Lapsula, SL (VAT: ESB19784248) ("Lapsula") takes the protection of your personal data very seriously.
This privacy notice provides information on which data is collected by Lapsula through the online platform accessible under the domain lapsula.com ("online platform") and how we process and use this data.
This privacy notice is subject to changes to account for ongoing improvements to our online presence and the implementation of new technologies to enhance our services.
We reserve the right to make changes to this privacy notice.
We recommend consulting this privacy notice on a regular basis to account for any changes.
This privacy notice provides information on the collection of personal data when you visit our website.
Personal data comprises all information that can be used to personally identify you, e.g. name, address, email addresses, user behaviour.
The data controller for this website pursuant to Art. 4(7) GDPR is:
Lapsula, SL
VAT: ESB19784248
Barcelona, Spain
Email: [email protected]
When you contact us by email or using a contact form, we will store the data you disclose (your email address, name, phone number, etc.) to answer your query.
The legal basis for this is Art. 6(1)(f) GDPR (our legitimate interest in responding to your request).
Data collected for this purpose shall be erased as soon as storage is no longer required, or we shall restrict the processing thereof in the case of statutory retention obligations (e.g. under tax or commercial law).
If we commission third-party services for the provision of individual features on our website or would like to use your data for advertising purposes, we shall notify you in advance and, where required by law, obtain your consent.
In this case, we would like to point out that you will still be able to use our services as usual even if you do not consent to the use of your data for other purposes.
We only process your data for the purpose it was collected and based on the applicable legal basis (notably Art. 6(1)(a), (b), or (f) GDPR, see also Section 8 below).
We would be happy to provide you with more information on your rights in this regard at any time.
You are entitled to the following rights regarding your personal data stored by us:
You also reserve the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR) in relation to the processing of your personal data carried out by us.
Informational Use In the case of purely informational use of our website—i.e. if you do not register or otherwise transmit information to us—we shall only collect the personal data that is transmitted to our server by your browser.
If you wish to view our website, we collect the following data, which is technically required to display our website and ensure the stability and security thereof (Art. 6(1)(f) GDPR):
Cookies In addition to the data stipulated above, cookies will also be saved on your device when you visit our website.
Cookies are small text files that are allocated to your browser and saved on your hard drive, which enables the website that sets the cookie (us, in this case) to receive certain information.
Cookies are not able to execute programs or transfer viruses to your computer.
Their purpose is to make the website as user-friendly and effective as possible.
Transient cookies (e.g. session cookies) are automatically erased when you close your browser.
These store a session ID, which is used to assign various requests made during one session to your browser.
This enables the future recognition of your device when you return to the website.
Session cookies are deleted when you log out or close your browser.
Persistent cookies are automatically erased after a defined period, which varies from cookie to cookie.
You can erase cookies in the security settings of your browser at any time.
You can configure your browser settings to your preferences and, for example, block third-party cookies or all cookies.
We would like to note that blocking cookies may prevent the proper functioning of certain features on this website.
If you create an account, we may use cookies to identify you in subsequent visits.
Otherwise, you would need to log in again upon each visit.
The use of cookies for analytics or marketing (if any) is based on your consent under Art. 6(1)(a) GDPR.
You can withdraw your consent at any time via our cookie banner or by adjusting your browser settings.
Below, we describe the third-party tools and integrations that may be used on our website.
Whenever we process or allow the processing of personal data via these tools, it is either:
We only integrate such tools in compliance with the applicable data protection rules.
Purpose: IT & Cloud Services, scheduling integrations, hosting.
Data processed: Contact details, usage data, metadata.
Legal basis: Art. 6(1)(b) (if necessary for service) or Art. 6(1)(f) (legitimate interest in providing stable services), or Art. 6(1)(a) (consent for analytics).
Purpose: IT & Cloud Services, database management.
Legal basis: As above (depending on function used).
Purpose: Hosting infrastructure and front-end deployment.
Legal basis: As above.
Purpose: Content Delivery Network (CDN) and security measures (e.g., DDoS protection).
Legal basis: Art. 6(1)(f) (legitimate interest in ensuring website security and performance).
Purpose: Payment processing, billing, subscription management.
Data processed: Payment details (e.g. credit card token), personal contact data.
Legal basis: Art. 6(1)(b) GDPR (fulfilment of payment obligations under contract).
Purpose: Billing and invoicing.
Legal basis: Art. 6(1)(b) (contractual performance) or Art. 6(1)(c) (legal obligations regarding accounting).
Purpose: Customer service tools (chat, support).
Data processed: Chat transcripts, contact data.
Legal basis: Art. 6(1)(b) (to respond to customer requests) or Art. 6(1)(f) (legitimate interest in supporting users).
Purpose: Newsletter services and email marketing.
Data processed: Email addresses, name, usage data (for open rates/click rates).
Legal basis: Art. 6(1)(a) (consent for newsletter subscriptions).
Purpose: Customer communication via WhatsApp.
Data processed: Phone numbers, message content.
Legal basis: Art. 6(1)(b) (if used for contract-related support) or Art. 6(1)(f) (legitimate interest in efficient communication) with your prior request to communicate via WhatsApp.
Purpose: SMS gateway for notifications/verification.
Data processed: Phone numbers, message content.
Legal basis: Art. 6(1)(b) or Art. 6(1)(f).
Purpose: Video conferencing (e.g., for appointments).
Data processed: Audio/video streams, names, email addresses.
Legal basis: Art. 6(1)(b) (contract) or Art. 6(1)(f) (legitimate interest in remote communication).
Purpose: Workflow automation to connect multiple apps.
Data processed: Relevant data from integrated services (e.g., form entries).
Legal basis: Art. 6(1)(f) (legitimate interest in streamlining data flows).
Lapsula maintains a presence on social media networks or platforms (e.g. Facebook, Instagram, LinkedIn) to communicate with potential and current customers and provide information about our services.
If you visit our official page on such platforms, the operators of the social networks process personal data under their own responsibility.
We may receive statistical data (e.g. via "Page Insights") regarding the use of our page.
These statistics may contain aggregated demographic and interaction data.
Such data is typically anonymized to us, and we process it based on our legitimate interest (Art. 6(1)(f) GDPR) in evaluating the reach and effectiveness of our social media presence.
For details on how social network providers handle personal data (including any profiling activity), please refer to the privacy policies of the respective platform operators.
You may also assert your data subject rights directly with these operators.
Our website features an online booking platform.
As a user, you may register for an account or book specific services.
When you do so, we collect only the data necessary for processing your booking or account setup (e.g. name, email address, payment details, booking preferences).
Data Storage: We store such data on secure servers.
If you have an account, you may review, edit, or request deletion of your account data.
Where we are legally obliged to retain certain data (e.g. for tax or bookkeeping reasons), we will restrict its processing instead of deleting it.
Log Data: When you use our booking platform, log files may be stored temporarily for IT security and error analysis. These logs are regularly erased or anonymized unless a longer retention is necessary for evidence purposes (Art. 6(1)(f) GDPR).
If you make a booking or transaction through lapsula.com, we process your personal data (e.g., contact details, payment data, booking details) in order to perform our contractual obligations (Art. 6(1)(b) GDPR).
We also maintain records to satisfy legal obligations (Art. 6(1)(c) GDPR), such as tax and commercial laws, which may require retaining transaction data for certain statutory periods.
If the contractual relationship is concluded or if you withdraw from it, your data will be erased or restricted unless further retention is required by law or legitimate interests (Art. 6(1)(f) GDPR) exist, such as the defense of legal claims.
Whenever we obtain consent for a specific purpose of processing, Art. 6(1)(a) GDPR is the legal basis.
If the processing of personal data is necessary for the performance of a contract to which you are a party, such as for billing or providing our booking services, Art. 6(1)(b) GDPR is the basis.
This also applies to pre-contractual measures, for example, responding to your inquiries regarding our services.
If we are subject to a legal obligation requiring the processing of personal data (e.g., retention obligations under tax law), the basis is Art. 6(1)(c) GDPR.
Processing may also be based on Art. 6(1)(d) GDPR if it is necessary to protect your vital interests or those of another natural person (rare emergency scenarios).
Processing may take place on the basis of Art. 6(1)(f) GDPR if it is necessary for the purposes of legitimate interests pursued by us or by a third party, except where these interests are overridden by your fundamental rights and freedoms.
If you provide your consent (Art. 6(1)(a) GDPR), you can subscribe to our newsletter to receive information about our latest offers and services.
The services and offers we promote in the newsletter are mentioned in the consent form.
We use a triple opt-in process: after you register, we send you an email asking you to subscribe to a plan.
If you do not confirm within a reasonable time, we will send you a reminder;
if no answer is given your data is blocked and automatically erased after one month.
The only mandatory information to receive the newsletter is your email address.
Providing additional information (e.g., your name) is optional and serves to address you personally.
You can withdraw your consent to receive the newsletter at any time and unsubscribe.
To do so, click on the link in every newsletter email or send an email to [email protected].
We analyze your user behaviour in relation to our newsletters (e.g., opens, link clicks) in pseudonymized form.
The legal basis for this analysis is also Art. 6(1)(a) GDPR (consent).
You may opt out of tracking by unsubscribing from the newsletter.
We may use social media plugins (e.g., from Instagram, Twitter, LinkedIn, YouTube) on our website.
We use the "double-click solution," meaning that your personal data is not transferred to the plugin providers until you click the plugin button.
Once activated, the plugin provider receives the information that you have accessed the corresponding page on our website.
In addition, the data mentioned in Section 3 of this notice is transmitted to them.
This occurs regardless of whether you have an account with the plugin provider or are logged in.
If you are logged into your account with the plugin provider, the data we collect will be directly associated with your existing account.
If you click the activated button and link to the page, for example, the plugin provider will also store this information in your user account and share it publicly with your contacts, depending on your account settings.
We do not have any influence on the data collected or the processing and are not aware of the full extent of data collection, the purpose of processing, or the storage periods.
For more information, please refer to the privacy notices of the respective plugin providers.
We offer these plugins to allow you to interact with social networks and other users, which helps us improve our platform.
The legal basis for the use of such plugins is typically Art. 6(1)(a) GDPR (consent) or Art. 6(1)(f) GDPR (legitimate interest in offering an interactive website).
We use Google Calendar and Whatsapp Business on this website (where relevant) to provide automation features for appointment scheduling and customer relationship management.
If you are logged into a Google and/or Whatsapp account, your data is associated with that account.
You can log out before using this feature to avoid the association.
Google stores your data as user profiles and uses it for advertising, market research, and/or website design.
You have a right to object to the creation of these user profiles, and you must contact Google to exercise this right.
The legal basis for using Google and Whatsapp is our legitimate interest (Art. 6(1)(f) GDPR) in making our website content more user-friendly or, where consent is required, Art. 6(1)(a) GDPR.
We retain personal data only for as long as it is necessary for the relevant purpose or if we are legally obliged to do so.
Afterwards, we erase or anonymize the data in accordance with statutory provisions.
If you have any questions or concerns about this privacy notice, or would like to exercise your data subject rights, please contact us at:
Lapsula, SL
VAT: ESB19784248
Barcelona, Spain
Email: [email protected]
We will address your inquiry promptly, in compliance with the GDPR and other applicable data protection regulations.