Privacy Policy

HairOlicious highly values the protection of your personal data. In this Privacy Policy, we aim to provide clear and transparent information on how we handle personal data.

We make every effort to ensure your privacy is safeguarded and therefore handle personal data with care.

HairOlicious adheres to all applicable laws and regulations, including the General Data Protection Regulation (GDPR). This means that we:

• Process your personal data in accordance with the purpose for which it was provided; these purposes and types of personal data are described in this Privacy Policy;
• Limit the processing of your personal data to only what is necessary for the purposes for which it is processed;
• Request your explicit consent if required for the processing of your personal data;
• Have taken appropriate technical and organizational measures to ensure the security of your personal data;
• Do not transfer personal data to other parties unless necessary for the purposes for which it was provided;
• Are aware of your rights regarding your personal data, wish to make you aware of them, and respect them.

As HairOlicious, we are responsible for the processing of your personal data. If, after reviewing our Privacy Policy, or in a more general sense, you have any questions or wish to contact us, you can do so using the contact details at the end of this document.

Processing of personal data of suppliers

Personal data of customers or suppliers is processed for the following purposes:

• Administrative purposes;
• Medical purposes;
• Communication regarding the assignment and/or invitations;
• The execution or issuance of an assignment.

The basis for this personal data is:

• The agreed assignment.

For the above purposes, HairOlicious may request the following personal data from you:

• First name;
• Middle name;
• Last name;
• (Business) phone number;
• (Business) email address;
• Gender;
• Date of birth;
• Social Security Number (BSN).

Your personal data will be stored by HairOlicious for the above-mentioned processing for the duration of the agreement and afterward only in the financial administration for a maximum of 7 years and for medical hairpieces for at least 10 years.

Processing of personal data of clients

Personal data of clients is processed for the following purposes:

• Administrative purposes;
• Execution of the treatment agreement.

The basis for this personal data is:

• The treatment agreement.

For the above purposes, HairOlicious may request the following personal data from you:

• First name;
• Middle name;
• Last name;
• Phone number;
• Email address;
• Gender;
• Social Security Number (BSN);
• Date of birth;
• Health information.

Your personal data will be stored by HairOlicious for the above-mentioned processing for the duration of the treatment agreement and afterward for a minimum of 10 years.

Processing of personal data of former clients/patients

Personal data of clients is processed for the following purposes:

• Administrative purposes.

The basis for this personal data is:

• The treatment agreement.

For the above purposes, HairOlicious may request the following personal data from you:

• First name;
• Middle name;
• Last name;
• Phone number;
• Email address;
• Gender;
• Social Security Number (BSN);
• Date of birth.

Your personal data will be stored by HairOlicious for the above-mentioned processing for a maximum of 40 years.

Processing of personal data of newsletter subscribers

Personal data of newsletter subscribers is processed for the following purposes:

• Informing the person through news publications.

The basis for this personal data is:

• The newsletter subscription form.

For the above purposes, HairOlicious may request the following personal data from you:

• First name;
• Middle name;
• Last name;
• Email address.

Your personal data will be stored by HairOlicious for the above-mentioned processing for the period in which you are subscribed.

Processing of personal data of prospects, stakeholders, lobby contacts, and/or interested parties

Personal data of prospects, stakeholders, lobby contacts, and/or interested parties is processed for the following purposes:

• Providing information in the form of newsletters and/or targeted contacts.

The basis for this personal data is:

• Verbal consent, provision of a business card, and/or a connection on LinkedIn.

For the above purposes, HairOlicious may request the following personal data from you:

• First name;
• Middle name;
• Last name;
• Address;
• Phone number;
• Email address.

Your personal data will be stored by HairOlicious for the above-mentioned processing for the period in which you are considered a prospect, stakeholder, or interested party.

Processing of personal data of employees

Personal data of employees is processed for the following purposes:

• Execution of the employment contract.

The basis for this personal data is:

• The employment contract.

For the above purposes, HairOlicious may request the following personal data from you:

• First name;
• Middle name;
• Last name;
• Phone number;
• Email address;
• Date of birth;
• Salary details;
• Copy of ID;
• Social Security Number (BSN);
• Bank details.

Your personal data will be stored by HairOlicious for the above-mentioned processing for the period of the contract and afterward only in the financial administration for a maximum of 7 years.

Disclosure to third parties

The data you provide to us may be shared with third parties if necessary for the execution of the purposes described above. For example, we may use third parties for:

• Managing the online environment of the GDPR program;
• Managing the (financial) administration;
• Managing newsletters and invitations;
• Marketing services;
• Insurance services.

We never transfer personal data to parties with whom we have not signed a data processing agreement. With these parties (processors), we make the necessary agreements to safeguard the security of your personal data. We will not provide your data to other parties unless legally required or permitted, such as if the police request (personal) data in the context of an investigation. In such cases, we are obligated to cooperate and provide the data.

Within the EU

We do not transfer personal data to parties located outside the EU.

Minors

We only process personal data of minors (persons under 16 years old) with the written consent of a parent, guardian, or legal representative.

Retention period

HairOlicious does not retain personal data longer than necessary for the purpose for which it was provided or as required by law.

Security

We have taken appropriate technical and organizational measures to protect your personal data from unlawful processing, including:

• All persons who can access your data on behalf of HairOlicious are required to maintain confidentiality;
• We have a username and password policy on all our systems;
• We pseudonymize and encrypt personal data if necessary;
• We make backups of personal data to restore it in case of physical or technical incidents;
• We regularly test and evaluate our measures;
• Our employees are informed about the importance of protecting personal data.

Your rights regarding your data

You have the right to access, rectify, or delete the personal data we have received from you. You can also object to the processing of your personal data (or part of it) by us or one of our processors. You also have the right to have the data you provided to us transferred to you or directly to another party upon your request. We may ask you to verify your identity before complying with such requests.

If we process your personal data based on your consent, you always have the right to withdraw that consent.

Complaints

If you have a complaint about the processing of your personal data, please contact us directly. If we cannot resolve the issue together, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), which supervises privacy protection.

Questions

If you have any questions or comments after reviewing our Privacy Statement, please contact us!

Contact Information HairOlicious
Rijksstraatweg 208a
7395MG Teuge
info@hairolicious.nl