Privacy policy

This policy explains how fdsgfhg processes your personal data when you book an appointment, visit our page or contact us. We only process what is necessary, and we never sell personal data.

1. Data controller

fdsgfhg

If you have questions or want to exercise your rights, contact us at the salon.

2. What we process, why, and on what basis

Purpose	Data	Legal basis	Retention
Booking and providing the treatment, confirmations and reminders by email and SMS	Name, email, phone, time, treatment, staff member, your notes, payment status	Performance of a contract, GDPR art. 6(1)(b)	While you are a customer and up to 3 years after your last visit (limitation period)
Bookkeeping	Invoices, receipts and payment details (we never see full card numbers)	Legal obligation, art. 6(1)(c), Danish Bookkeeping Act	5 years from the end of the financial year
Evidence of the cancellation terms and fees you accepted	The text you accepted, time and IP address	Legitimate interest in documenting the agreement, art. 6(1)(f)	As long as a claim can be made, at most 3 years
Operation and security of the booking page (logs, protection against abuse and spam)	IP address, browser and device, pages visited, time	Legitimate interest, art. 6(1)(f), and art. 32	Up to 90 days; after that only anonymous figures

You are not obliged to give us any data, but without a name and a way to contact you we cannot book an appointment for you. We do not make decisions about you based solely on automated processing (art. 22).

3. Who we share data with

• LynBro ApS (bkg.dk), CVR 46321499 — provides our booking system and processes the data as our data processor, on our instructions and under a data processing agreement. Servers are in the EU. LynBro's sub-processors are listed at bkg.dk/dpa.

Apart from that we only disclose data where the law requires it or where it is necessary to establish, exercise or defend a legal claim.

4. Transfers outside the EU/EEA

We do not transfer your personal data to countries outside the EU/EEA.

5. Your rights

You have the right of access (art. 15), rectification (art. 16), erasure (art. 17), restriction (art. 18), data portability (art. 20), and to object to processing based on legitimate interest and always to direct marketing (art. 21). You can withdraw consent at any time; this does not affect processing before the withdrawal. We answer within one month. Data we must keep under bookkeeping law cannot be deleted early.

6. Complaints

You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, www.datatilsynet.dk. We would like to hear from you first at the salon.

7. Changes

We update this policy when our processing changes. The version and date at the top of the page show which text applies.