Privacy policy

PRIVACY POLICY

Last updated: July 29, 2026 · Version 2.0

This Privacy Policy explains how M. Luisa Portales Domínguez processes personal data collected through www.luisaportalesmakeup.com, email, and professional social media profiles. The information is provided clearly and in layers, in accordance with the General Data Protection Regulation (GDPR) and applicable Spanish legislation.

1. DATA CONTROLLER

2. PRINCIPLES APPLIED TO DATA PROCESSING

Luisa Portales Makeup will process data in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality. Furthermore, it will implement data protection measures by design and by default, ensuring that only the data necessary for each purpose is requested and used.

3 DATA PROCESSED, PURPOSES, AND LEGAL BASIS

4. SPECIFIC INFORMATION ABOUT IMAGES

The capture and publication of photographs or videos is not required to contract or receive a service. The default option is non-publication. Before publishing an image, Luisa Portales Makeup will obtain specific authorization, allowing the individual to decide separately whether to permit its publication on the website and professional social media.

Refusal or withdrawal of consent will not affect the provision of the service. Upon withdrawal, new publications will cease, and reasonable measures will be taken to remove the images from the channels under the control of Luisa Portales Makeup. However, the removal of copies made by third parties or stored by the platforms themselves cannot be guaranteed.

5. COMMERCIAL COMMUNICATIONS

Currently, a newsletter is not managed, nor is the data obtained through the website used to send periodic advertising. Should commercial communications be enabled in the future, specific consent will be requested, or another valid legal basis will be applied, always offering a simple and free unsubscribe mechanism.

6. DATA RETENTION PERIODS

• Inquiries not resulting in a contract: for the time necessary to respond and, at most, one year, unless they must be retained to fulfill legal obligations.

• Customer, contract, and billing data: for the duration of the professional relationship and subsequently for the applicable statutory limitation periods.

• Authorized images: for as long as the promotional purpose remains valid and consent is not withdrawn.

• Social media interactions: for as long as they remain published on the platform or as long as it is necessary to respond to the communication.

• Security logs: for the period strictly necessary to detect and manage incidents.

7. RECIPIENTS AND PROCESSORS OF DATA PROCESSORS

Data will not be sold or disclosed to third parties for their own purposes, except where legally required. Providers of services necessary for the business, such as web hosting, email, IT maintenance, administrative services, appointment management tools, or social media platforms, may access the data, each acting in accordance with their legal position and under the required safeguards. When a service provider processes data on behalf of Luisa Portales Makeup, the corresponding data processing agreement will be formalized in accordance with Article 28 of the GDPR. Social networks and other online services may act as independent controllers with respect to certain processing activities carried out on their platforms.

8. INTERNATIONAL TRANSFERS

Some technology providers or social networks may process data outside the European Economic Area. In such cases, processing will only be carried out when there is an adequacy decision, standard contractual clauses, or other valid safeguard provided for in the GDPR. Specific information will depend on the services actually used and can be found in each provider’s policies.

9. DATA OF THIRD PARTIES AND MINORS

Anyone providing data of another person declares that they are authorized to do so and have previously informed them. Data of minors should not be submitted through the website without the involvement of their parent or legal guardian. The collection and publication of images of minors will require specific authorization from their representative and respect for the minor’s wishes when they are sufficiently mature.

10. RIGHTS OF DATA SUBJECTS

Data subjects may exercise their rights of access, rectification, erasure, objection, restriction of processing, and data portability, where applicable, as well as withdraw their consent at any time. The request should be sent to hola@luisaportalesmakeup.com, indicating the right being exercised and including the information necessary to verify identity. If there are reasonable doubts about identity, additional, appropriate information may be requested.

Likewise, the interested party may file a complaint with the Spanish Data Protection Agency if they believe that the processing violates the regulations.

11. AUTOMATED DECISIONS AND PROFILING

No automated decisions are made that produce legal effects or significantly affect individuals, nor are commercial profiles created from the data collected through the website.

12. SECURITY AND CONFIDENTIALITY

Luisa Portales Makeup will implement technical and organizational measures appropriate to the risk to protect data against destruction, loss, alteration, unauthorized access, or disclosure. Access will be limited to those who need to process the data for the purposes described and are subject to confidentiality obligations.

Although reasonable measures are taken, no internet-connected system can be considered completely secure. In the event of a security breach, the assessment, documentation, and, where applicable, notification procedures provided for in the regulations will be followed.

13. COOKIES

Information regarding cookies, similar technologies, their purposes, duration, and third parties can be found in the Cookie Policy. Non-essential cookies will only be installed after obtaining consent, and users may accept, reject, or configure their preferences.

14. LINKS AND SOCIAL NETWORKS

The website may contain links to social networks or third-party sites. When accessing these, data processing will be governed by the policies and terms of the corresponding third party. Luisa Portales Makeup does not control the processing carried out by these entities outside of their own channels.

15. CHANGES TO THE PRIVACY POLICY

This Policy may be updated to reflect regulatory, technical, or processing changes. The current version will be the one published on the website, identified by its date and version number.

16. CONTACT

For any questions regarding privacy or to exercise your rights, please write to: hola@luisaportalesmakeup.com

Last updated: July 2026 © JFA X LUISA PORTALES MAKEUP. All rights reserved.