Who we are and what this policy covers
Koralena is a hair and beauty salon at Autotehtaankatu 14, 23500 Uusikaupunki, Finland. We are the data controller for the personal information you give us when you book an appointment, buy a gift voucher, sign up for our newsletter or simply send us a message. Business ID 3185742-9.
This policy explains what we collect, why we need it and how long we hold on to it. It covers our website at koralena.com and everything we do in the salon. If anything here is unclear, write to us at koralena@hotmail.com and we will explain it in plain language.
What data we collect
We only ask for what we actually need to run your appointment and keep our records straight.
- Your name, phone number and email address, so we can confirm bookings and reach you if a stylist is ill.
- Appointment history, including the colour formulas we mixed for you, so the next visit starts where the last one ended.
- Notes about allergies, scalp sensitivity or patch test results you have told us about.
- Payment details handled by our card terminal and bank. We do not store card numbers ourselves.
- Basic website data such as pages viewed and browser type, described in more detail in our cookie policy.
Why we use your data and the legal basis
Under the GDPR we must have a lawful reason for every use of your data. Here is ours, in plain terms.
- Contract: your name, contact details and appointment details, because we cannot deliver a booked service without them.
- Legal obligation: payment and accounting records, which Finnish bookkeeping law requires us to keep.
- Legitimate interest: appointment reminders and the notes that help us give you consistent colour work.
- Consent: our newsletter and any marketing message. You can withdraw consent at any time and we stop immediately.
How long we keep it and who sees it
Appointment and payment records are kept for six years, which is the period Finnish accounting rules set for us. Colour formulas and client notes stay on file while you remain a client, and are deleted three years after your last visit. Newsletter details are kept until you unsubscribe.
We share data only where it is necessary to run the business. Our booking system and email provider store data on servers inside the EU. Our accountant sees invoices, and our card terminal provider processes payments under its own agreement with us. We never sell your data and we do not send it outside the European Economic Area.
Your rights under the GDPR
You have the right to ask what we hold about you, to have mistakes corrected, to have your data erased when we no longer need it, to restrict or object to certain processing, and to receive your data in a portable format. Where we rely on consent, you can take that consent back at any time.
Send any request to koralena@hotmail.com or call +358 40 592 1837. We answer within one month. If you think we have handled your data badly, you can complain to the Finnish Data Protection Ombudsman (tietosuojavaltuutetun toimisto), though we would rather hear from you first so we can put it right.
Changes to this policy
We update this page when our tools or the law change. The current version is always published here. Material changes that affect how we use your data will be mentioned at your next appointment or by email if you have asked to hear from us.