Privacy Statement

Last updated: 10 March 2026.

1. Who is responsible for your data?

Head Spa Enschede
Zonstraat 36
7521 HH Enschede
Chamber of Commerce number: 84391693

Head Spa Enschede is the controller for the processing of your personal data.

2. Which personal data do we process?

Depending on your contact with us, we may process the following personal data:

• name and contact details, such as first and last name, email address, phone number and address;
• appointment details, such as date, time, treatment and any comments you provide;
• order and payment details, such as ordered products, invoice details, payment status and delivery details;
• gift voucher details, such as buyer, recipient, value, number and redemption status;
• communication data, such as messages via email, contact form, WhatsApp or social media;
• newsletter data, such as email address, subscription status and any preferences;
• application data, such as CV, cover letter, contact details and any notes from job interviews;
• only if strictly necessary for a safe treatment: limited information about allergies, skin sensitivity or contraindications. To the extent this constitutes health data, we treat it as particularly sensitive personal data.

3. Why do we process your personal data?

We process your personal data for the following purposes:

Appointments and treatments

We use your data to schedule, modify, confirm and carry out appointments and to communicate with you about them. The legal basis is the performance of the agreement or, prior to a booking, taking steps at your request.

Safe execution of treatments

Where necessary for a safe treatment, we may process limited information about allergies, skin sensitivity or other contraindications. To the extent this constitutes health data, we only do so with your explicit consent, or we do not process such data at all.

Webshop and product sales

We use your data to process your order, handle payment, ship products, contact you about your order and maintain our administration. The legal basis is the performance of the agreement and, for fiscal retention obligations, compliance with a legal obligation.

Gift vouchers

We use your data to sell, register, send, redeem gift vouchers and to prevent fraud or misuse. The legal basis is the performance of the agreement and our legitimate interest in correct administration and fraud prevention.

Newsletter and promotions

We use your email address to send you our newsletter, offers and promotions if you have signed up or given consent. You can always unsubscribe via the unsubscribe link in every email or by contacting us.

Contact and customer service

When you contact us, we use your data to answer your question, handle your request or deal with a complaint. The legal basis is usually our legitimate interest in proper business operations and customer contact.

Job applications

If you apply for a position with us, we use your data to assess your application, contact you and conduct the procedure. We only process data relevant to assessing your suitability for the role.

4. How long do we retain your data?

We do not retain your personal data longer than necessary for the purpose for which we collected it. We apply at least the following guidelines:

• appointment and client contact data: 24 months after your last appointment, unless a longer retention period is required for complaints handling or a legal dispute;
• data required for financial administration, such as invoices and payment details: 7 years, as required by tax law;
• newsletter data: until you unsubscribe or withdraw your consent;
• application data: no later than 4 weeks after the end of the application procedure. Only with your consent will we retain your data longer, up to 1 year, so we can approach you again for a future vacancy.
• health data processed for a safe treatment: no longer than strictly necessary for that purpose, with a retention period set by us of 12 months.

5. With whom do we share your data?

We do not sell your personal data to third parties. We may share your data with parties that help us provide our services, to the extent necessary, such as:

• our website and hosting provider;
• our online appointment or salon system;
• our newsletter software;
• our payment provider;
• our webshop software;
• our accountant or administrator;
• our delivery or shipping partner;
• our IT service provider.

With parties that process personal data on our behalf, we conclude a data processing agreement where required.

6. Transfer outside the EEA

We do not in principle transfer your personal data outside the European Economic Area.

7. Security of your data

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access and unwanted disclosure. Examples include secure connections, strong passwords, access restrictions and careful management of authorisations.

8. Your privacy rights

You have the right to ask us for:

• access to your personal data;
• correction of inaccurate personal data;
• deletion of your personal data;
• restriction of processing;
• transfer of your personal data where that right applies;
• objection to processing, in particular against direct marketing.

You can also withdraw previously given consent at any time. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

You can send your request to: info@headspaenschede.nl.

9. Automated decision-making and profiling

We do not in principle make decisions based solely on automated processing that have legal consequences for you or similarly significantly affect you. If we do use automated decision-making or profiling, we will inform you separately.

10. Changes

We may amend this privacy statement from time to time. The most current version is always available on our website. We advise you to review this statement regularly.

11. Contact

Do you have questions about this privacy statement or about how we process your personal data? Please contact us at:

06 14 87 43 81
info@headspaenschede.nl
Zonstraat 36
7521 HH Enschede