Privacy and Cookie Policy – The Hair Atelier
This privacy and cookie policy applies to the processing of personal data relating to visitors to our website thehairatelier.nl, visitors to our salon, users of our booking module, people who contact us and recipients of our mailings.
The Hair Atelier respects your privacy and processes personal data carefully and in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy legislation. This policy explains which personal data we process, why we process it, with whom data may be shared, how long we retain it and which rights you have.
1. Data controller
The Hair Atelier
Gasthuisvest 15 Zwart
2011 ET Haarlem
Chamber of Commerce (KvK): 98219758
VAT: NL005317182B94
Email:
info@thehairatelier.nl
2. Purposes of data processing
We process personal data for the following purposes:
- Scheduling, confirming, changing and managing appointments.
- Carrying out treatments and providing other services.
- Maintaining necessary customer and salon information.
- Responding to questions, requests and complaints.
- Sending appointment confirmations, reminders and service messages.
- Processing payments and any refunds.
- Carrying out our administration and complying with legal obligations.
- Sending marketing communications, such as newsletters, where you have given consent.
- Conducting customer satisfaction research, where applicable.
- Securing, maintaining and improving our website and services.
- Analysing the use of our website through Google Analytics, exclusively after you have allowed analytical cookies.
- Measuring conversions and advertising performance through Google Ads and, depending on our advertising settings, enabling personalised advertising, exclusively after you have allowed marketing cookies.
3. Which personal data do we process?
A. Data you provide yourself
- Name
- Email address
- Phone number
- Address details, where applicable
- Date of birth, where applicable
- Gender, where applicable
- Bank account number, only where required for payments or refunds
- Information provided through our booking module, contact form, email, telephone or WhatsApp
- Preferences and information relevant to your appointment or treatment
- Information about your hair, scalp, allergies, medication or other health-related circumstances that you provide yourself and that are relevant to providing a safe treatment
B. Technical and automatically collected data
When you visit our website, technically necessary information may be processed in order to display, secure and operate the website properly. This may include:
- IP address and technical connection information
- Browser and device type
- Operating system and screen settings
- Date and time of the website visit
- Requested pages and technical error or security information
- Your stored cookie preference
Where you allow analytical or marketing cookies, the following information may also be processed:
- Pages visited and interactions on our website
- Information about how you reached our website
- Campaign, advertising and conversion information
- Technical identifiers used by Google Analytics or Google Ads
C. Salon history
- Appointments booked, changed and cancelled
- Treatments performed
- Products purchased
- Receipts and payments
- SEPA direct debits, where applicable
- Loyalty programme data, where applicable
- Purchased subscriptions, where applicable
- Logs of emails and messages sent, such as appointment confirmations and reminders
Personal data relating to children under the age of 16 is only processed with the consent of a parent or legal guardian, to the extent that such consent is legally required.
4. Cookies and similar technologies
We use cookies and similar technologies, including local browser storage, to operate our website properly and to remember your cookie preference. With your consent, we also use analytical and marketing technologies.
We distinguish between the following categories:
Necessary technologies
These are required for the basic operation, security and accessibility of the website and to
remember your cookie preference. Consent is not required for these technologies.
Analytical cookies
With your consent, we use Google Analytics to understand how our website is used. This allows us,
for example, to see which pages are visited and how visitors use the website.
Marketing cookies
With your consent, we use Google Ads to measure conversions and advertising performance and,
depending on our advertising settings, to enable personalised advertising.
Analytical and marketing consent settings are denied by default. Google Tag Manager, Google Analytics and Google Ads are not activated unless you have allowed the relevant category.
Through our cookie banner, you can choose:
- Accept all
- Only necessary
- Your own selection through Settings
You can change or withdraw your choice at any time through Cookies: settings at the bottom left of the website or through Open cookie settings.
Your cookie preference is stored locally in your browser for a maximum of 180 days. After this period, we will ask you to make a new choice.
Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Our website may contain links to external services, such as Instagram and WhatsApp. When you click such a link, you leave our website and the privacy and cookie policy of the relevant external party applies.
5. Google Tag Manager, Google Analytics and Google Ads
Our website uses Google Tag Manager to manage analytical and marketing tags. In our current configuration, Google Tag Manager is only loaded after you have allowed analytical cookies, marketing cookies or both.
Before you make a choice, analytics storage, advertising storage, advertising user data and advertising personalisation are denied by default. Your choice is communicated to the applicable Google services through Google Consent Mode.
When you select Only necessary, Google Analytics and Google Ads are not activated.
When you allow analytical cookies, we use Google Analytics to obtain information about the use and performance of our website. This may include technical information, pages visited, interactions and information about the origin of a website visit.
When you allow marketing cookies, we use Google Ads to measure conversions and advertising performance and, depending on our advertising settings, to enable personalised advertising.
After you have given consent, Google may receive information about your browser, device, website use and interactions with advertisements. The exact processing of information also depends on the Google services and settings that are active at that time.
More information about how Google processes personal data is available in Google’s privacy policy.
You can change or withdraw your consent for Google Analytics and Google Ads at any time through Cookies: settings at the bottom left of our website.
6. Legal grounds for processing
We process personal data on one or more of the following legal grounds:
- Performance of a contract: for example, to make and carry out an appointment, treatment or payment.
- Legal obligation: for example, in relation to our financial administration and tax obligations.
- Consent: for example, for analytical cookies, marketing cookies, newsletters and other processing activities for which consent is required.
- Legitimate interests: for example, for security, fraud prevention, business operations, customer service and quality improvement, provided that your interests and rights do not override those interests.
Where information about allergies, medication or health qualifies as special category personal data, we only process it to the extent necessary to provide a safe treatment and on the basis of your explicit consent, unless another lawful exception applies.
7. Your rights
Depending on the circumstances, you have the right to:
- Access your personal data
- Have incorrect or incomplete information corrected
- Request deletion of your personal data
- Request restriction of processing
- Object to certain processing activities
- Object to direct marketing
- Withdraw your consent at any time
- Request data portability, where this right applies
- Submit a complaint to the Dutch Data Protection Authority
Requests can be submitted via info@thehairatelier.nl. We may ask you to provide additional information so that we can verify your identity.
Consent for analytical and marketing cookies can be changed or withdrawn directly through Cookies: settings at the bottom left of our website.
8. Sharing data with third parties
We do not sell your personal data. We only share personal data with third parties where this is necessary for our services, where you have given consent or where we are legally required to do so.
This may include:
- Salonhub, our booking and point-of-sale software, for managing appointments, customer information, treatments, payments and salon administration
- Banks and payment providers where required for a payment or refund
- Administration, accounting and tax service providers
- Software and service providers for email and customer communication
- Hosting, security and technical website service providers
- Google Tag Manager, Google Analytics and Google Ads, exclusively after you have given the relevant analytical or marketing consent
- Communication services such as WhatsApp, where you choose to contact us through that service
- Public authorities and supervisory authorities where we are legally required to disclose data
Where parties process personal data on our behalf, we enter into appropriate privacy and data processing arrangements where required. Parties that independently determine how they process personal data are responsible for their own processing and privacy policies.
9. Retention periods
We do not retain personal data for longer than necessary for the purpose for which it was collected, unless we are required to retain the information for longer under a legal obligation.
We apply the following general principles:
- Appointment, customer and treatment information is retained for as long as necessary for our services, customer relationship, complaint handling and any legal claims.
- Financial and administrative information is retained for the period required by applicable law.
- Contact requests and correspondence are retained for as long as necessary to handle the request and answer any follow-up questions.
- Information used for marketing communications is retained until you withdraw your consent or unsubscribe.
- Your cookie preference is stored locally in your browser for a maximum of 180 days.
- Information processed through Google Analytics and Google Ads is retained in accordance with the retention periods configured in the relevant Google services.
When a retention period has expired, we delete or anonymise the personal data unless further retention is permitted or required by law.
10. Complaints
If you have a complaint about the processing of your personal data, please contact us first via info@thehairatelier.nl, so that we can investigate the complaint and attempt to resolve it.
You also have the right to submit a complaint to the Dutch Data Protection Authority.
11. Security
We take appropriate technical and organisational measures to protect personal data against misuse, loss, unauthorised access, unwanted disclosure and unauthorised alteration.
Only persons and service providers that require the information for their work are given access to the relevant personal data, where appropriate.
12. Changes
The Hair Atelier reserves the right to update this privacy and cookie policy, for example where our services, website, cookie banner or legal obligations change.
The most recent version will always be published on our website. In the event of significant changes, we may provide additional notice to visitors or customers.