Privacy Policy

Data controller

Nails Center Monica, Ostuni (BR), Italy.

Data we collect

• Data supplied by the user: contact details, booking information and content voluntarily entered in available fields.
• Preferences and choices: language, cookie choices and settings needed to remember requests.
• Technical data: information strictly required to operate and secure the service and prevent abuse.

Cookies and third-party content

Strictly necessary technologies may be used to provide the service and remember requested choices. Optional features that require consent remain disabled until a choice is made and can be changed later.

• Necessary: technical tools essential for security, navigation and requested preferences.
• Optional: external content or services, if enabled for this tenant, may load only in accordance with the user's recorded choice.

Purposes

Data may be used to manage requests and bookings, provide requested features, secure the service and meet applicable obligations. Any optional purpose must be described in the approved version and, where required, based on consent.

Legal basis

The approved version must associate each purpose with its applicable legal basis, taking account of the user's request, statutory obligations, service security and any consent.

Your personal area

If the private area is enabled, it lets users view information associated with their profile through the access methods actually configured. Authentication methods, session duration and revocation procedures must be described in the exact version approved for this tenant.

Waiting list

If the waiting list is enabled and you choose to use it, the data in your request is processed to manage availability and contact you through enabled channels. You can ask to be removed using the controller's contact details. Purposes, channels and expiry criteria must match the configuration described in the approved policy.

Retention

Data is kept only for as long as necessary for the stated purposes and applicable obligations. The criteria take account of the request or booking status, service duration, security and any administrative or legal-claim requirements. Exact periods must appear in the version approved for this tenant.

Recipients

Where necessary, data may be processed by categories of suppliers acting for the controller, such as technical infrastructure, storage, security and transactional communications.

• Only categories actually enabled for this tenant are relevant.
• The approved version must identify recipients or their categories, their role and any applicable safeguards.
• Data must not be disclosed for purposes incompatible with those stated.

Your rights

You have the right to access, rectify, erase, restrict, port and object.

Complaint

You may lodge a complaint with the competent supervisory authority under the applicable rules, without affecting any other remedy available to you.