We are Salona s.r.o., ID No.: 21988242, with its registered office at Nové sady 988/2, Staré Brno, 602 00 Brno, registered in the Commercial Register maintained by the Regional Court in Brno under file number C 140972, and we operate the Salona platform. If you are a user of the websites, mobile applications, or other software products of Salona, Salona Pro, or Salona Jobs (hereinafter also referred to as “Websites and Mobile Applications”), or if you are a visitor of these Websites and Mobile Applications, we may process your personal data while you use our services.
In this Privacy Policy, you will learn how we process your personal data as a data controller, why we do so, with whom we share your data, and what your rights are related to such processing.
We process your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”).
If, as a Salona User, you provide certain personal data directly to a salon operator or their staff, we are not the controller of those personal data, and you should therefore contact the salon operator or their staff to exercise your rights.
1. PERSONAL DATA PROCESSED
We only process your data to the extent necessary to fulfill the purposes described below. We obtain your personal data directly from you, primarily via the Websites and Mobile Applications or through mutual communication.
For clarity, we have divided the personal data we process into categories based on the product you use and the group you belong to. If you are using Salona with a user profile to compare salon offers, book appointments, manage your bookings, etc., you are referred to in this document as a “Salona User”. If you have a user account and you operate a salon (hereinafter also referred to as the “Operator”), or if you work in a salon based on an employment or similar contractual relationship (hereinafter referred to as the “Professional”), and you use Salona Pro to access the booking system and other tools, you are collectively referred to as a “Salona Pro User” in this document. In case you have created a user account in order to find a job, you are referred to as a “Salona Jobs – Worker User”. If you have created a user account and you plan to recruit workers for your salon, you will find relevant information under the designation “Salona Jobs – Employer User”. If you are a visitor to any of the mentioned products, the designation “Website Visitor” applies to you.
Salona User
• Identification Data including your first and last name, gender, and date of birth.
• Contact Information including your e-mail address, phone number, and other contact details you provide.
• Booking Information such as requested services, booking dates, your favorite salons, etc.
• Payment Information including payments made through the Websites and Mobile Applications, other data required to facilitate payments between you and the salon, and tax data.
• Communication Information any details you provide through the Websites and Mobile Applications, email, or other communication platforms, including your feedback on the Websites and Mobile Applications.
Salona Pro User
• Identification Data including the name of your salon or company, salon type, company ID number, registered address, name, surname, and position of the contact person or professionals working at your salon under an employment or similar contract.
• Contact Information including e-mail address, phone number, salon’s contact address, and other contact details you provide.
• Booking Information including the requested service, reservation dates, and the professional who will provide the service.
• Payment Information including your bank account number, invoice data, information on completed payments, data required to facilitate payments between you and the Salona User, tax data, and other data we are legally required to record.
• Photos such as images of your work, your salon, or profile photos of you or your Professionals.
• Communication Information any data you provide through the Websites and Mobile Applications, email, or other communication platforms, including feedback.
Salona Jobs – Worker User
• Identification Data including your first and last name, gender, and date of birth.
• Contact Information including e-mail address, phone number, and other contact details you provide.
• Worker Data such as the position you're seeking, information about you and your work experience, details from your CV, and other data provided in your job ad, responses to job offers, or further communication.
• Communication Information any data you provide through the Websites and Mobile Applications, email, or other communication platforms, including your feedback.
Salona Jobs – Employer User
• Identification Data including the name of your salon or company, salon type, company ID number, registered address, name, surname, and position of the contact person or professionals working at your salon under an employment or similar contract.
• Contact Information including e-mail address, phone number, and other contact details you provide.
• Job Position Data such as the job title, type of employment offered, remuneration, job description, and any other information you provide in your job listing, in a response to a candidate's application, or during further communication.
• Communication Information any data you provide through the Websites and Mobile Applications, email, or other communication platforms, including feedback.
Website Visitor
• Contact Information such as your e-mail address if you subscribe to the newsletter, or your phone number if you provide it via the Websites and Mobile Applications.
• Cookies data obtained from technical files and similar tools and technologies.
• Communication Information any data you provide through the Websites and Mobile Applications, email, or other communication platforms, including your feedback.
2. PURPOSES OF THE PROCESSING OF PERSONAL DATA
We process your personal data for the purposes listed below.
Performance of a Contractual Relationship
We may process your personal data for the purpose of negotiating a contract and subsequently for fulfilling our contractual obligations and communicating in connection with those obligations, provided a contractual relationship has been established between us.
To fulfill this purpose, we may process all personal data listed in Article 1 of this Privacy Policy, whether you are a Salona User, Salona Pro User, Salona Jobs – Worker User, or Salona Jobs – Employer User.
The legal basis for this processing is the performance of a contract concluded between you and us. Related to this, it is also necessary to ensure communication prior to contract conclusion. If you are not directly a party to the contract (e.g., if you are a Professional), the legal basis is our legitimate interest in fulfilling the concluded contract. The legal basis for processing Photos is your consent, which you grant by uploading the photos to the Websites and Mobile Applications. Data is processed for the duration of the contract and subsequently for the period necessary to fulfill contractual obligations.
Ensuring Communication
We may also process your personal data to ensure mutual communication between you and us, and also between you and other Salona Users, Salona Pro Users, and all Salona Jobs Users. You may contact us via forms on our Websites and Mobile Applications, by e-mail, phone, in person, via social media chat, or through other means. Any resulting communication may involve the processing of your personal data. We may also use the data obtained from this communication to fulfill other purposes, such as contract performance, the protection of our rights and legal interests (including handling your requests), or the development of the Websites and Mobile Applications.
For this purpose, we process your Identification Data, Contact Information, and Communication Information, regardless of whether you are a Salona User, Salona Pro User, Salona Jobs – Worker User, Salona Jobs – Employer User, or Website Visitor.
The legal basis for this processing is our legitimate interest in maintaining communication with you. We process personal data for the duration necessary to manage the communication and then archive it for potential future use. Archived personal data is deleted one year after its collection. If a contractual relationship arises between us, we will process communication data for the duration of that relationship.
Protection of Our Rights and Legal Interests
Another purpose for processing your personal data is the protection of our rights and legal interests. This may particularly apply in cases involving legal proceedings before courts or other public authorities, or in the internal handling of your requests and legal claims.
For this purpose, we may process all personal data listed in Article 1 of this Privacy Policy, whether you are a Salona User, Salona Pro User, Salona Jobs – Worker User, Salona Jobs – Employer User, or Website Visitor.
The legal basis for this processing is our legitimate interest in protecting our rights. If a contractual relationship has arisen, we will process your personal data for up to 10 years after the contract ends. If no such relationship occurred, we retain the data for 5 years from the start of processing.
Promotion and Marketing
We may also process your personal data to promote the Websites and Mobile Applications, our company, our services and activities, the services of Salona Pro Users, and the offers of Salona Jobs – Workers and Employers. This may include sharing photos of your work or job ads on social media, Websites, and other promotional materials or platforms.
For this purpose, we may process Identification Data, Contact Information, and Photos if you are a Salona Pro User, and Identification Data, Contact Information, Worker Data, and Job Position Data if you are a Salona Jobs – Worker User or Salona Jobs – Employer User.
The legal basis for this processing is our legitimate interest in promotion and marketing or your consent if we use Photos for promotional purposes. We process Photos for a maximum of 10 years from their publication or until consent is withdrawn. In the case of Identification Data, Contact Information, Worker Data, and Job Position Data, we process them for the duration of the contractual relationship and for up to 10 years after its termination or until consent is withdrawn.
Provision of Payment Gateway and Payment Terminal Services
If you are a Salona Pro User and you have decided to use the payment terminal or payment gateway services provided by SumUp Ltd. while using the Websites and Mobile Applications, we may process personal data related to linking you with SumUp Ltd.
For this purpose, we may process your Identification Data, Contact Information, and Communication Information if you are a Salona Pro User (particularly an Operator).
Since payment terminal or gateway services can only be provided after a contractual relationship has been established with us, the legal basis for this processing is the performance of the contract concluded between you and us.
We process personal data for the duration of the contractual relationship.
We and SumUp Ltd. act as joint controllers of personal data in this context. However, our company is the data controller only to the extent necessary for linking and transferring your contact details to SumUp Ltd. and facilitating the purchase of the payment terminal. SumUp Ltd. solely determines the purposes and means of processing personal data in any further stage of using the payment terminal or payment gateway. Therefore, for the exercise of your rights or for questions beyond the scope of transferring your contact details, please contact SumUp Ltd. directly.
Mechanisms for Handling Illegal Content
In accordance with Regulation (EU) 2022/2065 of the European Parliament and of the Council For Digital Services (the DSA), as the provider of an online platform, we are required to implement mechanisms that allow concerned parties to report the presence of content that may be considered illegal. We are also required to take steps to remove illegal content and to provide the requested information when asked to do so by relevant authorities.
For this purpose, we process Identification Data, Contact Information, Booking Information, Payment Information (including tax-relevant data), and Communication Information – regardless of whether you are a Salona User, Salona Pro User, or, in addition, Worker Data and Job Position Data if you are a Salona Jobs – Worker or Employer User.
The legal basis for this processing is the fulfillment of our legal obligations. We process the data for the period required by law. We also process personal data for the performance of tasks carried out in the public interest, where the DSA does not specify the scope of personal data processing – particularly in connection with the evaluation of illegal content, submission of information to authorities, and other activities related to compliance with the DSA.
Reporting Information in Accordance with Tax Legislation (especially DAC7 Directive)
The processing of certain personal data is necessary for reporting required information in compliance with tax-related legislation (especially the DAC7 directive) to the competent governmental authorities. This processing and data transfer occur strictly within the scope required by the relevant laws.
For this purpose, we process Identification Data, Contact Information, Booking Information, and Payment Information (including tax-relevant data), whether you are a Salona User, Salona Pro User, or Salona Jobs – Worker or Employer User.
The legal basis for this processing is the fulfillment of our legal obligations. The data is processed for the period required by law.
Sending Newsletters
We may also use your personal data to send you newsletters containing offers and information about events related to the Websites and Mobile Applications, our company's activities, salon updates, or other marketing communications. We will send newsletters only if you have given us consent or if you subscribed via the Websites or Mobile Applications.
For this purpose, we process your Identification Data and Contact Information (e-mail address), whether you are a Salona User, Salona Pro User, Salona Jobs – Worker, Salona Jobs – Employer, or Website Visitor.
The legal basis for this processing is your consent. We will process your data for up to 10 years or until you withdraw your consent. You may withdraw your consent at any time via the unsubscribe link included in each e-mail. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
Cookies and Platform and App Development
To ensure the operation and functionality of the Websites and Mobile Applications, to improve user experience, and for marketing and analytics purposes, we may process Cookies. Based on this information, we may continuously improve and develop the features of the Websites and Mobile Applications. For this purpose, we may also use information exchanged during our communication.
If you are a Website Visitor, we may process Cookies and Communication Information.
The legal basis for processing necessary technical and functional cookies is our legitimate interest in ensuring the proper and secure operation of the Websites. The legal basis for processing analytical and marketing cookies is your consent, granted via the cookie banner upon visiting the Websites. Data is usually processed for the duration of your visit, but no longer than one year from collection.
Some cookies on the website are operated directly by Mapbox, Inc., which is therefore the controller of your personal data in relation to those cookies. More information about how Mapbox, Inc. processes your data can be found via a link from the map on the Websites or in Mobile Applications.
3. RECIPIENTS OF PERSONAL DATA
As part of processing your personal data, we may share data with third parties if they help us provide our services or if we are legally obliged to share such data. Recipients of personal data include:
• Members of our company team;
• Companies providing storage and email services;
• Providers of legal, accounting, and tax services;
• Government authorities and institutions to the extent we are legally required to disclose information;
• The public, if you are a Salona Pro User, Salona Jobs – Worker, or Employer User and your data is published on the website or used for marketing purposes;
• The public, if you are a Salona User who posted a review;
• SumUp Ltd.;
• DigitalOcean, LLC, which provides our server services. The company is registered in the Data Privacy Framework;
• Google Ireland Limited, which provides storage and analytics tools. If data is transferred to Google LLC, it is registered under the Data Privacy Framework;
• Mango Technologies, Inc., provider of our work tracking tools;
• Mapbox, Inc., which provides map display functionality on the Websites or in Mobile Applications;
• Meta Platforms Ireland Limited, which provides analytics and marketing tools. If data is transferred to Meta Platforms, Inc., it is registered in the Data Privacy Framework.
We do not transfer your personal data outside the European Economic Area or to international organizations. If such transfer were to occur, it would only be done if the third country ensures adequate data protection as determined by the European Commission, or if the relevant data controllers/processors adopt additional safeguards (such as Binding Corporate Rules or Standard Contractual Clauses).
To make your use of Salona as convenient and efficient as possible, we use some modern technologies that help us especially in checking entered data, simplifying communication, or technically improving our features.
During these processes, automated processing of some data may occur. All processing is carried out securely, in accordance with applicable legal regulations and exclusively for fulfilling the described purposes. If we use third-party tools, we cooperate exclusively with trustworthy partners who meet high standards of personal data protection. Your data is not used for any other purposes, such as training models without your consent.
4. YOUR RIGHTS
Under the GDPR, you have certain rights with regard to your personal data. If you have any questions or complaints about the processing of your data, or if you wish to exercise any of the rights listed below, you can contact us via email at [email protected].
We will process your request without undue delay, and in any case within one month of receipt. Given the complexity or volume of requests, this period may be extended by an additional two months. If so, we will notify you in advance, including the reason for the extension.
Right of Access
You have the right to obtain confirmation from us as to whether or not we are processing your personal data.
If we do process your personal data, you have the right to access that data and ask us to tell you the purpose of the processing, which categories of data we process about you and what the sources of the data are, who the recipients of the personal data are and for how long the processing takes place.
We will also inform you of your right to rectification, withdrawal of consent, erasure, portability, restriction of processing, objection to processing and the right to lodge a complaint with a supervisory authority. However, all this information is already provided in this Privacy Policy.
Right to Withdraw Consent
If we process your data based on your consent, you have the right to withdraw it at any time. Withdrawal does not affect the legality of processing before withdrawal.
Right to Rectification
You have the right to request correction of inaccurate personal data concerning you. Depending on the specific purpose of the processing, you may also have the right to have incomplete personal data completed, including by providing an additional declaration.
Right to Erasure ("Right to be Forgotten")
As part of exercising your rights, you can also ask us to delete your personal data. We will comply with such a request if:
• we no longer need your personal data for the purposes for which it was collected or processed;
• you withdraw the consent on the basis of which we processed the personal data and we have no other reason for processing the data;
• you object to processing and there are no overriding reasons for processing; or you object to processing for direct marketing purposes;
• we have processed your data unlawfully.
Right to Restriction of Processing
You may request restriction of processing of your personal data if:
• you contest the accuracy of your personal data (in which case we will restrict processing until the accuracy of the personal data has been verified);
• the processing would be unlawful and you request restriction of processing instead of erasure;
• we no longer need your personal data for the purposes described above but you require it for the establishment, exercise or defence of legal claims;
• you have objected to the processing of the data (in which case we will restrict processing until we have verified that our legitimate interests in processing outweigh your legitimate interests).
Right to Data Portability
Where we process your personal data by automated means, you have the right to obtain from us the personal data relating to you in a structured, commonly used and machine-readable format and to request that we transfer that data to another controller. We may restrict the exercise of this right so as not to prejudice the rights and freedoms of others.
Right to Object
If we process your personal data on the basis of our legitimate interest, you have the right to object to this processing. Upon objection, we will no longer process your personal data if we do not have sufficient grounds for processing, establishing, exercising or defending legal claims or if we process the data for direct marketing purposes.
Right to File a Complaint
In addition to exercising the above rights with us, you can also file a complaint with the relevant supervisory authority, which is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů) located at Pplk. Sochora 27, 170 00 Prague 7, Czech Republic.
5. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy if changes occur in how we process your personal data. The current version will always be available on our Website.