Privacy Policy

Introduction

handcugdma B.V. (registration number 92847315) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or use our services.

As the Data Controller, handcugdma processes your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch data protection laws.

Data Collection

The data we collect includes personal information such as your name, email address, phone number, postal address, and any information you provide when contacting us or using our services. We may also collect technical information about your device and how you interact with our website.

We collect this information when you:

• Fill out contact forms on our website
• Book appointments or consultations
• Subscribe to our newsletter or communications
• Visit our website (through cookies and similar technologies)
• Communicate with us via email or telephone

How We Use Your Information

We explain how we use your information to provide and improve our services, communicate with you, and comply with legal obligations. The use of your data is based on the following legal grounds under GDPR:

• Contract performance: To provide skincare services and fulfil our contractual obligations
• Legitimate interests: To improve our services, respond to inquiries, and maintain customer relationships
• Consent: For marketing communications and non-essential cookies
• Legal obligation: To comply with applicable laws and regulations

We use your personal data to provide skincare consultations and treatments, schedule appointments, send service-related communications, improve our website and services, and comply with legal requirements.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Specifically:

• Customer records: 7 years after last service (for legal and tax purposes)
• Marketing communications: Until you unsubscribe or withdraw consent
• Website analytics: 26 months maximum
• Contact inquiries: 3 years after last communication

After these periods, we securely delete or anonymise your personal data unless we are required to retain it longer by law.

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of your personal data
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request deletion of your data (right to be forgotten)
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a portable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for processing at any time

To exercise these rights, please contact us using the information provided below.

Data Sharing and Transfers

handcugdma does not sell, rent, or trade your personal data to third parties. We may share your information only in the following circumstances:

• With your explicit consent
• With service providers who assist us in operating our business (under strict confidentiality agreements)
• When required by law or to protect our legal rights
• In connection with a business transfer or acquisition

Any data transfers outside the EU are conducted with appropriate safeguards in place, such as adequacy decisions or standard contractual clauses.

Cookies and Website Analytics

Our website uses cookies and similar technologies to enhance your browsing experience. For detailed information about our cookie usage, please see our Cookie Policy.

We use Google Analytics to understand how visitors interact with our website. This helps us improve our services and user experience. You can opt out of analytics tracking through your cookie preferences.

Security Measures

handcugdma implements appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training
• Secure data storage and backup procedures

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete such information.

Changes to This Policy

handcugdma may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please contact us at:

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data appropriately.