Privacy policy

1. Controller

Volye, registered with the Dutch Chamber of Commerce under number 42154726 (“Volye”, “we”), is the controller within the meaning of Article 4(7) of the General Data Protection Regulation (“GDPR”) for the processing of personal data through this website and the online booking system of THEA.

Each beauty professional working at THEA is an independent controller for the personal data they record in the course of providing a treatment.

Enquiries concerning this privacy policy may be addressed to contact@thea.beauty.

2. Purposes and legal bases

Website. When you visit this website, your IP address and the technical details of your request are processed in order to deliver the website and protect it against misuse, on the basis of our legitimate interest in operating a secure website under Article 6(1)(f) GDPR.

Bookings. We process your name, telephone number, email address, the selected treatment and time, and any remarks you provide in order to schedule, confirm and administer your appointment, on the basis of Article 6(1)(b) GDPR. The provision of these data is necessary to make a booking.

Correspondence. We process the personal data contained in communications sent to us by telephone, email or Instagram in order to respond to them and to arrange appointments, on the basis of Article 6(1)(b) GDPR or, where no appointment is concerned, our legitimate interest in responding to enquiries under Article 6(1)(f) GDPR.

Website statistics. We process the page visited, the referring page, country, browser, operating system and device type in order to compile aggregated statistics on the use and performance of this website, on the basis of our legitimate interest in maintaining a functional website under Article 6(1)(f) GDPR. No cookies are placed for this purpose.

Map. The Google map is loaded only at your request. By loading it, you consent under Article 6(1)(a) GDPR to the transfer of your IP address to Google and to the placing of cookies by Google.

3. Recipients

Personal data are shared with Salonized B.V., which operates the booking system, and with Vercel, which hosts the website and provides the website statistics, each acting as our processor. Google and Meta receive personal data as independent controllers when you load the map or contact us via Instagram, respectively.

4. Transfers outside the European Economic Area

Vercel may process personal data in the United States. Such transfers are based on the EU–US Data Privacy Framework and the standard contractual clauses adopted by the European Commission.

5. Retention

Personal data are retained no longer than necessary for the purposes for which they were collected, unless a longer period is required by law. Data used to distinguish visits for website statistics are deleted within 24 hours.

6. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection under Articles 15 to 21 GDPR, and the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. Requests may be sent to contact@thea.beauty.

You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

No automated decision-making, including profiling, takes place.