Data controller

The data controller is PLACEHOLDER Ellen Estetica S.r.l., registered at PLACEHOLDER Via Roma 1, PLACEHOLDER 20100 Milan, Italy, VAT PLACEHOLDER IT00000000000. For any request about your data, write to PLACEHOLDER info@ellenestetica.it.

What data we collect

From the contact and booking forms we collect your name, email address, phone number and the content of your message, plus any treatment and date you indicate.

At your first appointment we collect the information about your skin and health needed to carry out the treatment safely. This is health data: we process it only with your explicit consent and keep it separately.

This site uses no profiling cookies and no third-party analytics. Fonts are hosted on our own servers: your browser does not contact external servers to load them.

Why we process it

To answer your enquiries and manage appointments (pre-contractual and contractual measures, Art. 6.1.b GDPR).

To meet the tax and administrative obligations attached to the services provided (Art. 6.1.c GDPR).

For health data, solely on the basis of your explicit consent (Art. 9.2.a GDPR), which you can withdraw at any time.

How long we keep it

Messages received through the forms are kept for PLACEHOLDER 24 months after the last contact. Accounting records are kept for ten years, as required by law. Client records containing health information are kept while the relationship is active and for PLACEHOLDER 5 years after the last appointment, then destroyed.

Who we share it with

Data is never sold or handed to third parties. It may be processed on our behalf, under a data processing agreement, by our email provider, our website hosting provider and the firm handling our accounts: PLACEHOLDER list the actual providers here.

Your rights

You may at any time request access to your data, rectification, erasure, restriction of processing, portability and objection, and withdraw any consent given. Simply write to the address above: we reply within thirty days.

If you believe the processing breaches the Regulation, you may lodge a complaint with the Italian data protection authority (www.garanteprivacy.it).