Privacy

Privacy Policy

We take the protection of your personal data seriously. Below we inform you about the processing of your data on this website and when using our services (bookings, customer area, contact) in accordance with the GDPR and applicable national law.

1. Controller

Responsible for data processing:
[Company name / Name]
[Address]
Email: [Email]
Phone: [Phone]

2. Data collected and purpose

Bookings: Name, email, phone, address, appointment and service details. Processed for contract performance and scheduling.

Customer account: On registration we store name, email and password (hashed). Optional saved addresses are used to simplify booking.

Contact form: Name, email and message are processed to handle your request.

Payment: For online payment (e.g. card), payment data is sent directly to our payment provider (Stripe); we do not store card details.

Email marketing: Only if you have given explicit consent (double opt-in), we store your consent and use your email for newsletters or offers. You may withdraw consent at any time.

Technical data: When visiting the website we collect e.g. IP address, browser type, pages viewed and access time in logs (legitimate interest in security). With your consent we may use analytics or marketing cookies (see Cookie Policy).

3. Legal basis

Processing is based on: contract performance (Art. 6(1)(b) GDPR), your consent (Art. 6(1)(a) GDPR), legitimate interest (Art. 6(1)(f) GDPR, e.g. security, processing), and where applicable legal obligations (e.g. retention for tax and accounting).

4. Retention

Booking and invoice data are retained as required by tax and commercial law (typically at least 10 years). Account data and consent records are kept while the account exists or consent is not withdrawn. Technical logs are usually deleted or anonymised after a short period. See the Cookie Policy for cookie retention.

5. Recipients and third parties

Data is only shared with third parties where necessary (e.g. payment provider Stripe, email delivery, hosting). We have data processing agreements or appropriate safeguards in place.

6. Your rights

You have the right to: access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object (Art. 21). Where processing is based on consent, you may withdraw it at any time. You also have the right to lodge a complaint with a supervisory authority.

Data export: Under Art. 15 and 20 GDPR you may request a copy of your personal data we hold. Use our form: Request data export.

7. Cookies and consent

For information on cookies and how to manage your consent, see our Cookie Policy and Cookie settings.

8. Changes

We may update this privacy policy as needed. The current version is always available on this page.

Last updated: [Date e.g. February 2026]