Legal information

LEGAL NOTICE,
PRIVACY & COOKIES

All the legal information about The Cube Urban Spa, S.L. gathered on a single page: who we are, how we handle your personal data and which cookies this website uses.

Last updated: 25 July 2026

This is a courtesy translation. The company is established in Spain and its legal relationship with users is governed by Spanish law; therefore, in the event of any discrepancy, the Spanish version shall prevail.

1 · Legal notice 2 · Privacy policy 3 · Cookie policy

2 · PRIVACY POLICY

THE CUBE URBAN respects your privacy and processes your personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Act 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).

Data controller

Controller
THE CUBE URBAN SPA, S.L.
Tax ID (C.I.F.)
B90350935
Address
Calle Laraña, 6-3ºB, 41003 Seville (Spain)
Contact
info@thecubeurban.com · +34 954 083 737

No Data Protection Officer has been appointed, as none of the circumstances set out in Article 37 GDPR apply. For any matter relating to your data, please write directly to the email address above.

What data we process, why, and on what legal basis

Processing carried out through the WEBSITE
ProcessingDataPurposeLegal basisRetention
Contact form Name, email address, telephone (optional) and the content of your message To handle your enquiry and reply to you Consent of the data subject (Art. 6(1)(a) GDPR), given by ticking the acceptance box Until the enquiry is resolved and, thereafter, 1 year as evidence of the service provided
Support chat Any data you choose to provide in the conversation and technical connection data To assist you in real time from the website Consent of the data subject (Art. 6(1)(a) GDPR), given by accepting functional cookies and starting the conversation History kept for up to 1 year from the last contact
Job applications Identification and contact data and the information contained in the CV you send us To take part in our recruitment processes Pre-contractual measures taken at the data subject's request (Art. 6(1)(b) GDPR) Maximum 1 year from receipt, unless you ask us to delete it sooner
Cookies and similar technologies Device identifiers, IP address and browsing preferences Operation of the site and loading of external content Consent (Art. 6(1)(a) GDPR), except strictly necessary cookies, based on the legitimate interest in providing the service requested See the Cookie policy

The data requested in our forms is the minimum required to handle your request. If you do not provide it, we will not be able to process it. Please do not include special categories of data (health, sexual orientation, beliefs, etc.) in the forms or the chat, as they are not needed to assist you.

Note on registration at the premises. Customer registration and document checks carried out in person at the sauna constitute processing separate from the WEBSITE. You are informed of the applicable terms at the premises at the time of registration. That data is used exclusively for access control, internal management and compliance with legal obligations, and is never disclosed to third parties for commercial purposes.

Recipients of the data

We do not disclose your personal data to third parties, except where legally required. We do use service providers acting as data processors, with whom we have the contract required by Article 28 GDPR:

Providers that may access personal data
ProviderServiceLocationTransfer safeguard
IONOS Cloud, S.L.U. Website and email hosting European Union Not applicable: data stays within the EU
Formspree, Inc. Processing and delivery of the contact form United States European Commission Standard Contractual Clauses and/or certification under the EU-US Data Privacy Framework
Tidio LLC / Tidio Poland sp. z o.o. Visitor support chat European Union and United States European Commission Standard Contractual Clauses
Google Ireland Limited Embedded map service (Google Maps) European Union, with possible access from the United States Standard Contractual Clauses and certification under the EU-US Data Privacy Framework. Only activated if you accept external content cookies

International transfers

As indicated in the table above, some providers are located outside the European Economic Area or may access data from there. In those cases the transfer is based on the Standard Contractual Clauses approved by the European Commission and/or on the EU-US Data Privacy Framework adequacy decision of 10 July 2023, which guarantee a level of protection equivalent to European standards. You may request a copy of these safeguards by writing to info@thecubeurban.com.

Your rights

You may exercise the following rights at any time, free of charge:

To exercise them, write to info@thecubeurban.com or to Calle Laraña, 6-3ºB, 41003 Seville, stating the right you wish to exercise and enclosing a copy of a document proving your identity. We will reply within a maximum of one month.

If you believe we have not handled your request properly or that we are processing your data unlawfully, you have the right to lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan, 6, 28001 Madrid — www.aepd.es).

Source of the data and automated decisions

All the data we process comes directly from you. We do not obtain data from third parties or publicly accessible sources, and we do not take automated decisions or carry out profiling with legal effects on you.

Security and accuracy of the data

We apply appropriate technical and organisational measures to protect your data against destruction, loss, alteration or unauthorised access, including encryption of communications through a TLS certificate. By providing us with your data you warrant that it is accurate and that, where you provide third-party data, you have their authorisation.

Minors

Our services and this WEBSITE are aimed exclusively at persons aged 18 or over. We do not knowingly collect data from minors. If we detect that we have received data from a minor, we will delete it immediately.

Changes to this policy

This policy may be updated to reflect legal changes or new services. The date of the latest update appears at the top of this page.

3 · COOKIE POLICY

What cookies are

A cookie is a small text file that a website stores in your browser when you visit it. They are used, for example, to remember your preferences or to allow external services to work. Under this same heading we include equivalent technologies such as browser local storage (localStorage).

How we use cookies

This WEBSITE does not use advertising or marketing tracking cookies, nor any web analytics tools. We only use strictly necessary cookies and, solely if you give your consent, those of the two external services detailed below.

In accordance with Article 22.2 LSSI-CE, non-essential cookies remain blocked until you accept their installation. If you reject them or do not respond to the notice, they will not be installed and the site will remain fully usable: the chat will not appear and the map will be shown as a notice with a direct link to Google Maps.

Strictly necessary cookies

These do not require consent, because without them the service you have requested cannot be provided.

NameOwnerPurposeDuration
cube_cookies_v1 First party (local storage) To store your cookie choice so we do not ask you again on every visit 24 months

Functional cookies — support chat (Tidio)

Installed only if you accept the "Functional" category. They allow the chat to be displayed and the conversation thread to be kept between visits. They are owned by Tidio; up-to-date details are available in their privacy policy.

NameOwnerPurposeDuration
tidio_state_* Tidio (third party) To remember whether the chat is open or closed and its state Session
tidio_visitor / visitor identifiers Tidio (third party) To identify your conversation so it can be resumed and avoid duplicates Up to 12 months

External content cookies — map (Google Maps)

Installed only if you accept the "External content" category or press the "Load the map" button. When the map loads, Google receives your IP address and information about your browser. Details are available in Google's privacy policy and its cookie information.

NameOwnerPurposeDuration
NID Google (third party) To remember user preferences across Google services 6 months
CONSENT / SOCS Google (third party) To store the user's consent status with Google Up to 24 months

How to accept, reject or change your choice

The first time you visit, you will see a notice where you can accept all, reject all or customise each category separately. Rejecting is just as easy as accepting, and no box is pre-ticked.

You can change your mind at any time, with the same number of clicks it took to give your consent:

Your choice is stored for a maximum of 24 months; after that period we will ask you again, as recommended by the Spanish Data Protection Agency.

Managing cookies in your browser

Independently of the above, you can configure or delete cookies from your browser. Bear in mind that blocking all cookies may affect the operation of this and other websites:

Further information

If you have any questions about this policy, write to us at info@thecubeurban.com. You may also consult the Guide on the use of cookies published by the Spanish Data Protection Agency.

← Back to home