Privacy notice

This notice explains how eFrizieris processes personal data: when you look for a salon on the site, when you book an appointment with a salon that offers online booking, and when information about a salon is shown in the directory.

Who is responsible

Vadims Gurinovičs. Contact for privacy questions: privacy@efrizieris.lv.

What data we process and why

Visiting the site: your IP address, browser details and the pages requested – to run the site and keep it secure (error and security logs). Legal basis: our legitimate interest in a secure, working site (Art. 6(1)(f)).
Your location (only if you press "Nearest to me" or the map's location button and allow it in your browser): your approximate coordinates, to show you on the map and sort salons by distance. They are used only for that moment and are not stored or logged. Legal basis: providing the feature you asked for (Art. 6(1)(f)).
Booking (only with salons that offer online booking): your name, phone number, e-mail (optional), notes and the chosen salon, service, specialist and time – to arrange the appointment and pass it to the salon. Legal basis: steps at your request before entering into a contract (GDPR Art. 6(1)(b)). Please don't write health information (e.g. allergies) in the notes; if you do, it is only passed to the salon for your appointment and deleted with the booking's other personal data.
Protection against abuse: your IP address and the number of booking attempts, to prevent spam and fake bookings. Legal basis: our legitimate interest in a reliable service (Art. 6(1)(f)).
Salon information in the directory: the salon's name, address, phone, e-mail, website and social media links, opening hours, services and prices, photos, and the names and job titles of its staff. If the salon is an individual hairdresser, some of this is their personal data. The information comes from the salon itself or from publicly available sources (the salon's website, social media pages, public registers). Purpose: to help visitors find hairdressers and contact them. Legal basis: our legitimate interest and the public's interest in finding these services (Art. 6(1)(f)); for salons that use the partner panel, providing the service (Art. 6(1)(b)). Uploaded photos are saved again without their metadata (such as the location where they were taken); people may only be recognisable in them with their consent.
Salon accounts: name, e-mail and phone of salon owners using the partner panel – to provide the service (Art. 6(1)(b)).

Who receives the data

Everyone visiting the site – salon information in the directory is public.
The salon you book with – it needs your details to serve you and contact you about the appointment. From then on the salon is a separate controller of this data and responsible for its own processing.
Our hosting and IT service providers, who process data only on our instructions.
OpenStreetMap: when a map is shown, your browser loads map images from OpenStreetMap servers, which see your IP address.
State authorities – only when the law requires it.

We do not sell personal data.

Transfers outside the EU

Our servers are in the European Union. OpenStreetMap's map servers are in the United Kingdom, which the European Commission recognises as ensuring an adequate level of data protection.

How long we keep it

Technical logs of the site (which may contain your IP address) are kept for at most 30 days.
Salon information in the directory is kept while the salon operates, or until you ask us to correct or remove it.
Partner panel accounts are kept while they are in use and deleted when closed, unless the law requires us to keep some data longer.
Your name, phone, e-mail and notes of a booking are removed (anonymized) 24 months after the appointment.
Backup copies of the site's database and photos are kept for at most 30 days, so data removed from the site also disappears from the backups within 30 days.
IP addresses for abuse protection are kept for up to 1 hour.
Session cookies expire after 2 hours of inactivity.

Security

The site is only available over an encrypted connection (HTTPS). Access to personal data is limited by role: salon owners see only their own salon's bookings, and only our administrators see all of them.

Automated decisions

We do not make decisions based solely on automated processing, and we do not profile you.

Cookies

We only use cookies that are strictly necessary for the site to work (session and security token). We do not use analytics or advertising cookies.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing, to object to processing based on legitimate interest and to data portability. Write to privacy@efrizieris.lv. If you run or work at a salon and want its information in the directory corrected, completed or removed, write to the same address – we will do it without delay. You may also lodge a complaint with the Data State Inspectorate of Latvia (www.dvi.gov.lv).

Changes

We may update this notice. The version date is shown below.