Privacy policy

Last updated: 13 October 2026

1. Data controller

  • Controller: DKPAR SLU (Par Banya)

  • Tax ID (NIF): B19377589

  • Address: Carrer d'Enric Granados, 85, local 1 and 2, 08008 Barcelona (Spain)

  • Privacy contact: info@parbanya.com

2. What data we process

  • Identification and contact details: first name, surname, email and phone number.

  • Booking and purchase data: services, date and time, amount, visit history.

  • Payment data: handled directly by the payment provider (Revolut). Par Banya does not store your full card details.

  • Communications: messages you send us by email, WhatsApp or Instagram.

  • Browsing data: collected through cookies, only if you accept them (see Cookie Policy).

  • Health data: only if you share it voluntarily (for example, contraindications before a parenie or a massage), with your explicit consent and for the sole purpose of providing the service safely.

3. Why we use it and legal basis

  • Managing bookings, purchases, memberships and gift cards. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

  • Answering enquiries by email, phone, WhatsApp or Instagram. Legal basis: your consent and pre-contractual steps (Art. 6(1)(a) and (b) GDPR).

  • Sending you reminders and notices about your booking. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

  • Complying with accounting and tax obligations. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

  • Sending you marketing communications. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

  • Measuring website use (analytics). Legal basis: your consent through the cookie banner (Art. 6(1)(a) GDPR).

  • Measuring and improving our advertising campaigns (Google Ads). Legal basis: your consent through the cookie banner (Art. 6(1)(a) GDPR).

  • Processing health data you share voluntarily. Legal basis: your explicit consent (Art. 9(2)(a) GDPR).

We do not make automated decisions or create profiles with legal effects.

4. How long we keep it

  • Customer and booking data: for as long as the relationship lasts and, afterwards, for the applicable legal limitation periods.

  • Accounting and tax records: 6 years (Spanish Commercial Code) and 4 years for tax purposes.

  • Marketing communications: until you withdraw your consent.

  • Enquiries: as long as needed to answer them, and no longer than 1 year.

  • Cookies: as set out in the Cookie Policy.

5. Recipients

We do not sell your data. We only share it with public authorities when required by law, and with providers that process data on our behalf under a data processing agreement:

  • SimplyBook.me — booking platform.

  • Revolut — payment processing.

  • Odoo S.A. — management software (ERP).

  • Framer B.V. — website hosting.

  • Google (Google Analytics, Tag Manager and Google Ads) — web analytics and advertising, only with your consent.

  • Meta Platforms (WhatsApp Business, Instagram) — messaging, if you contact us through these channels.

  • Our corporate email provider.

If you book through platforms such as ClassPass, that platform is the controller of the data it asks you for and shares with us only what is needed to manage your visit.

6. International transfers

Some providers (such as Google or Meta) may process data outside the European Economic Area. In those cases, transfers are covered by the EU-US Data Privacy Framework or by standard contractual clauses approved by the European Commission.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw your consent at any time, by writing to info@parbanya.com and stating which right you wish to exercise. We may ask you to verify your identity.

If you believe we have not handled your request properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Minors

Children under 14 may not give us personal data without the consent of their parents or guardians. Bookings for minors must be made by their legal representatives.

9. Security

We apply appropriate technical and organisational measures to protect your data against loss, misuse or unauthorised access.

10. Changes

We may update this policy. The current version is always the one published on this page, with its last updated date.

‹ Cookie policy

Legal notice ›