Privacy Policy

1. Data controller

Data controller: DS Beauty Art di Doina Snigur, Via Val di Chienti, 65, 00141 Roma. Email: dsbeautyart@gmail.com. VAT number: to be added after verification (no real number is published in this draft).

2. Data we process

• Contact details you provide via the site forms (name, email, phone, message content).
• Data related to bookings and course or consulting enquiries.
• Aggregated usage data, only with your consent to analytics cookies (see the Cookie Policy).

3. Purposes and legal bases

• Replying to enquiries and managing bookings: pre-contractual/contractual steps (art. 6.1.b GDPR).
• Administrative, accounting and tax obligations: legal obligation (art. 6.1.c GDPR).
• Aggregated site analytics: consent (art. 6.1.a GDPR), withdrawable at any time.

4. Retention

Data is kept only as long as needed for the stated purposes: contact enquiries for as long as needed to handle them; accounting data for statutory periods; analytics data for the period stated in the Cookie Policy.

5. Recipients

Data may be processed by technical suppliers acting as processors: Cloudflare (hosting), Supabase (database), Stripe (deposit payment), Resend (email), Twilio (SMS) and Google (appointment calendar). Data is never sold or shared with third parties for marketing.

Emails we send you through Resend contain a transparent image that tells us whether the message was opened. We use it to check that appointment messages are actually arriving. The figure is read in aggregate, feeds no profiling, and affects neither prices, availability nor the treatments we suggest. Many mail apps load images by themselves, so the count overstates real reading. You can prevent it by blocking images in your mail app, or by writing to us.

6. Your rights

Under arts. 15-22 GDPR you can request access, rectification, erasure, restriction, portability, object to processing, and withdraw consent at any time. Write to the controller's email address above.

You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

7. Transfers outside the EU

Where suppliers process data outside the European Economic Area, transfers rely on adequacy decisions or standard contractual clauses.

8. Updates

This notice may be updated; the version published on this page is the one in force.