Privacy Policy

Last updated: 19 July 2026

1. Data controller identity

  • Data controller: [SYLWIA’S FULL NAME OR COMPANY NAME]
  • Trading name: Savelis by Sylwia
  • DNI/NIF/CIF: [NIF OR CIF OF THE COMPANY]
  • Address: [STUDIO ADDRESS], [POSTCODE], Tenerife, Canary Islands, Spain
  • Email: hola@savelis.es
  • Phone: [STUDIO PHONE]

Savelis by Sylwia is a beauty and wellness studio offering facial (Kobido) and body (LPG Cellu M6) treatments, based in Tenerife.

2. What personal data do we collect?

We only collect data that you voluntarily provide to us by filling in the contact form on our website or by writing to us directly via WhatsApp or email:

DataPurposeLegal basis
NameAddress you in our communicationsPerformance of pre-contractual measures at the data subject’s request (art. 6.1.b GDPR)
Message contentRespond to your query or appointment requestPerformance of pre-contractual measures (art. 6.1.b GDPR)

We do not collect data automatically (we don’t use tracking cookies or analytics tools). Our static hosting (Cloudflare Pages) does not install tracking scripts.

3. How do we collect your data?

When you use the contact form on this website:

  • If you choose the WhatsApp button, your browser opens the WhatsApp application with a pre-drafted message addressed to our WhatsApp number. You send it from your device. WhatsApp Inc. (Meta Platforms Ireland Ltd.) receives your message and, depending on your account configuration, also your phone number.
  • If you choose the Email button, your browser opens your email client with a pre-drafted message addressed to hola@savelis.es. You send it from your device. Google Ireland Ltd. (Gmail) receives your message.

In both cases, Savelis does not store this data on any of our own servers. The data goes directly to Sylwia’s device.

4. Who else sees your data?

Your messages are received by Sylwia (Savelis by Sylwia) on her mobile phone and/or email account. These personal devices are password-protected and, in the case of the phone, encrypted.

Additionally:

  • WhatsApp / Meta Platforms Ireland Ltd. — receives your messages according to the WhatsApp Privacy Policy. Meta acts as a data processor for data we send through their service.
  • Google Ireland Ltd. (Gmail) — receives your emails according to the Google Privacy Policy. Google acts as a data processor.
  • Cloudflare Inc. — our hosting and email routing provider, which may process technical data (IP address, HTTP headers) according to its Privacy Policy.

5. How long do we keep your data?

We keep your messages for the time necessary to handle your query or appointment, and subsequently for a maximum period of 2 years from the last contact, unless you request earlier deletion.

6. What are your rights?

Under the General Data Protection Regulation (GDPR) and Spanish LOPDGDD (Ley Orgánica 3/2018), you have the right to:

  • Access — obtain confirmation of whether we process your data and access it.
  • Rectification — correct inaccurate or incomplete data.
  • Erasure (“right to be forgotten”) — request the deletion of your data.
  • Restriction — request that we restrict processing in certain circumstances.
  • Portability — receive your data in a structured, commonly used format.
  • Objection — object to the processing of your data.
  • Withdrawal of consent — when processing is based on your consent.

To exercise any of these rights, write to hola@savelis.es stating your request. We will respond within a maximum of one month.

7. Right to lodge a complaint with the supervisory authority

If you believe that the processing of your personal data violates the regulations, you may lodge a complaint with the Spanish Data Protection Agency (AEPD):

  • Web: www.aepd.es
  • Address: C/ Jorge Juan, 6 — 28001 Madrid (Spain)

You may also lodge a complaint with the supervisory authority of your country.

8. Cookies and tracking technologies

This website does not use cookies, either its own or third-party.

We also do not use web analytics tools (Google Analytics, Plausible, etc.). Therefore, no tracking cookies are stored in your browser when you visit savelis.es.

9. Web analytics

We use Cloudflare Web Analytics, a web analytics service that does not use cookies and is fully compliant with the General Data Protection Regulation (GDPR) and the Spanish LSSI (Ley de Servicios de la Sociedad de la Información y de Comercio Electrónico).

What data do we collect?

  • Number of visits (pageviews).
  • Unique visitors (estimate based on IP address, hashed and not stored).
  • Country of origin (aggregated, not individual).
  • Device type and browser (aggregated).
  • Most visited pages.
  • Traffic source (referrer).

Where is this data processed?

The data is processed and stored on Cloudflare Inc.’s servers within their global network. Cloudflare acts as a data processor for these aggregated data.

Important: Cloudflare Web Analytics is privacy-first: it does not use cookies, does not store full IP addresses, does not individually identify visitors, and does not share data with third parties for advertising purposes.

You can consult Cloudflare’s privacy policy at: https://www.cloudflare.com/privacypolicy/

If in the future we add additional analytics tools (e.g. Plausible, Fathom, or any service requiring consent), we will update this policy and, where required, request your consent beforehand.

10. Security measures

We apply the following measures to protect your data:

  • HTTPS/TLS encryption across the site (Cloudflare SSL certificate).
  • We do not store personal data in our own databases.
  • The devices from which Sylwia accesses messages are password-protected and encrypted.
  • Access to the email account and WhatsApp number is protected by two-factor authentication (2FA).

11. Changes to this policy

Any substantial changes to this policy will be announced on this page with a new update date. We recommend reviewing it periodically.

Last updated: 19 July 2026