1. Data Controller and Contact Information
ONDA Estetica Oy (Business ID 3415756-7)
Lönnrotinkatu 33-35, 00180 Helsinki
Data Protection Inquiries: info@ondahelsinki.fi

2. Purposes and Legal Bases for the Processing of Personal Data
We process personal data for the following purposes: receiving, confirming, and managing appointments, as well as managing customer relationships (legal basis: contract and its preparation):
– providing customer service and communicating regarding matters related to appointments (legal basis: contract, legitimate interest)
– ensuring the operation, security, and development of the website (legal basis: legitimate interest)
– tracking website visitors and measuring the effectiveness of advertising (basis: consent, which you provide via the cookie banner)
– fulfilling legal obligations, such as accounting (basis: legal obligation)

3. Data Processed and Its Sources
When you make an appointment, we collect your name, phone number, email address, and appointment details (service, time, hairstylist). We obtain this information directly from you through the appointment scheduling system.
We use cookies to collect information about your use of the website—such as the pages you view, device and browser information, and your approximate location—but only with your consent. This information is obtained from your browser.

4. Recipients and Processors of Data
We use service providers who process data on our behalf:
– Slotti (appointment scheduling system)
– WordPress.com / Automattic (website maintenance and hosting)
– Google (Google Analytics, Google Tag Manager, and Google Ads: visitor tracking and ad measurement, only with your consent)
– Weglot (website translations)
– Trustindex (Google reviews on the site)

We do not sell personal information. Information may be disclosed to authorities if required by law.

5. Data Retention Period
We retain data only for as long as necessary for the purposes mentioned above or for the period required by law; for example, accounting records are retained for the period required by law. Website traffic data is retained for the period specified in the settings of the services we use.

6. Transfer of Data Outside the EU and EEA
Some of our service providers (such as Google and Automattic) may process data outside the EU or EEA. Such transfers are subject to safeguards required by law, such as the European Commission’s Standard Contractual Clauses or the EU-U.S. Privacy Shield Framework.

7. Required Information
To make a reservation, you must provide your name and contact information. If you do not provide this information, we cannot accept your reservation. Accepting cookies is optional, and you can use the site without tracking and advertising cookies.

8. Data Security
Data is protected through technical and organizational measures, such as encrypted SSL connections, access restrictions, and trusted service providers.

9. Your Rights
You have the right to
– check what information we have about you
– request that your information be corrected or deleted
– restrict or object to the processing of your information
– transfer your data to another service provider when processing is based on consent or a contract
– withdraw your consent at any time

You can exercise your rights by contacting us at info@ondahelsinki.fi. You also have the right to file a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi).

10. Cookies
Our website uses essential cookies to ensure the site functions properly. In addition, with your consent, we use analytics and advertising cookies (Google Analytics and Google Ads) to track visitor numbers and measure the effectiveness of our advertising. You can accept or reject cookies via the cookie banner that appears on the site and change your selection at any time by clearing your browser’s cookies, at which point the banner will reappear.

11. Changes
We may update this statement as needed. The most current version is always available on this page.