Privacy Policy
Version: 16 August 2026
1. Controller for Salonza's own processing
Ludusan Denis-Lucian, Senefeldergasse 11/3a, 1100 Wien, Austria · contact@salonza.at.
2. Salon accounts
For salon owners we process account and business details, login/security data, settings, subscription/payment records, legal acceptances, support communications and activity necessary to operate and secure the account. The legal bases depend on the purpose and include performance/preparation of the business contract, legal obligations and legitimate interests in operating and securing the service.
3. Appointment/customer data
When a person books with a salon, Salonza processes the details entered for that booking (for example name, email, phone, service, appointment time, note and status). For these salon-customer booking records, the salon generally determines the purpose and acts as controller; Salonza processes them as processor to provide the booking service. Details are disclosed to the booked salon and, where selected, its assigned authorised team member.
4. Team members
Salon owners may store employee/team names, work schedules, service assignments, time off, work email and optional login/notification settings. Salonza processes these records to provide team scheduling, booking assignment and account access.
5. Emails and push notifications
Transactional emails may be sent for account verification, password recovery, appointment confirmations/changes, reminders, billing and service messages. Browser push is offered only to salon owners and authorised team members and is enabled only on devices where that person grants browser permission. Salon appointment customers do not receive browser push notifications from Salonza.
6. Cookies and local storage
Technically necessary cookies are used for sessions, login/security, language and requested preferences. Appointment contact details are remembered on a device only when the customer chooses the “remember my details” option. Analytics is not loaded until analytics consent is given.
7. Analytics / Histats
Salonza can use Histats for website statistics only after the visitor gives analytics consent through the cookie banner. Rejecting analytics does not prevent use of Salonza. The decision is stored locally so the banner does not need to be shown on every page. Consent can be changed at any time using the cookie settings control below.
8. Abuse prevention and security
To prevent booking spam and automated abuse, Salonza may temporarily count booking attempts using privacy-protective hashes derived from IP address and booking identity. The dedicated abuse log stores hashes rather than the raw IP/email/phone. Suspicious repeated activity can trigger a local human check or temporary booking block. Security and server logs may separately contain technical request information for a limited period where necessary for security and troubleshooting.
9. Referral attribution
If a salon registers through a partner/referral link, or Salonza manually assigns the salon to a partner after a direct introduction, Salonza stores that attribution on the salon business account so commissions can be calculated. An authenticated referral partner dashboard may show the attributed salon name, registration/subscription/payment status and the partner's own revenue/commission/payout figures. Referral partners do not receive appointment-customer names, contact details, appointment notes or other customer booking records through this dashboard. The referral code identifies the sales partner, not the salon's appointment customers.
10. Payments and invoices
Where payment functions are used, Salonza processes payment-related data such as payment requests, references, statuses and invoice records. External payment providers, if used, are identified in the applicable privacy information or payment flow before data is transmitted to them.
11. Recipients and processors
Data may be processed by hosting, email and push infrastructure providers where required to operate Salonza. The owner dashboard can request QR-code images from an external QR image service, and the admin referral area can open referral QR codes through the same type of external service; the booking URL and normal request metadata (such as IP address) can therefore be transmitted to that service. Access is limited to what is necessary. The salon itself receives its booking/customer information. Salonza does not sell these customer records and does not automatically use salon booking contact data for Salonza marketing or to advertise competing salons. Separate marketing use would require its own lawful basis and, where required, separate consent.
12. Retention
Account, booking and team data is kept while needed to provide the service and afterwards only as long as justified by legal obligations, claims, security or agreed return/deletion arrangements. Security/abuse records are kept for shorter operational periods where practical. Statutory accounting records are retained for the legally required period where such records exist.
13. Rights
Where Salonza is controller, data subjects may have rights of access, rectification, erasure, restriction, portability and objection, subject to the GDPR conditions. Consent can be withdrawn for the future. For appointment data controlled by a salon, requests should normally be directed to that salon; Salonza will assist the salon where required.
14. Complaints
You may contact the Austrian Data Protection Authority if you believe data protection law has been infringed. You can first contact Salonza at contact@salonza.at.