Privacy policy
Information on how PelucasNaturales.es processes personal data under the GDPR and Spanish data protection law.
Last updated: July 12, 2026 GDPR and Spanish LOPDGDD
Basic information
| Controller | Gonzalo Caballero, Spanish ID number 48161207N, Avenida de Reina Victoria 30, 28003, Madrid, Spain. |
|---|---|
| Contact | info@pelucasnaturales.es |
| Purposes | Manage the directory, display results and maps, handle requests, maintain security, measure website use when consent exists and manage communications related to profiles or rights. |
| Legal basis | Consent, legitimate interest, performance of user requests and compliance with legal obligations, depending on each processing activity. |
| Rights | Access, rectification, erasure, objection, restriction, portability and withdrawal of consent where applicable. |
| Supervisory authority | You may lodge a complaint with the Spanish Data Protection Agency if you believe the processing does not comply with applicable law. |
Data controller
The controller for personal data processed through PelucasNaturales.es is Gonzalo Caballero, Spanish ID number 48161207N, with address at Avenida de Reina Victoria 30, 28003, Madrid, Spain. For privacy matters, contact info@pelucasnaturales.es.
Personal data that may be processed
Browsing and security data
When browsing the website, technical data may be processed, such as IP address, access date and time, pages visited, referrer URL, browser, operating system, technical identifiers, loading errors and data required to keep the website secure, available and functioning correctly.
Data voluntarily submitted
If you contact us by email or request correction, update or removal of a profile, the data you provide may be processed: name, email, role or relationship with the business, request content, supporting documentation and data needed to respond or verify the request.
Geolocation
When using features such as "shops near me", the browser may ask for permission to access your location. This location access is requested separately and is not enabled automatically. In the current setup, coordinates are used to sort or display nearby results and calculate distances in the browser, without precise location being stored by default in a proprietary database.
Cookies, preferences and similar technologies
The website uses a consent management platform compatible with Google AdSense and the IAB Transparency and Consent Framework (TCF) to manage privacy, analytics and advertising preferences where applicable. It may also use cookies or similar technologies for preferences, analytics, maps, icons or advertising under the terms described in the Cookie policy and, where required, with your consent.
Business, professional or center data
The directory may include identification and contact data for businesses or professionals, such as trade name, address, phone, website, social media, service category, opening hours, approximate location or editorial descriptions. These data may come from public sources, official websites, directories, social networks, submissions from businesses or editorial checks.
Purposes of processing
- Publish, organize and maintain the directory of shops, hair centers and providers.
- Enable searches by location, map, product type, need, shipping and other filters.
- Respond to information, correction, update, profile removal or rights requests.
- Prevent abuse, scraping, attacks, technical errors, fraudulent use or unauthorized access.
- Remember language, settings or consent preferences when authorized or technically necessary.
- Measure website performance and aggregated use with Google Analytics 4 where consent settings allow it.
- Display advertising through Google AdSense, including personalized or non-personalized advertising depending on your consent, location and Google settings.
- Comply with legal obligations, respond to authority requests and defend rights or legitimate interests.
Legal basis
| Processing | Legal basis |
|---|---|
| Technical operation, security and abuse prevention. | Legitimate interest in maintaining a secure, stable and useful website. |
| Responding to emails, requests or user communications. | Performance of the user's request and, where applicable, consent. |
| Publication and maintenance of professional or commercial directory data. | Legitimate interest in creating an informational directory of publicly accessible businesses, balanced against affected persons' rights. |
| Precise browser geolocation. | Explicit consent granted through the browser. |
| Non-essential cookies, analytics, personalized advertising or external content subject to consent. | User consent. |
| Retention required for legal obligations or claims. | Compliance with legal obligations and legitimate interest in defending rights. |
Recipients and processors
Data may be processed by providers that help operate the website, such as hosting, CDN, security, email, analytics, map, icon or advertising services. These may include Google Ireland Limited / Google LLC for Google Analytics 4, Google AdSense, Consent Mode and the Google CMP linked to AdSense. These providers act, where applicable, as processors or independent controllers under their own terms.
Personal data is not sold. Data may be disclosed to authorities, courts, law enforcement or legitimate third parties where required by law, valid request or defense of rights.
International transfers
Some technology and advertising providers may be located outside the European Economic Area or use international infrastructure. Where international transfers occur, they should rely on GDPR-recognized mechanisms such as adequacy decisions, standard contractual clauses or other applicable safeguards.
Retention periods
- Requests and communications: for as long as needed to respond and, generally, up to 12 months from the last communication, unless a legal obligation or pending claim requires longer retention.
- Technical and security logs: for as long as needed to ensure security, resolve incidents and comply with legal obligations.
- Listed business data: while the profile remains relevant to the directory, until it ceases to be appropriate, a valid correction or removal request is received, or the information should no longer be kept.
- Cookie consent: until withdrawn, browser data is deleted, the consent version changes or the technical period stated in the cookie policy expires.
Your rights
You may request access, rectification, erasure, objection, restriction, portability where applicable and withdrawal of consent without retroactive effect. To exercise these rights, write to info@pelucasnaturales.es, identifying the right you wish to exercise and providing enough information to identify yourself and locate the relevant processing.
If your request concerns a business profile, include the profile URL, business name and your relationship with it. Additional documentation may be requested where necessary to prevent unauthorized changes.
Minors
The website is not specifically aimed at minors. If a minor provides personal data without sufficient authorization, their legal representatives may request erasure or rectification by contacting the email address above.
Complaints
If you believe your data is not being processed in accordance with the law, you may first contact the owner at info@pelucasnaturales.es. You may also lodge a complaint with the Spanish Data Protection Agency through its official channels.
Changes to this policy
This policy may be updated to reflect legal, technical, editorial or provider changes. The version published on this page applies at each time.