Are you 18 or older?

1) In the course of running this business, personal information about customers, buyers, and visitors is collected and kept. The identity of customers, buyers, and visitors is not verified, and they may give a pseudonym of their own choosing, under which they wish to be recorded and addressed, and under which information may also be kept as described in point (B).

A

For all of the people mentioned above, only the following information is collected: first name, last name, (any titles), phone contacts and email, or possibly a link to social media for easier communication. This is used to identify and communicate with customers and buyers, and where relevant, visitors. Similar information is also kept about unreliable or fraudulent buyers and customers. This data is kept electronically, or on paper in a notebook kept solely for this purpose, and is linked to the personal data described in point (B). It is not passed on further and serves the internal purpose described above, in the interest of the data controller.

B

For customers who have had at least one session/consultation/massage, sensitive information is kept – recorded in the presence of the customer, who thereby only shares information they agree to have kept and processed:

• about their state of health, and any history relevant to the services provided and how it develops over time, if the client is served on multiple occasions,
• about wishes, intentions, and verbally agreed arrangements and boundaries for a specific session/consultation/massage

This data is kept electronically in a private, appropriately secured database, or on paper in a client-card notebook kept solely for this purpose, which is unlikely to reach anyone who would intend to misuse or exploit it in any way, and is linked to the personal data described in point (A). This data is kept in the interest of the data controller – for successfully and meaningfully guiding customers' progress, for reviewing that progress, and for resolving any complaints, disputes, or objections with customers.

Customers and visitors may be asked to present an official personal document to verify they are over 18 years old – data from this check is not kept, only a note such as „age over 18 verified“ may be recorded.

2) Suppliers and retention period

In the course of running this business, information is also collected and kept about suppliers of services, materials, or deliveries, within the scope of public registers and publicly available contact information. This information is used only for internal purposes, is not passed on further, and is kept in the interest of the data controller.

All of the data described above is reviewed once a year, together with the annual accounts, to assess whether it remains useful and purposeful for the controller or the data subjects to keep it further. Key factors in this decision include: (a) whether the collaboration or provision of services is likely to continue, and (b) the level of risk of any form of dispute with the relevant party. As a rule, data is planned to be kept for a maximum of 5 years from when it was collected.