Privacy Policy

1. Introduction

Hygiene Diagnostics ("we," "us," "our," or "Company") operates the website and diagnostic platform accessible at christophemassage.com. We are committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our workplace hygiene compliance services.

We are based in Barcelona, Catalonia, Spain, and comply with the General Data Protection Regulation (GDPR) and applicable Spanish data protection laws. Please read this policy carefully. If you do not agree with our practices, please do not use our services.

2. Information We Collect

We collect information in several ways:

2.1 Information You Provide Directly

• Contact and Inquiry Forms: When you submit inquiries about our diagnostic services, request a consultation, or sign up for information, we collect your name, email address, phone number, company name, job title, and details about your workplace hygiene concerns or compliance gaps.
• Account Registration: If you create an account to access our diagnostic platform, we collect login credentials, contact information, and facility details relevant to your diagnostic assessment.
• Communication: When you email us, call us, or communicate through our platform, we retain records of that correspondence, including any personal or facility information you share.
• Feedback and Support: We collect any feedback, comments, or support requests you submit to help us improve our services.

2.2 Information Collected Automatically

• Browser and Device Data: We collect information about your device, including device type, operating system, browser type, and unique device identifiers.
• Usage Information: We track how you interact with our website and platform, including pages visited, time spent, diagnostic pathways explored, and features accessed.
• IP Address and Location: We collect your IP address, which may indicate approximate geographic location. This helps us understand our user base and diagnose technical issues.
• Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to remember your preferences, maintain your session, and understand how you use our platform. This includes both session-based cookies (which expire when you close your browser) and persistent cookies (which remain until you delete them or they expire).
• Analytics: We may use analytics tools to measure website performance, user behavior, and the effectiveness of our diagnostic guidance. These tools may collect aggregated data about your interactions.

3. Purposes of Data Collection and Use

We collect and use your information for the following purposes:

• Service Delivery: To provide you with our workplace hygiene diagnostic platform, respond to your inquiries, and deliver tailored solutions based on your facility's specific compliance gaps and cleanliness challenges.
• Account Management: To create and maintain your account, authenticate your identity, and manage your access to our platform.
• Communication: To send you service updates, diagnostic recommendations, compliance alerts, and responses to your inquiries. We will only send marketing communications if you have opted in.
• Improvement and Optimization: To analyze how you use our platform, identify areas for improvement, develop new diagnostic features, and optimize the user experience for facilities managers and business owners.
• Legal Compliance: To comply with applicable laws, regulations, and legal obligations, including data protection laws in Spain and the European Union.
• Security and Fraud Prevention: To protect against unauthorized access, fraud, and misuse of our services, and to maintain the integrity of our platform.
• Legitimate Business Interests: To understand our user base, measure the effectiveness of our diagnostic pathways, and improve our service offerings.

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: Where you have explicitly consented to specific processing activities, such as receiving marketing communications or allowing non-essential cookies.
• Contract Performance: Where processing is necessary to provide you with our diagnostic services and fulfill our obligations to you.
• Legal Obligation: Where we are required by law to process your data, such as for tax or regulatory compliance.
• Legitimate Interests: Where we have a legitimate business interest in processing your data, such as improving our platform, preventing fraud, or understanding user behavior, provided this does not override your rights and freedoms.

5. Sharing of Information

We do not sell your personal data. However, we may share your information in the following circumstances:

5.1 Service Providers and Data Processors

We may share your information with third-party service providers who assist us in operating our website, providing diagnostic services, sending communications, processing payments, and analyzing data. These processors are contractually obligated to use your data only as necessary to provide services to us and must comply with GDPR and data protection standards.

5.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe in good faith that such disclosure is necessary to protect our rights, your safety, or the safety of others.

5.3 Business Transfers

If Hygiene Diagnostics is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

5.4 Aggregated and De-identified Data

We may share aggregated or de-identified data that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other purposes.

6. Data Retention

We retain your personal data for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Retention periods vary depending on the type of data and the purpose of processing:

• Account Information: Retained while your account is active and for a reasonable period afterward to comply with legal obligations and resolve disputes.
• Inquiry and Communication Records: Retained for the duration of our service relationship and for up to three years afterward to maintain service history and comply with legal requirements.
• Cookies: Session cookies are deleted when you close your browser. Persistent cookies are retained according to their expiration date, typically up to one year, unless you delete them sooner.
• Analytics Data: Aggregated analytics data is typically retained for up to two years.

When data is no longer needed, we securely delete or anonymize it. However, we may retain certain information if required by law or for legitimate business purposes such as dispute resolution.

7. Your Privacy Rights

Under GDPR and Spanish data protection law, you have the following rights:

7.1 Right of Access

You have the right to request a copy of the personal data we hold about you and to understand how we are processing it.

7.2 Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

7.3 Right to Erasure

You have the right to request deletion of your personal data, subject to certain exceptions (such as where we are required by law to retain the data or where retention is necessary to provide our services).

7.4 Right to Restrict Processing

You have the right to request that we limit how we use your personal data while we verify its accuracy or while we consider your other rights.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

7.6 Right to Object

You have the right to object to processing of your personal data for marketing purposes or on grounds relating to your particular situation.

7.7 Right to Withdraw Consent

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us using the information provided in Section 9 below. We will respond to your request within 30 days (or as required by law).

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience and understand how you use our platform. Here is how we use them:

• Essential Cookies: These are necessary for the website to function properly, such as maintaining your session and authenticating your identity. You cannot disable these without affecting site functionality.
• Preference Cookies: These remember your choices, such as language preferences and display settings, to personalize your experience.
• Analytics Cookies: These help us understand how visitors use our website and platform, which diagnostic pathways are most helpful, and where we can improve our guidance.
• Marketing Cookies: These may be used to track your activity across websites and deliver targeted content, but only if you have opted in.

Most browsers allow you to control cookies through your browser settings. You can choose to disable cookies, but this may limit your ability to use certain features of our website. You can also clear cookies from your browser at any time.

9. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how we handle your personal data, please contact us:

• Email: hello@christophemassage.com
• Phone: +34 663 105 600
• Address: Barcelona, Catalonia, Spain

We will respond to your inquiry within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Spanish Data Protection Authority (Autoridad de Protección de Datos) or your local data protection authority.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last updated" date at the top of this policy and, where appropriate, by sending you an email notification or displaying a prominent notice on our website.

Your continued use of our website and services after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure socket layer (SSL) technology, access controls, and regular security assessments.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

12. Children's Privacy

Our services are designed for facilities managers and business owners and are not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete such information promptly. If you believe we have collected data from a child under 16, please contact us immediately.

13. International Data Transfers

Hygiene Diagnostics is based in Spain and operates within the European Union. If you are located outside the EU and provide personal data to us, please note that your data will be transferred to and processed in Spain in accordance with GDPR and Spanish data protection law. By using our services, you consent to this transfer.