Rosinyol app privacy policy

1. Who is responsible for data processing

ROSINYOL BEAUTY S.L. (NIF B24825762), with registered office at Calle Benet Cortada 44, bajos, local 1, 08174 Sant Cugat del Vallès (Barcelona), is responsible for processing personal data collected through the Rosinyol mobile application (the "App").

Contact for privacy matters: info@rosinyol.com. Tel. +34 685 30 43 44.

2. What is the App

The App is an exclusive service for Rosinyol beauty salon clients. It allows them to view upcoming appointments, the personal care routine prescribed by the salon, the skin dossier, the Rosinyol Circle loyalty program, and salon events, as well as receive reminders and notifications.

3. Data we process

  • Identification and contact: mobile phone number (access identifier), name and surname, email address (optional), and preferred language.
  • Data relating to the relationship with the salon: scheduled appointments, prescribed routine and products, loyalty level and points, event registrations.
  • Skin dossier: characteristics and goals of skin care, indication of aesthetic medicine treatments, and relevant habits, with notes made by the salon staff during visits. The App only displays these in view-only mode. This data may be considered a special category (health); we process it based on your explicit consent, which you can withdraw at any time.
  • Communication preferences: consent for commercial and WhatsApp communications, and push notification preferences.
  • Technical data: device identifier for push notifications (token), device platform and language, IP address at the time of requesting access, and technical security logs (with the phone number masked).

Fingerprint and biometrics: if you enable fingerprint access, verification is performed exclusively on your device by the operating system. No biometric data leaves the phone or is accessible to Rosinyol.

The App does not collect your location, photos, or contacts, and does not incorporate advertising analysis tools or third-party advertising.

4. Purposes and legal bases

  • To provide the App service (access, appointments, routine, loyalty, events): execution of the client contractual relationship (Art. 6.1.b GDPR).
  • To display the skin dossier: explicit consent (Art. 9.2.a GDPR).
  • Security and abuse prevention (SMS verification, captcha, request limits, logs): legitimate interest in protecting the service and accounts (Art. 6.1.f GDPR).
  • Push notifications and appointment reminders: consent, which you manage with the system's notification permission and from the App's profile.
  • Commercial and WhatsApp communications: consent (Art. 6.1.a GDPR), revocable at any time from the App's profile.

5. Recipients and data processors

We do not sell or transfer your data to third parties for their own purposes. To provide the service, we rely on providers who act as data processors:

  • Google Ireland Ltd.: sending push notifications (Firebase Cloud Messaging).
  • Cloudflare, Inc.: anti-abuse verification (Turnstile captcha) during access.
  • SMS sending provider: delivery of the one-time access code.
  • Microsoft Ireland Operations Ltd. (Azure): service infrastructure and technical logs, with primary hosting in the European Union.

When any of these providers involve transfers outside the European Economic Area, they are covered by the standard contractual clauses approved by the European Commission and by supplementary measures.

6. Retention

We retain data as long as you maintain a client relationship with the salon and, once it ends, for the legally required prescription periods. Technical security logs are kept for limited periods.

7. Your rights

You can exercise your rights of access, rectification, erasure, opposition, restriction of processing, and portability, and withdraw the consents granted, by writing to info@rosinyol.com or in person at the salon. You also have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Account and data deletion

You can request the deletion of your App account and associated data at any time by sending an email to info@rosinyol.com with the subject "App account deletion", indicating the phone number you use to access. We will process the request within a maximum of 30 days. Deleting the App account does not automatically delete the salon's customer history, which is retained as per section 6; you can also request its deletion in the same request.

9. Minimum age

The App is intended for individuals over 18 years of age who are clients of the salon.

10. Changes to this policy

If we modify this policy, we will publish the updated version on this page and, if the change is substantial, we will notify you via the App or by email.