Privacy Policy

Last Updated: December 2024

Data Controller

CapitalTWJ B.V. (registration number B20236251) is the data controller for the personal information we collect and process. We are located at Eikenlaan 131, 9748 NZ Groningen, Netherlands.

Data Collection

The data we collect includes personal information such as your name, email address, phone number, appointment preferences, and service history when you book appointments or contact CapitalTWJ. We also collect information about your website usage through cookies and similar technologies to improve our services and website functionality.

How We Use Your Information

We explain how we use your information to provide our nail care services, manage appointments, communicate with you about your bookings, send service updates, and improve our offerings. The use of your data is essential for delivering the luxury manicure and pedicure services that CapitalTWJ provides to clients in Groningen.

Legal Basis for Processing

Under GDPR, we process your personal data on the following legal bases:

• Contract performance: To provide our nail care services and manage your appointments
• Legitimate interests: To improve our services and communicate relevant information
• Consent: For marketing communications and non-essential cookies
• Legal obligation: To comply with accounting and tax requirements

Data Sharing

CapitalTWJ does not sell, rent, or share your personal information with third parties except in the following circumstances:

• With service providers who assist in our operations (payment processors, appointment scheduling systems)
• When required by law or to protect our legal rights
• With your explicit consent for specific purposes

Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Specifically:

• Customer records: 7 years after last service (for tax and legal compliance)
• Marketing data: Until you withdraw consent or 3 years of inactivity
• Website analytics: 26 months maximum
• CCTV recordings (if applicable): 30 days maximum

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data in certain circumstances
• Restriction: Request limitation of processing
• Portability: Request transfer of your data in a structured format
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent for consent-based processing

Cookies and Tracking

Our website uses cookies to enhance your experience and analyze usage patterns. For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Security

CapitalTWJ implements appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes secure storage systems, encrypted communications, and regular security assessments.

International Data Transfers

Your personal data is primarily processed within the European Union. If we need to transfer data outside the EU, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses.

Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are under 16, please do not provide any personal information through our website or services.

Changes to This Policy

CapitalTWJ may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last Updated" date. We encourage you to review this policy periodically.

Contact Information

If you have any questions about this privacy policy, wish to exercise your rights, or need to contact us regarding data protection matters, please contact us at:

Supervisory Authority

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.