with reasonable notice prior to their implementation.
Last updated: april 15 2026