Last updated: August 2026

At Des Candles Studio, we take your privacy very seriously. On this page, we explain what data we collect, why we need it and how we protect it.

1. Data controller

In accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD), we inform you that the controller of the personal data collected through this website is:

Trade name: Des Candles Studio

Owner: Alin Mihai Cretu Brinza

Tax ID (NIF): 49359630-C

Address: C/ Erasme de Janer, 9, 08001 Barcelona, Spain

Telephone: 642 425 596

Email: [email protected]

Website: www.descandlesstudio.com

Des Candles Studio organises in-person creative activities and experiences, including Candle & Glow, candle workshops, gift vouchers, private events and corporate activities.

2. Personal data we process

Depending on your relationship with Des Candles Studio, we may process the following categories of data:

Identification data, such as first and last name.
Contact details, such as email address and telephone number.
Location data, such as postcode, city and province.
Data required to manage a booking, purchase or request.
Billing data, when an invoice needs to be issued.
Payment-related information, managed through the relevant providers.
Data voluntarily included in enquiries, forms or communications.
Browsing data, IP address, technical identifiers and cookie preferences.
Photographs or videos, only where there is valid authorisation for their capture or publication.

Des Candles Studio does not request special categories of personal data. Please do not provide health information or other specially protected data unless it is strictly necessary and expressly requested for a legitimate reason.

3. Purposes and legal bases

Managing bookings, purchases and gift vouchers

We will use your data to process the booking or purchase, manage payment, check availability, send confirmation and provide the information needed to attend the experience.

Legal basis: performance of a contract or steps taken at the request of the data subject prior to entering into a contract.

Managing payments, invoicing and administrative obligations

We may process the data required to manage payments, issue invoices and comply with our tax, accounting and administrative obligations.

Legal basis: performance of the contract and compliance with legal obligations.

Handling enquiries and requests

We will use the data provided to answer questions and requests for information relating to bookings, gift vouchers, private events or corporate activities.

Legal basis: the data subject's consent and, where the enquiry relates to a possible contract, the taking of pre-contractual steps.

Managing changes, cancellations and incidents

We may process the data necessary to handle date changes, cancellations, refunds, payment incidents, complaints or communications relating to a booking.

Legal basis: performance of the contract, compliance with legal obligations and our legitimate interest in properly managing our relationship with customers.

Booking-related communications

We may send you messages that are necessary to provide the service, such as confirmations, reminders, schedule changes, access information or communications relating to an incident.

Legal basis: performance of the contract.

These communications are not advertising and are necessary to manage the booking correctly.

Marketing communications

Where you have given your consent, we may send you information about new experiences, upcoming dates, gift vouchers, promotions or news from Des Candles Studio.

Legal basis: consent.

You may withdraw your consent or unsubscribe at any time using the link included in the communications or by writing to [email protected].

Where there is a previous contractual relationship, Des Candles Studio may send information about its own similar services where permitted by law, always providing an easy way to object.

Website analysis and improvement

Where you have accepted the relevant cookies, we may use measurement and analytics tools to understand how the website is used, detect errors and improve navigation and the booking process.

Legal basis: consent given through the cookie settings panel.

Security and fraud prevention

We may process technical information to protect the website, prevent fraudulent payments, detect unauthorised access and ensure the proper functioning of our systems.

Legal basis: legitimate interest in protecting the business, users and information systems.

Photographs and videos

Where photographs or videos are taken in which attendees are identifiable and are intended to be used for promotional purposes, the appropriate authorisation will be requested.

Legal basis: consent.

Attending an activity does not in itself authorise the use of a person's image for advertising purposes.

4. Mandatory data

Fields marked as mandatory are required to process the relevant booking, purchase or request.

If you do not provide this information, we may be unable to manage the booking, process the payment, issue the confirmation or respond to your request.

The data provided must be truthful, accurate and up to date. The user is responsible for notifying us of any relevant changes.

5. Source of the data

As a general rule, data is obtained directly from the data subject through:

Booking, purchase or contact forms.
Communications by email, telephone or messaging services.
Requests for private events or corporate activities.
Purchase or redemption of gift vouchers.
Interactions with the website and cookie settings.
Communications through social media.

Where a person makes a booking or purchases a voucher for another person, they must ensure that they are authorised to provide that person's data and must inform them of the contents of this policy.

6. Retention periods

Data will be kept for as long as necessary to fulfil the purpose for which it was collected and, subsequently, for the periods required to address any potential legal liabilities.

In particular:

Booking and purchase data will be kept for as long as necessary to manage the service and for the applicable legal retention periods.
Billing data and accounting documentation will be kept for the periods required by tax and accounting regulations.
Enquiries that do not result in a contract will be kept for as long as necessary to respond to them and address any potential liabilities.
Data used for marketing communications will be kept until you withdraw your consent or object to the processing.
Data associated with a user account, where this functionality is available, will be kept while the account remains active and for the subsequent legally required periods.
Preferences and data obtained through cookies will be kept for the periods indicated in the Cookie Policy.
Authorisations relating to photographs or videos will be kept for as long as necessary to demonstrate consent and until it is withdrawn, without prejudice to applicable legal obligations.

Once the relevant retention periods have ended, data may remain blocked solely for the purpose of addressing possible administrative, legal or judicial liabilities.

7. Recipients and service providers

Data may be processed by providers that deliver services necessary for the operation of Des Candles Studio, including:

Web hosting, maintenance and technical support providers.
Booking and e-commerce platforms.
Payment gateways and payment service providers.
Banking institutions.
Email and communications providers.
Analytics, security and measurement services, where the relevant cookies have been authorised.
Administrative, tax, accounting or legal advisers.
Backup and storage providers.
Messaging or customer service platforms used to respond to requests.

These providers will process data only to provide their services and in accordance with the applicable instructions, safeguards and contracts.

Data may also be disclosed to public authorities, courts, law enforcement agencies or other authorities where there is a legal obligation or a valid request.

Des Candles Studio does not sell or rent personal data to third parties.

8. International transfers

Some technology providers may store or process information outside the European Economic Area.

Where international data transfers take place, the safeguards provided for under the GDPR will be used, such as:

Adequacy decisions adopted by the European Commission.
The EU-U.S. Data Privacy Framework, where applicable.
Standard Contractual Clauses approved by the European Commission.
Other legally recognised safeguards.

You can request further information about the safeguards applied by writing to [email protected].

9. Minors

Bookings and purchases made through the website must be completed by adults with the legal capacity to enter into contracts.

Minors may attend certain activities where the conditions of the experience allow it and always under the responsibility or supervision of an adult.

Where it is necessary to process a minor's personal data, the data must be provided by their legal representative or be covered by the relevant authorisation in accordance with applicable law.

Identifiable images of minors will not be used for promotional purposes without the express authorisation of their parent, guardian or legal representative.

10. Automated decision-making

Des Candles Studio does not make automated decisions that produce legal effects or similarly significantly affect users.

Analytics or advertising tools, where authorised through the cookie panel, may create general audience segments, but they will not be used to make decisions that have legal effects on users.

11. Rights of data subjects

You may exercise the following rights:

Access: to know what personal data we process about you.
Rectification: to request correction of inaccurate or incomplete data.
Erasure: to request deletion of your data where applicable.
Objection: to request that we stop processing your data in certain circumstances.
Restriction: to request that we temporarily restrict processing.
Portability: to receive the data you have provided in a structured format and transmit it to another controller where applicable.
Withdrawal of consent: to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise your rights, you can send a request to:

Email: [email protected]

Postal address: C/ Erasme de Janer, 9, 08001 Barcelona, Spain

The request must state the right you wish to exercise and provide sufficient information to identify you.

Additional documentation to verify identity will only be requested where there are reasonable doubts about the identity of the person making the request.

The request will be handled within the legally established time limits. Rights recognised by law include, among others, access, rectification, erasure, objection, restriction and portability.

12. Complaints

If you believe that the processing of your personal data does not comply with applicable law, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD) through its website.

Before doing so, you may also contact us at [email protected] so that we can try to resolve any issue.

13. Information security

Des Candles Studio applies appropriate technical and organisational measures to protect personal data against loss, alteration, unauthorised access, disclosure or destruction.

The website uses encrypted connections through an SSL certificate. However, no system connected to the Internet can guarantee absolute security.

14. Cookies

The website uses first-party and third-party cookies.

Non-essential cookies will only be installed where the user has given consent through the relevant settings panel.

You can find information about the types of cookies, providers, purposes, duration and ways to change your preferences in the Cookie Policy.

15. Social media and external links

Des Candles Studio has profiles on social media and may receive messages, mentions or interactions through these platforms.

Data processed within each social network will also be subject to the terms and privacy policies of the relevant platform.

The website may include links to external websites. Des Candles Studio does not control and is not responsible for the privacy policies of third-party websites.

16. Changes to this policy

Des Candles Studio may update this Privacy Policy to reflect legal, technical or service-related changes.

Where changes are significant, notice will be provided through the website itself or by other appropriate means.

The date of the latest update will appear at the beginning of this page.