Privacy Policy

1. Data Controller

Kolonaki Laser & Beauty Salon operates as the Data Controller responsible for the processing of your personal data when you visit our salon, contact us, or schedule an appointment.

2. Data We Collect

We strictly collect personal data necessary to provide safe, medical-grade aesthetic treatments and manage appointment scheduling:

• Identification & Contact Details: Full name, telephone number, email address, and preferred contact language.
• Clinical Consultation History: Skin type (Fitzpatrick assessment), relevant medical history, contraindications, and treatment records required for laser parameter calibration.
• Communication Records: Enquiries submitted via email or telephone regarding treatment courses and appointments.

3. Purpose & Legal Basis of Processing

Your personal data is processed under the following legal bases pursuant to Article 6 and Article 9 of the GDPR:

• Provision of Aesthetic Services (Performance of Contract): To conduct digital skin analyses, perform laser hair removal, pigmentation therapy, and facial treatments under certified safety protocols.
• Client Health & Safety (Legal & Clinical Duty): Assessing skin suitability, recording patch test results, and maintaining clinical safety logs prior to medical-grade laser application.
• Legitimate Interest: Managing appointment schedules, responding to client queries, and ensuring studio operational security.

4. Data Retention & Confidentiality

All client treatment records are maintained under strict confidentiality. We retain personal and clinical consultation data only for as long as required to fulfill treatment protocols or comply with Greek statutory medical record guidelines (typically up to 5 years following your last visit).

We do not sell, rent, or trade your personal data to third parties under any circumstances.

5. Your GDPR Rights

As a data subject located in the European Union, you hold the following rights regarding your personal information:

• Right of Access: Request a copy of your personal data and clinical treatment records.
• Right to Rectification: Request correction of inaccurate or incomplete contact or health information.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data where processing is no longer required by law.
• Right to Restrict Processing: Request temporary restriction of data processing during disputes or inquiries.

To exercise any of your rights, please submit a written request to info@kolonakilaserbeautysalon.gr.

6. Cookies & Third-Party Services

Our website is hosted statically with self-hosted privacy-preserving assets. We do not set non-essential tracking cookies or transfer visitor IP addresses to external ad networks.