Under EU GDPR and the ePrivacy Directive, you have the right to choose which cookies you allow on this site. Essential cookies are required for core reservation functionality.

Last Updated: October 2026 | Compliant with EU Regulation 2016/679 (GDPR)

1. Data Controller

The data controller responsible for the processing of your personal data on this platform is Nexora appointment software. We take the privacy and confidentiality of your personal information with utmost seriousness in full compliance with the European General Data Protection Regulation (GDPR).

2. Personal Data We Collect

To schedule and manage your appointment, we collect the following minimum necessary personal details:

• Full Name: To identify you and personalize your service reservation.
• Email Address: To deliver booking confirmations, calendar invitations (.ics), reminder notices, and cancellation links.
• Phone Number: To contact you regarding your appointment schedule and urgent updates.
• Booking Details: Selected service, chosen specialist, appointment date, time, and payment method reference.

3. Legal Grounds for Processing (GDPR Art. 6)

• Performance of a Contract (Art. 6(1)(b)): Processing is necessary to execute the reservation contract between you and our service provider.
• Legal Obligation (Art. 6(1)(c)): Retaining transaction and booking records for statutory accounting and tax compliance.
• Explicit Consent (Art. 6(1)(a)): For non-essential cookies, calendar event export, and reminder communications.

4. Data Storage, Security & Retention

Your personal data is encrypted in transit using industry-standard TLS/SSL encryption and stored on secure servers located within the European Economic Area (EEA) or compliant jurisdictions. We retain your booking records strictly as long as necessary to fulfill the service and comply with legal retention requirements.

5. Third-Party Service Providers

We only share minimal necessary data with trusted service providers:

• Payment Processors (e.g., PayPal): For secure end-to-end payment processing without storing sensitive card credentials on our servers.
• Email Delivery Infrastructure: For transactional dispatch of your appointment details and calendar invites.

We never sell, rent, or trade your personal data to any third parties or advertisers.

6. Your Rights Under GDPR

As a data subject located in the European Union, you are entitled to the following rights under GDPR Chapter III:

• Right of Access (Art. 15): Request confirmation and a copy of your personal data held by us.
• Right to Rectification (Art. 16): Correct inaccurate or incomplete personal records.
• Right to Erasure / "Right to be Forgotten" (Art. 17): Request deletion of your data when no longer needed for lawful purposes.
• Right to Restriction of Processing (Art. 18): Restrict how your data is utilized in specific circumstances.
• Right to Data Portability (Art. 20): Receive your personal data in a structured, machine-readable format.
• Right to Withdraw Consent (Art. 7(3)): Withdraw your consent at any time without affecting lawful processing prior to withdrawal.
• Right to Lodge a Complaint: You have the right to file a complaint with your national Data Protection Authority (DPA).

7. How to Exercise Your Rights

To exercise any of your rights or request data erasure, please contact the site administrator via our official contact channels or reply directly to your booking confirmation email.