Privacybeleid

Last updated: 7 September 2026 Maestro design respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and what rights you have under the General Data Protection Regulation (GDPR/AVG). This Privacy Policy applies when you visit our website, make or manage a booking, contact us, purchase a service or product, apply for a position, subscribe to communications, or otherwise interact with Maestro design. 1. Who We Are Maestro design is a professional hair and beauty salon based in Utrecht, the Netherlands. For questions regarding this Privacy Policy or your personal data, you can contact us through the contact details provided on our website. 2. Personal Data We May Collect Depending on how you interact with Maestro design, we may collect: First and last name Email address Telephone number Booking and appointment information Selected services Appointment history Customer preferences and relevant notes Payment and transaction information Messages and correspondence with us Reviews and feedback Information submitted through website forms Marketing preferences and consent Technical information such as IP address, browser type and device information Website usage and cookie information Information voluntarily provided during consultations or intake forms Job application information, including CV, experience, skills, availability and contact details We only collect information that is necessary or reasonably relevant for the purpose for which it is processed. 3. Why We Process Your Personal Data We may process personal data to: Create and manage appointments Confirm, change or cancel bookings Send appointment confirmations and reminders Provide requested hair and beauty services Maintain appropriate customer records Process payments and refunds Provide customer support Respond to questions, complaints or requests Manage consultations and intake forms Improve our services and customer experience Prevent misuse, fraud or security incidents Maintain and secure our website and booking system Request or manage customer feedback and reviews Process job applications Comply with accounting, tax and other legal obligations Send marketing communications where permitted Analyse website performance and usage where legally permitted 4. Legal Bases for Processing Under the GDPR, we process personal data only when we have a valid legal basis. Depending on the situation, this may include: Performance of a contract: when processing is necessary to provide a booking, service or purchase you requested. Legal obligation: when we must retain or process information to comply with Dutch or European law. Legitimate interests: when processing is reasonably necessary for operating, protecting or improving Maestro design, provided your privacy rights do not override those interests. Consent: where we specifically ask for your permission, for example for certain marketing activities or non-essential cookies. You may withdraw your consent at any time where processing is based on consent. 5. Booking System When you make an appointment through our website, we may collect information required to create and manage your booking. This may include your name, contact details, selected service, selected team member, appointment date and time, booking history and relevant appointment information. Booking information may also be used to send confirmations, reminders, changes or other messages directly related to your appointment. 6. Consultation and Intake Information Certain services may require an intake or consultation. We may ask for information relevant to safely and appropriately performing the requested service. Please provide only information that is relevant to your treatment or consultation. Where information qualifies as sensitive or special-category personal data under the GDPR, we will process it only where an appropriate legal basis and applicable GDPR condition exist. 7. Payments When you make a payment, relevant transaction information may be processed by Maestro design and/or our payment service providers. Payment providers may process information according to their own privacy policies and security requirements. We generally do not store complete payment-card information when payments are processed through an external payment provider. 8. Account Information If our website allows customers to create an account, we may process information required to maintain that account, including contact details, login information, preferences and booking history. You are responsible for keeping your login credentials confidential. 9. Contact Forms and Communications When you contact Maestro design through our website, email, telephone, social media or another communication channel, we may process your contact details and the content of your communication. We use this information to answer your request and provide appropriate customer service. 10. Marketing Communications Where legally permitted, we may send information about Maestro design services, offers, promotions, news or events. Where consent is required, we will obtain it before sending such communications. You can unsubscribe from marketing communications at any time using the unsubscribe option provided or by contacting us. Transactional communications concerning an existing booking or service are not necessarily marketing communications. 11. Reviews We may invite customers to leave reviews about their experience with Maestro design. If you voluntarily publish a review on a public platform, the information you publish may become publicly accessible according to that platform's privacy settings and policies. We do not control how independent third-party platforms process information submitted directly to them. 12. Photos and Videos Maestro design may occasionally create photographs or videos of hairstyles, treatments, results, salon activities or events. Where identifiable clients are used for promotional or marketing purposes and consent is legally required, we will request appropriate permission. Giving permission for promotional photography or video is voluntary. 13. Job Applications If you apply to work, intern or train at Maestro design, we may process information such as: Name Contact details CV Work experience Education Skills Languages Portfolio Social media or professional profile provided by you Availability Employment preferences Information contained in your application We use this information for recruitment and selection purposes. Information relating to unsuccessful applications will not be retained longer than permitted or necessary. Where we wish to retain an application for possible future opportunities, we will obtain consent where required. 14. Cookies Our website may use cookies and similar technologies. Some cookies are necessary for the website and booking functionality to operate correctly. Other cookies may be used for analytics, preferences, functionality or marketing. Where required by law, non-essential cookies will not be placed until you have provided consent. You can change or withdraw your cookie preferences through the cookie settings available on our website. More detailed information should be provided in our Cookie Policy and cookie consent interface. 15. Analytics and Website Performance We may use analytics technologies to understand how visitors interact with our website and to improve its performance, usability and content. Where analytics requires consent under applicable privacy or cookie legislation, analytics will only be activated after the appropriate consent has been obtained. 16. Third-Party Services To operate our business and website, Maestro design may use carefully selected third-party service providers. These may include providers for: Website hosting Online booking Payment processing Email Customer communications Analytics Website security Cloud storage Recruitment forms Marketing Social media Review platforms Accounting and administration These providers may process personal information on our behalf or, in some cases, act as independent data controllers. Where required, appropriate data-processing agreements and safeguards are used. 17. International Data Transfers Some service providers may process personal data outside the European Economic Area (EEA). Where personal data is transferred internationally, we take appropriate measures required under the GDPR, such as using an adequacy decision, Standard Contractual Clauses or another legally recognised transfer mechanism where applicable. 18. How Long We Keep Personal Data We do not retain personal data longer than necessary for the purposes for which it was collected. Retention periods depend on the type of information, the purpose of processing and applicable legal obligations. Certain financial and administrative records may need to be retained for periods required under Dutch law. When information is no longer required, it will be deleted, anonymised or otherwise securely disposed of where appropriate. 19. Data Security Maestro design takes appropriate technical and organisational measures to protect personal information against unauthorised access, accidental loss, alteration, disclosure or destruction. Access to personal information is limited to people and service providers who reasonably require it for their duties. However, no internet-based system can guarantee absolute security. 20. Your GDPR Rights Depending on the circumstances, you may have the right to: Request access to your personal data Request correction of inaccurate information Request deletion of your personal data Request restriction of processing Object to certain processing Request data portability Withdraw consent at any time where processing is based on consent Object to direct marketing Lodge a complaint with the relevant supervisory authority Certain rights may be subject to legal exceptions. 21. Exercising Your Rights You can contact Maestro design if you wish to exercise a privacy right. We may request reasonable information to verify your identity before processing a request in order to protect personal information from unauthorised access or deletion. We will handle valid requests within the periods required by applicable privacy law. 22. Dutch Data Protection Authority If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). We encourage you to contact Maestro design first so that we have an opportunity to address your concern. 23. Children's Privacy Our website and online services are not intended to collect unnecessary personal information from children. Where information concerning a minor is required for an appointment or service, we process it only where appropriate and in accordance with applicable law. 24. Automated Decision-Making Maestro design does not intend to make decisions that have significant legal or similarly significant effects on customers solely through automated processing unless this is permitted by law and appropriate safeguards are provided. 25. External Websites Our website may contain links to external websites or platforms. Maestro design is not responsible for the privacy practices of independent third-party websites. We recommend reviewing their privacy policies before providing personal information. 26. Changes to This Privacy Policy We may update this Privacy Policy when our website, booking system, business operations, service providers or legal requirements change. The latest version will be published on our website together with its most recent update date. 27. Contact For questions about privacy, personal data or exercising your GDPR rights, please contact: Maestro design V.O.F. Utrecht, The Netherlands Email: info@maestro-design.nl Website: maestro-design.nl © 2026 Maestro design V.O.F. All rights reserved.