Privacy policy
Last updated: 16/10/2026
This policy explains how Masajes Relajantes Orionmet processes the personal data of people who use orionmet.com, book a massage or create a client account, in accordance with the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). The Spanish version prevails in case of discrepancy.
1. Data controller
Alexis Manotas Stelmach (trading as Masajes Relajantes Orionmet) · Tax ID: Z1761907C · Address: Calle Canarias 10 · Email: masajes@orionmet.com · Phone: +34 641486126
2. What data we process
- Identity and contact data: name, email, phone, and optionally date of birth and address (needed for home visits).
- Health data (special category): injuries, conditions, medication, allergies and preferences you declare in your health form.
- Booking data: service, date, extras, price, discount codes, comments and your typed signature on the informed consent.
- Account data: email and password (stored encrypted, we never see it). If you sign in with Google: name, email, profile picture and Google identifier. We never access your Google password or any other Google data.
- Technical data: IP address when booking or signing in, for security and fraud prevention.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Managing bookings and providing the massage service | Performance of a contract (Art. 6.1.b GDPR) |
| Using your health data to adapt the massage safely | Your explicit consent (Art. 9.2.a GDPR), which you can withdraw at any time |
| Client account and saved profile | Your consent and performance of the contract |
| Service emails: confirmation, reminder, changes and a request for your review | Performance of the contract and legitimate interest |
| Offers and news | Your consent (optional box, can be withdrawn) |
| Security of the website | Legitimate interest |
| Accounting and tax obligations | Legal obligation (Art. 6.1.c GDPR) |
We do not make automated decisions or create profiles. Health data is never used for marketing.
4. How long we keep it
- Account and booking data: while you are a client and, afterwards, for the legal limitation periods.
- Health form: until you delete it or withdraw consent, and at most 2 years after your last session.
- Accounting data: 6 years (Spanish Commercial Code, art. 30).
- Security logs: maximum 12 months.
5. Who receives your data
We do not sell or share your data. It may be accessed by service providers acting on our behalf under a data processing agreement: web hosting and email provider. If you choose to sign in with Google, Google Ireland Ltd. processes your sign-in under its own privacy policy. If you contact us via WhatsApp, WhatsApp Ireland Ltd. processes those messages under its own terms. Data may be disclosed to authorities when legally required.
6. International transfers
We do not plan international transfers. If a provider such as Google transfers data outside the EEA, it does so under the EU–US Data Privacy Framework or Standard Contractual Clauses.
7. Your rights
You can request access, rectification, erasure, objection, restriction and portability of your data, and withdraw your consent at any time, by writing to masajes@orionmet.com. You can also edit or delete your data directly from My account. If you believe your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Minors
Our services are for people aged 18 or over. Minors may only receive a massage with the consent and presence of a parent or legal guardian, who must make the booking.
9. Security
We use an encrypted connection (HTTPS), encrypted passwords, access to the admin panel restricted by password and access logging, and we limit the health data we collect to what is strictly necessary.
10. Changes
We may update this policy. The date of the last update is shown at the top.