INFORMATION OBLIGATION FOR CLIENTS

We would like to inform you that we process your personal data - see below for details:

Personal Data Controller

The Controller of the personal data which you provide shall be:

Booksy Inc., 515 North State Street, Suite 460, Chicago, Illinois, 60654 (Booksy);

Data Controller contact details

You can contact us regarding you personal data in one of the following ways:

  1. by phone at: +44 (0) 1323 700057;
  2. via email: gdpr.gb@booksy.com;
  3. by post, to the following address: Booksy Inc., 515 North State Street, Suite 460, Chicago, Illinois, 60654;
  4. via the electronic form on the website: https://booksy.com/en-gb/p/contact.

Booksy Data Protection Officer contact details

We have appointed a person responsible for data protection, i.e. a Data Protection Officer, who can be contacted in one of the following ways:

  1. via email: gdpr.gb@booksy.com;
  2. by post, to the following address: Booksy Inc., 515 North State Street, Suite 460, Chicago, Illinois, 60654.

Scope of personal data processing

In order for you to register an account on Booksy and to be able to fully use the features of the system, we will process the following categories of your personal data:

  1. Name and surname,
  2. Email address,
  3. Phone number,
  4. Address,
  5. Device IP;
  6. Date of birth,
  7. Your photo,
  8. Your gender.

Aims and legal basis of data processing

We process your personal data for the following purposes:

  1. to conclude and perform a contract for the use of Booksy in order to enable you to use the services of entities cooperating with Booksy ("Partners"), in particular by providing your personal data to a Partner when you request to book the Partner’s services using the Booksy application - such processing of your personal data is necessary for the performance of the contract (Art. 6(1)(b) GDPR);
  2. marketing of Booksy's products or services (excluding direct marketing) - the processing of your personal data for this purpose will be carried out in pursuit of Booksy's legitimate interest (Art. 6(1)(f) GDPR), which is to be able to market our own products and services;
  3. direct marketing of Booksy products or services - such processing of your personal data is necessary for the legitimate interest of Booksy (Art. 6(1)(f) GDPR), which is the possibility of marketing our own products and services, consisting of direct communication with you for the purpose of advertising and promoting Booksy services;
  4. profiling/grouping (i.e. conducting analyses, which may also involve personal data, and grouping customers - in order to tailor our products or services and their marketing to your preferences, as well as to the preferences of specific customer groups identified by us) - the processing of your personal data for this purpose will take place in pursuit of our legitimate interest (Art. 6(1)(f) GDPR);
  5. to research preferences regarding the demand for Booksy or Partners' services (e.g. via phone, text message or email surveys) - which is necessary to fulfil Booksy's legitimate interest (Article 6(1)(f) GDPR), which is the possibility to determine the catalogue of products and services of interest to customers and their level of satisfaction with Booksy or Partners' services;
  6. to establish, assert or defend against claims related to the concluded contract or to the processing of your personal data - the processing of your personal data in this regard is necessary to pursue the legitimate interest of Booksy (Art. 6(1)(f) GDPR), which is the possibility to establish, assert or defend against possible claims;
  7. to fulfil Booksy's legal obligations under the relevant legislation - the processing of your personal data in this case is necessary to fulfil the legal requirements to which Booksy is subject (Art. 6(1)(c) GDPR);
  8. to create compilations, analyses, statistics for Booksy's internal needs (including reporting, service development planning, development work in the Booksy system, creating statistical models) - such processing of your personal data is necessary for the fulfilment of Booksy's legitimate interests (Art. 6(1)(f) GDPR), which is the analysis and development of the business;
  9. implementing or developing new solutions/features of the Booksy systems/applications (developing application features, testing new solutions, analysing types of new features needed, creating analytical tools/reports, etc.). - such processing of your personal data is necessary to pursue the legitimate interest of Booksy (Art. 6(1)(f) GDPR), which is to develop and ensure the safe operation of Booksy systems/applications;
  10. for the purpose of responding to your message and communicating with you when you send us a message - such processing of your personal data is necessary for the legitimate interests of Booksy (Article 6(1)(f) GDPR), which is to be able to respond to your message and communicate with you.

If you have been added to the Family & Friends network of another Booksy customer in their Booksy application within the "Family & Friends" feature of the Booksy application, we process your personal data for the following purposes:

  1. to establish, investigate or defend against claims related to the processing of your personal data in order to enable you to use the services of Partners within the "Family & Friends" feature of the Booksy application - such processing of your personal data is necessary to pursue the legitimate interest of Booksy (Art. 6(1)(f) GDPR), which is the right to defend against possible claims relating to your use of the "Family & Friends" feature;
  2. to share your personal data with a Partner within the "Family & Friends" feature of the Booksy application - in the case when another Booksy customer has added you to their Family & Friends network by providing only your name and surname and you do not have an account in the Booksy application but would like to use the "Family & Friends'' feature of the Booksy application, including using the services of Partners - such processing of your personal data is necessary to pursue the legitimate interest of Booksy (Art. 6(1)(f) GDPR), which is the right to defend against possible claims related to your use of the "Family & Friends" feature of the Booksy application;
  3. performance of the contract for the use of the Booksy service, i.e. the "Family & Friends" feature of the Booksy application, in particular by making your personal data available to the person who has added you to their Family & Friends network in their Booksy application within the "Family & Friends" feature of the Booksy application and who has an account in the Booksy application - if you have an account in the Booksy application, such processing of your personal data is necessary for the performance of the contract (Art. 6(1)(b) GDPR);

If you add another person to your Family & Friends network in your Booksy application within the "Family & Friends" feature of the Booksy application, we process your personal data for the following purpose:

  1. performance of the contract for the use of Booksy, i.e. the "Family & Friends" feature of the Booksy application, in particular by making your personal data available to the person whom you have added to your Family & Friends network in your Booksy application within the Booksy "Family & Friends" feature and who has an account in the Booksy application - such processing of your personal data is necessary for the performance of the contract (Art. 6 (1)(b) GDPR).

Source of personal data

If you have been added to the Family & Friends network of another Booksy customer in their Booksy application within the "Family & Friends" feature of the Booksy application, your personal data has been provided to Booksy by the person who added you to their Family & Friends network in their Booksy application within the "Family & Friends" feature of the Booksy application.

Processing of data by Partners

If you decide to use the services of entities cooperating with Booksy (Partners) and book an appointment/service with a Partner through the Booksy website, Booksy - in order to perform the contract concluded with you for the use of the Booksy website - will make your data available to the respective Partner to the extent necessary for them to provide the service you have chosen. The Partner will then process your data as a separate controller for the purpose of fulfilling the contract concluded with you for the provision of the service of your choice and will itself be responsible in this respect.

You may also grant the Partner separate consent to process your data for other purposes. The Partner will also be able to use the tools provided by Booksy for their own purposes (e.g. marketing). In such a case, Booksy will, on behalf of the Partner, send you marketing communication, recommendations and information about promotions.

Profiling/grouping

Please be advised that we perform profiling/grouping of customers in order to provide our services and to target advertising, reminders, recommendations and promotions as closely as possible to their and your preferences. Such profiling/grouping may be done on the basis of the following data:

  1. activity on the website and in the Booksy application;
  2. geolocation;
  3. gender;
  4. time of using the Booksy services;
  5. time of last activity on the website or in the Booksy application;
  6. analysis of photos that customers have liked in Booksy.

In doing so, we would like to clarify that Booksy does not use intrusive profiling and tracking practices for marketing or advertising purposes.

You can object to such processing of your personal data by emailing us at: gdpr.gb@booksy.com, calling us at: +44 (0) 1323 700057 or by contacting us via the electronic form available at: https://booksy.com/en-gb/p/contact.

Categories of recipients of personal data

The recipients of your personal data may be:

  1. Partners;
  2. companies from the capital group Booksy is part of;
  3. entities authorised by law;
  4. entities that provide accounting, IT, marketing, communication and analytical, legal and debt collection services;
  5. Booksy’s subcontractors and other entities with whom Booksy cooperates.

We confirm that all entities to which we transfer your personal information provide at least the same level of protection for your personal information as set out in this privacy policy and as required by Apple Inc.

Transfer of data outside the European Economic Area

Your data will not be transferred to entities based outside the European Economic Area.

Period of data storage

We will process your data:

  1. for the conclusion and performance of the contract - until the contract is terminated or expires, and then until the end of the limitation period for claims;
  2. for marketing of products or services (except direct marketing) - until the termination or expiry of the contract or until you object to the processing of your data for this purpose;
  3. for direct marketing of Booksy products or services - until the termination or expiry of the contract or until you object to the processing of your data for this purpose;
  4. for profiling/grouping purposes - until the termination or expiry of the contract or until you object to processing for that purpose;
  5. for research into preferences in terms of demand for services - until the termination or expiry of the contract or until you object to processing for that purpose;
  6. for the purpose of establishing, investigating or defending against claims - until the end of the limitation period for claims;
  7. to comply with legal obligations - until the expiry of legal data storage obligations;
  8. in order to produce compilations, analyses, statistics for internal needs - for the duration of the agreement and then until the end of the limitation period for claims arising from the agreement or until an objection is raised to data processing for this purpose;
  9. for the purpose of implementing or developing new solutions/features of Booksy systems/applications - until the termination or expiration of the contract or until you object to data processing for this purpose;
  10. for the purpose of responding to your message and communicating with you when you send us a message - for the duration of the period of communication and then until the end of the limitation period for claims.

Your rights

In accordance with GDPR, you have the right to:

  1. access your data and receive a copy of it;
  2. rectify (amend, complete) your data;
  3. have your data erased or data processing restricted;
  4. transfer your data; in order to exercise the above rights, you can contact Booksy: via email: gdpr.gb@booksy.com, phone: +44 (0) 1323 700057, via the electronic form available at: https://booksy.com/en-gb/p/contact.
  5. file a complaint to the supervisory authority - the Information Commissioner's Office (ICO).

Right to withdraw consent

You can withdraw your consent to the processing of your personal data at any time - this only applies to the processing of data that Booksy will process on the basis of the consent you have given. To do this, you can send us an email: gdpr.gb@booksy.com, call us: +44 (0) 1323 700057 or contact us via the electronic form available at: https://booksy.com/en-gb/p/contact.

The withdrawal of consent will not affect the lawfulness of data processing prior to the withdrawal of consent.

If you use the Booksy application, you can check which consents you have given at any time and you can edit them by going to "Profile" > "Your Privacy" tab in the Booksy application.

Right to object

You may object to the processing of your personal data by Booksy with regard to the processing for Booksy’s legitimate interest (art. 6 (1)(f) GDPR). To do this, you can send us an email: gdpr.gb@booksy.com, call us: +44 (0) 1323 700057 or contact us via the electronic form available at:https://booksy.com/en-gb/p/contact.

In such a case, Booksy will no longer be permitted to process your personal data unless Booksy demonstrates valid legitimate grounds for the processing which override your interests, rights and freedoms, or grounds for establishing, asserting or defending claims.

If you object to the processing for direct marketing purposes - in any case Booksy will stop processing your personal data for this purpose.

Right to erasure

You have the right to request to have your personal data erased from the Booksy website at any time by sending a request to have your personal data erased to: gdpr.gb@booksy.com.

If you use the Booksy application on a device with the iOS system you can delete your account by going to "Profile" > "Account Details" tab and clicking on the "Delete my account" button. By deleting your account in the Booksy application, you also erase your personal data from the Booksy application.

Information about the requirement or the voluntariness of the provision of data and the consequences of failing to provide it

The provision of your personal data is voluntary, but necessary for the conclusion and performance of the contract, for the use of the Booksy service and for the fulfilment of the other aforementioned purposes.

You can check or edit your personal data that you have provided to us at any time by going to the "Profile" > "Account Details" tab in the Booksy application.

Last update: December 06, 2023