PRIVACY POLICY
Last updated: [10/07/2026]
1. Data Controller
The Data Controller responsible for processing personal data collected through this website is:
Valentina Zandonà
Company name: SKIN DESIGN
VAT number: NL005291968B40
Registered office: Limburglaan 1 5616HR Eindhoven
Email address: aurastudio@outlook.it
The Data Controller processes personal data in accordance with Regulation (EU) 2016/679 ("General Data Protection Regulation" or "GDPR") and applicable national data protection legislation.
2. Types of Personal Data Processed
When users visit this website or use its services, the following categories of personal data may be processed.
Personal data voluntarily provided by users
Through contact forms available on the website, users may provide:
- name and surname;
- email address;
- telephone number;
- information contained in the message sent through the contact form.
These data are voluntarily provided by the user and are processed exclusively to respond to requests and provide information about the services offered.
Browsing data
During normal operation, the website systems automatically collect certain technical information, including:
- IP address;
- browser type;
- operating system;
- date and time of access;
- pages visited and technical information related to navigation.
This information may be processed to ensure website security, prevent abuse, and maintain correct website functionality.
3. Purpose of Processing
Personal data are processed for the following purposes:
- managing requests submitted through contact forms;
- providing information about treatments and services;
- managing customer communications;
- allowing users to request appointments;
- maintaining and improving website functionality;
- ensuring website security;
- analysing website performance;
- carrying out marketing activities and measuring advertising effectiveness, only after user consent.
4. Legal Basis for Processing
The processing of personal data is based on the following legal grounds:
- the user's consent;
- the performance of pre-contractual measures requested by the user;
- compliance with legal obligations;
- the legitimate interest of the Data Controller in ensuring website security and efficient service management.
5. Contact Forms – Formidable Forms
This website uses Formidable Forms for managing contact requests.
Information submitted through the contact forms may include personal data such as name, email address, telephone number, and message content.
The data may be stored within the website management system and/or forwarded by email to the Data Controller in order to process and respond to the user's request.
Personal data collected through contact forms will not be used for other purposes without additional consent.
6. Online Booking Service – Salonized
This website provides users with the possibility to book treatments through a dedicated booking button connected to the external booking platform provided by Salonized.
The booking button redirects users to the Salonized platform, where the appointment booking process is completed.
The website does not directly request or store the personal data entered during the booking procedure.
Any personal data provided during the booking process (such as name, email address, telephone number, appointment details, or other information required to manage the booking) are collected and processed by Salonized according to its own privacy policy and terms of service.
Users are encouraged to review Salonized's privacy information before completing a booking.
7. Health-Related Information and Anamnesis Forms
For certain treatments, customers may be requested to complete an anamnesis questionnaire before receiving the service.
Such questionnaires may contain information relating to the user's health condition, contraindications, physical conditions, or other information necessary to provide treatments safely and appropriately.
Health-related information is considered a special category of personal data under Article 9 of the GDPR.
This information is processed only where necessary, with the user's explicit consent, and exclusively for the purpose of providing safe and suitable treatments.
8. Cookies and Tracking Technologies
This website uses cookies and similar technologies to ensure website functionality, improve user experience, analyse website traffic, and measure marketing activities.
Cookie management is handled through a consent management platform (Cookie Controller) that allows users to choose which categories of cookies they wish to accept.
Non-essential cookies, including analytics and marketing cookies, are activated only after the user's consent has been provided.
For further information regarding cookies used on this website, please consult the dedicated Cookie Policy.
9. Meta Pixel
This website may use Meta Pixel, a service provided by Meta Platforms, to:
- measure the effectiveness of advertising campaigns;
- analyse user interactions with the website;
- create statistics about website visits;
- improve advertising relevance.
Meta Pixel is activated only after the user has given explicit consent through the cookie management system.
10. Website Management and Technical Services
The website is based on the WordPress content management system.
Technical tools and plugins may be used for website management, security, optimisation, and search engine visibility, including Yoast SEO.
These tools may process technical data necessary for the correct operation, security, and optimisation of the website.
11. Products and Gift Cards
The website may contain information regarding products, services, or gift cards offered by the business.
If purchases or requests are managed through external platforms, the processing of personal data will be carried out according to the privacy policies of the relevant service providers.
12. Data Retention
Personal data are stored only for the period necessary to achieve the purposes for which they were collected.
In particular:
- contact request data are stored for the time necessary to manage and respond to the request;
- customer-related information is stored according to operational and legal requirements;
- data processed based on consent are stored until consent is withdrawn or according to applicable regulations.
13. Data Recipients
Personal data may be shared with third-party providers that support the Data Controller in managing the website and providing services.
These parties may include:
- website hosting providers;
- technical service providers;
- booking management platforms;
- marketing and analytics service providers.
Where required by GDPR, such providers act as Data Processors pursuant to Article 28.
Personal data will not be sold or publicly disclosed.
14. Transfer of Data Outside the European Economic Area
Some third-party services used by this website may involve processing or transferring personal data outside the European Economic Area.
Where such transfers occur, they are carried out in compliance with GDPR requirements and appropriate safeguards are adopted to protect personal data.
15. Data Security
The Data Controller adopts appropriate technical and organisational measures to protect personal data against:
- unauthorised access;
- loss;
- alteration;
- disclosure or unlawful processing.
16. User Rights
Users may exercise the rights provided by Articles 15–22 of the GDPR, including:
- the right to obtain confirmation of whether personal data are being processed;
- the right to access personal data;
- the right to request correction or deletion;
- the right to request restriction of processing;
- the right to object to processing;
- the right to data portability where applicable;
- the right to withdraw consent at any time.
Requests regarding privacy rights may be sent to:
Users also have the right to lodge a complaint with the competent Data Protection Authority.
17. Changes to This Privacy Policy
The Data Controller reserves the right to update this Privacy Policy at any time.
Users are encouraged to periodically review this page to remain informed about any changes.