Privacy policy

06.10.2026

Data controller

Controller: Alexander Kamenev, Alex Massage Barcelona. Business address: Carrer de Pere IV, 91, 08018 Barcelona, Spain. Contact: alexmsgbcn@gmail.com, +34 617 333 450.

Data and purposes

The website has no first-party form and does not store data entered by you. If you message through WhatsApp, call, email or book via DIKIDI, your name, contact details, selected service and time, and message content may be processed. This information is used to answer, arrange and provide the appointment, and maintain necessary business correspondence.

Health information

If you voluntarily share information about your wellbeing, injuries or limitations, it is used only to assess whether massage is appropriate and to adapt the session safely. Do not send medical records or unnecessary sensitive information through WhatsApp or DIKIDI. Where relevant, this data is processed with your explicit consent, which you may withdraw at any time without affecting prior lawful processing.

Legal basis and retention

Processing is based on pre-contractual steps and delivery of the requested service; for certain messages, your request or consent; and for mandatory records, legal obligations. Data is kept only as long as needed to manage the appointment, provide the service, resolve issues and comply with legal duties.

Required data and automated decisions

A name or other identifier, contact method and chosen time are needed to arrange a booking; without them we cannot organise the appointment. Other information is voluntary. We do not make automated decisions determining service provision. With advertising consent, Meta may use browsing data to personalise ads.

Recipients and external services

Communication and booking use WhatsApp (Meta) and DIKIDI; the website uses hosting infrastructure. These providers process technical information and data you send under their own terms. Where information is transferred outside the European Economic Area, the relevant provider’s legally recognised safeguards apply. We do not sell personal data.

Your rights

You may request access, correction, deletion, restriction, objection, withdrawal of consent or portability where applicable by emailing alexmsgbcn@gmail.com. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

Meta Pixel and advertising

With your advertising consent, Meta Pixel (ID 863676488306583) sends Meta page views and interactions such as starting a booking, confirming an appointment created by DIKIDI or clicking WhatsApp/phone, together with technical browser and page data. Meta may link these to your account to measure and personalise ads. It may use _fbp and _fbc cookies, typically lasting up to 90 days. Our pixel code does not send names, emails, phone numbers or health information; automatic advanced matching is not enabled in this integration. A click does not confirm an appointment or payment. Withdraw consent using “Cookie settings” in the footer of any page; new events stop and accessible Meta cookies on this domain are deleted. More information: Meta Privacy Policy.

Booking analytics and attribution

With your analytics consent, the website keeps the first and last non-direct source, campaign tags and ad identifiers in your browser for 30 days. An anonymous visit identifier groups observed website and booking-widget steps until 30 minutes of inactivity. The server records page views, widget opening, readiness and closing, external booking links, and a booking identifier when DIKIDI confirms it. Closing a widget does not prove cancellation, and a booking does not prove attendance or payment. These records contain no names, email addresses, phone numbers or health information. Advertising click identifiers require advertising consent and are removed from records older than 30 days during subsequent log cleanup; records older than 90 days are deleted then. Failed website steps and booking confirmations may be held in this browser for up to 30 days and retried without repeating advertising conversions. The log distinguishes the observed time from the delivery time. QA tests are excluded. Withdrawing analytics consent stops new records and removes browser attribution, the visit identifier and pending steps and confirmations.