Privacy Policy

1. Controller

Skinique Finland (sole trader), Business ID 3617085-3, Elsankuja 2 J, 02230 Espoo, Finland. Email: [email protected]. Phone: +358 45 844 8066.

2. Personal data we collect

Contact and booking data: name, phone number, email address, booked service, date and time, visit history.

Data needed for a treatment: information about skin condition, allergies, pregnancy or contraindications is recorded only when the treatment requires it.

Before/after photos: only if the client has given consent.

Payment and invoicing data as required by law.

Technical website data and data stored in your browser (see section 8).

3. Purposes and legal bases

Booking, delivering treatments and managing the client relationship: contract (GDPR Art. 6(1)(b)).

Accounting and invoicing: legal obligation (6(1)(c)).

Health-related data: explicit consent (9(2)(a)).

Before/after photos and their publication: consent (6(1)(a)), which you can withdraw at any time.

Website visitor analytics: consent (6(1)(a)).

Running and securing the website: legitimate interest (6(1)(f)).

We do not currently send newsletters or other marketing messages. If we start, we will ask for separate consent.

4. Where the data comes from

Mainly from you, when you book and visit.

5. Recipients and service providers

Altegio Europe Kft. (Hungary): booking system and client register (processor). According to Altegio, data is processed within the EU (Germany).

Timma: if you book through Timma, Timma processes your data as an independent controller under its own terms.

Cloudflare, Inc.: website hosting and security. Cloudflare processes the visitor's IP address and technical browser data to deliver the pages.

Google: the map on the contact page (Google Maps).

Google Ireland Ltd: visitor analytics (Google Analytics 4 through Google Tag Manager), only with your consent. Data may be transferred to the United States under the EU-US Data Privacy Framework.

Microsoft Ireland Operations Ltd: Microsoft Clarity visitor analytics, only with your consent. Clarity records anonymously how the page is used (clicks, scrolling, movement on the page). The content of forms, the chat and the consultation form is masked. Data may be transferred to the United States under the Data Privacy Framework.

Our accountant and authorities where the law requires.

We do not sell personal data.

The booking form on this website: your name, phone number, e-mail and comment are passed through Cloudflare directly to Altegio to make the booking and send reminders. The website itself does not store them.

Deni, the site chat assistant: questions are stored without your name (phone numbers and e-mails are masked) in Cloudflare for 90 days to improve the answers. If you message Deniza through the chat, the message is passed to her via Telegram (Telegram Messenger Inc.) and the conversation is kept in Cloudflare for 2 days. Please do not write health details or other personal data in the chat.

The consultation form: your answers are saved only in your own browser. They reach Skinique only when you send them yourself from your e-mail program to [email protected] (Google Gmail). Health details in the form are processed with your explicit consent (9(2)(a)) and only to plan your treatment.

6. Transfers outside the EU/EEA

Some providers may process data outside the EU/EEA. Transfers rely on the European Commission's standard contractual clauses or another transfer mechanism under the GDPR.

7. Retention

Client data is kept for the duration of the client relationship and up to 5 years after the last visit. Accounting records are kept as required by the Finnish Accounting Act, usually 6 years. Photos are kept until consent is withdrawn.

8. Cookies and browser storage

Analytics (Google Analytics 4 and Microsoft Clarity) loads only if you accept it in the notice at the bottom of the page. These tools set cookies (for example _ga, _clck, _clsk) that are kept for up to 13 months. If you choose only necessary, no analytics loads at all. The site uses no advertising cookies. You can change your choice any time with the Cookie settings link at the bottom of the page. Your choice is stored in your browser.

The site stores in your own browser (localStorage) only what it needs to work: saved and compared services, recently viewed pages, unfinished answers of the skin analysis and the consultation form, and a random chat session ID. This data does not leave your browser, except the session ID, which is attached to questions you ask in the chat, and you can delete it in your browser settings.

The map on the contact page loads with the page so you can see the location at once. This sends the visitor's IP address to Google (legitimate interest, 6(1)(f)). The Instagram and Facebook feeds load only when you press the button.

9. Your rights

You have the right to access, correct and erase your data, restrict processing, data portability, object to processing and withdraw consent. Send requests to [email protected]. We reply within one month.

10. Complaints

You can complain to the Finnish Data Protection Ombudsman: tietosuoja.fi.

11. Changes

We update this policy when needed. The latest version is always on this page.