Yanguas Professional

Privacy Policy

At Cosméticos Yanguas, S.L., we process the personal data of users who interact with our website with total transparency and in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD).

1. Data Controller

  • Identity: Cosméticos Yanguas, S.L.
  • CIF: B31516966
  • Address: Polígono Las Labradas, C/ Castilla León, 13 – 31500 Tudela (Navarra), España
  • Email: info@yanguasprofessional.com
  • Phone: 948 410 308

2. What personal data do we collect?

We collect personal data only when the user actively provides it through the contact forms and customer service systems available on the Website. Personal data comes directly from the data subject. The data we may process includes:

  • Identification data: first and last name.
  • Contact data: email address, phone number.
  • Professional data: name of the salon or company, position, location (when voluntarily provided by the user).
  • Communication content: information included in messages sent through forms or the chat system.

We do not collect specially protected data (health, ethnic origin, biometric data, etc.), nor data from minors under 14 years of age. If we detect that a minor has provided data without parental consent, we will proceed to its immediate deletion.

We process your data for the following purposes:

  • To respond to inquiries and requests for information sent through the contact form or the chat system. Legal basis: legitimate interest of the Controller (Art. 6.1.f GDPR) and execution of pre-contractual measures (Art. 6.1.b GDPR).
  • To manage commercial collaboration requests from beauty salons and distributors interested in working with Yanguas Professional. Legal basis: execution of pre-contractual or contractual measures (Art. 6.1.b GDPR).
  • To send commercial information about Yanguas Professional products, news, and training, only when the user has given express consent. Legal basis: consent of the data subject (Art. 6.1.a GDPR). Consent can be revoked at any time.

Commercial communications will not be sent without prior consent, except in cases provided for in Article 21 of the LSSI for customers with a prior contractual relationship.

Fields marked as mandatory in the forms are necessary to process your request. If they are not provided, it will not be possible to manage the request.

4. Data retention period

Personal data will be kept for the time necessary to process the user's request and, subsequently, during the applicable legal limitation periods. In the case of consent for sending commercial communications, the data will be kept until the user withdraws their consent.

Once the retention period has expired, the data will be securely deleted or, where appropriate, anonymized.

5. Data recipients

Your data will not be transferred to third parties, except in the following cases:

  • Epica Works (digital marketing and web management agency), in its capacity as data processor, which provides website management services, contact forms, and customer service tools on behalf of Yanguas Professional, in accordance with the corresponding data processing agreement.
  • Legal obligation: when the processing or communication of data is required by a legal norm or a judicial or administrative resolution.

We do not carry out international data transfers outside the European Economic Area, unless strictly necessary and under the guarantees required by the GDPR.

6. Rights of the data subjects

The user may exercise the following rights recognized by data protection regulations at any time:

  • Access: to know what personal data of yours we process.
  • Rectification: to request the correction of inaccurate or incomplete data.
  • Erasure: to request the deletion of your data when it is no longer necessary for the purposes for which it was collected.
  • Objection: to object to the processing of your data in certain circumstances.
  • Restriction of processing: to request that we suspend the processing of your data in the cases provided for by the regulations.
  • Portability: to receive your data in a structured and commonly used format.
  • Withdrawal of consent: to revoke the consent given at any time, without affecting the lawfulness of the prior processing.

To exercise any of these rights, you may contact:

You must accompany your request with a copy of your ID card or another document proving your identity. We will respond to your request within a maximum period of one month from its receipt.

7. Right to lodge a complaint with the AEPD

If you consider that the processing of your personal data violates current regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), the competent supervisory authority in Spain, through its website www.aepd.es.

8. Data security

Cosméticos Yanguas, S.L. has adopted the necessary technical and organizational measures to guarantee the security of personal data and prevent its alteration, loss, unauthorized processing, or access, taking into account the state of technology, the nature of the data, and the identified risks.

9. Updates to this Policy

This Privacy Policy may be modified based on legislative or jurisprudential changes or changes in the services offered. Any significant modification will be communicated to users appropriately. The updated version will always be available on this same page.

Last updated: April 2026