Privacy policy

Last updated: 11 September 2026

1. Who processes your data

• Data controller: Caliri & Silva, S.L. (Gede Studio)
• NIF (Spanish tax identification number): B21977152
• Registered address: Carrer de Corominas 19, esc. 1, pta. 2, 08902 L'Hospitalet de Llobregat, Barcelona
• Contact: hola@gedestudio.com · +34 645 677 914

2. What we use your data for and on what legal basis

• Creating and maintaining your account, and managing your plans and your bookings. Legal basis: the performance of the contract that you accept when taking out a plan.
• Charging for plans and gift cards, and issuing the receipts. Legal basis: the performance of the contract and compliance with tax and accounting obligations.
• Sending you notices about the service: booking confirmation, reminder of your class, notice if the studio cancels a class, notice that your plan is expiring. Legal basis: the performance of the contract. They are not advertising and they form part of the service.
• Asking you for a review if you have already taken several classes. Legal basis: our legitimate interest in making the studio known. You may ask us to stop doing so with one click in the email itself.
• Telling you news about the studio: the return of classes, changes to the timetable or to prices, one-off workshops. Legal basis: our legitimate interest in keeping informed anyone who has already been a student, and your consent in all other cases. You may unsubscribe with one click at the end of any of those emails, and this does not affect the service notices. In these emails — and only in these — we measure whether they are opened and which links are clicked, in order to know what to tell you and how often; the notices about your account and your bookings carry no measurement. You may object to that measurement by writing to us, or avoid it by unsubscribing from the news.
• Answering your enquiries when you write to us through the contact form. Legal basis: your consent.

3. What data we process

• Identification and contact data: name, email address and, if you provide it, telephone number.
• Data on your activity at the studio: plan taken out, classes booked, cancelled or taken.
• Payment data: these are managed entirely by Stripe. We do not store your card number; we keep only the amount, the date and the transaction identifier.
• Minimum technical session data, necessary to keep you identified while you browse.

4. With whom we share them

We do not sell or disclose your data. In order to operate we use providers that process them on our behalf, under a data processing agreement:

• Supabase — database and user accounts. Servers in the European Union (Sweden).
• Cloudflare — hosting and delivery of the website.
• Stripe — payment processing.
• Resend — sending of the service emails and, from a different sender, of the news emails, whose opens and clicks it measures on our behalf.
• Meta Platforms Ireland Ltd. — measurement of our advertising campaigns, only if you accepted the advertising cookies.

Some of these providers may process data outside the European Economic Area. In that case the transfer is covered by the standard contractual clauses approved by the European Commission.

5. How long we keep them

For as long as your account is active. If you close it or ask us for erasure, we delete them, except for billing data, which tax regulations require to be kept for the legally established periods.

6. Your rights

You may exercise the rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent where you have given it. To do so, write to us at hola@gedestudio.com from the address associated with your account. It is free of charge.

If you consider that we have not dealt with your request properly, you may lodge a complaint with the Agencia Española de Protección de Datos (Spanish Data Protection Agency), at www.aepd.es.

7. Cookies

Essential technical cookies. These are always used, because the website does not work without them: the one that keeps you logged in, the one that remembers your decision about these cookies and one that avoids repeating a notice to you. They do not require your permission.

Advertising cookies (Meta). If you accept them, we load the Meta pixel (Facebook and Instagram), which allows us to know how many people reach the studio from our advertisements and whether they end up entering into a contract. Those cookies are installed by Meta Platforms Ireland Ltd. and may be used to show you our advertising on its platforms.

They are only loaded if you accept them in the notice that appears on entering the website. If you choose “Essential only”, the pixel is not loaded and the website works in the same way. You may change your mind at any time by deleting this site's cookies from your browser, and we will ask you again.

8. Minors

To create an account and enter into a contract you must be of legal age. If you wish to sign a minor up for a class, write to us and we will arrange it with their mother, father or guardian.

9. Security

We apply reasonable technical and organisational measures to protect your data: access restricted by user, encrypted connection and separation of permissions, so that each person can see only the information in their own account.