De Kroon · Den Haag
Privacy policy
Personal attention matters at De Kroon, including when we handle your information. This policy explains which data we use, why we use it and the choices you have.
Last updated:
Save this text (.txt)01Who is responsible?
Herenkapsalon De Kroon, Piet Heinstraat 81, 2518 CL Den Haag, the Netherlands, is responsible for personal data processing for our barbershop and website. In this policy, ‘we’ and ‘De Kroon’ refer to this barbershop.
You can contact us on +31 6 1648 1081 by telephone or WhatsApp. You can also write to De Kroon, attention: privacy, at the address above. No account is required to contact us or exercise your privacy rights.
02Contact, appointments and payments
When you call, message us or arrange an appointment in the salon, we use the information needed to help you. This may include your name, telephone number, message, appointment time and agreed treatment. WhatsApp may also display profile information you choose to share through that service.
We use appointment information to prepare and perform our agreement with you or take steps you request before entering into an agreement. Answering general enquiries and handling complaints is based on our legitimate interest in helping customers and improving our service, taking your privacy into account.
If a payment or invoice contains personal information, we use it to settle the payment and keep our accounts. Tax records are processed to comply with legal obligations. Our website does not offer online payments, customer accounts, contact forms or newsletter subscriptions.
Only provide information needed for your enquiry or appointment. Without sufficient contact or appointment details, we may be unable to call you back or confirm a booking. Do not send identity documents, payment card details or medical records through WhatsApp. Please discuss relevant treatment considerations in person.
03Website, hosting and cookies
Cloudflare hosts and delivers our website. Visiting it involves processing technical information to send pages to your device and secure the connection. This may include your IP address, requested page, date and time, browser information and information about errors or misuse.
Our legitimate interest is to provide an available, secure website. The website code does not use advertising pixels, visitor profiles or analytics tools such as Google Analytics. Your language preference is not saved in a cookie: the language follows the web address you visit.
Essential hosting features may use data or cookies for security. This does not constitute consent to advertising. External services such as Google Maps have their own processing activities; the following sections explain when you activate them.
04Google Maps: you choose whether to load it
The embedded map on our contact page is disabled by default. We connect to Google to display it only after you select ‘Load Google Maps’. By doing so, you choose to use this external map. Google receives information including your IP address and browser details and may use cookies or similar technologies. If you are signed in to Google, Google may associate information with your account.
You can close the map again to stop this page from loading it. Closing it does not undo data already received by Google. Our website does not remember this choice after a page reload. You can manage Google cookies through your browser or Google settings.
Our address and opening hours are available without loading Google Maps. Following a directions link or another Google link takes you away from our website, where Google’s privacy rules apply.
05WhatsApp and other external links
Our WhatsApp buttons are ordinary links: no WhatsApp chat widget loads on our website. Selecting a button opens WhatsApp, and you decide whether to send a message. You can call or visit us if you prefer not to use WhatsApp.
We use messages you send us to handle your enquiry or appointment. WhatsApp also processes information for its own service, including account, device and usage data, under its own privacy policy. Likewise, another external website’s privacy rules apply when you follow a link to it.
06Reviews on our website
We display selected public Google reviews about the salon, including the public reviewer name, rating, review text and source link. Some texts are translated into Dutch. The source is the public review, not a customer account on our website.
Our purpose is to let visitors read customer experiences. We rely on our legitimate interest in presenting our services while considering the reviewer’s interests. Contact us if you would like your name or review on this website corrected or removed. We will assess your request and any objection. Changes to our website do not change the original review on Google.
07Who receives information?
We do not sell personal data. We share information only as needed for the purposes described above: with our hosting provider, technical administrators where access is needed, and parties handling payments or mandatory accounts when you use those services. A competent authority may receive information where disclosure is legally required.
A provider acting solely on our instructions must be subject to appropriate confidentiality, security and processing arrangements. Google and WhatsApp may also determine how they process information for their own services. Their privacy policies describe their role and the choices available to you.
08Processing outside Europe
Cloudflare, Google and WhatsApp use international infrastructure, so information may be processed outside the European Economic Area. Transfers subject to the GDPR must have a valid transfer mechanism, such as an adequacy decision or standard contractual clauses with appropriate supplementary safeguards.
Cloudflare describes safeguards for customer data in its data processing terms. Google and WhatsApp explain international transfers in their own privacy policies. You can ask us which safeguards apply to processing for which De Kroon is responsible and how to obtain a copy.
09How long is information kept?
Data should be kept only as long as needed for the purpose for which it was collected. For enquiries, messages and appointments, this depends on handling the enquiry, completing the appointment and necessary follow-up. Information must be deleted when no longer needed and no other retention duty or specific reason applies.
Core tax records are generally kept for seven years. This does not mean all WhatsApp messages or contact details are kept for seven years. Relevant information for an ongoing complaint or dispute may remain necessary until it is resolved and applicable legal periods have expired.
Technical retention depends on what is needed to deliver traffic, fix a fault or investigate a security incident. Retention by an external service also depends on that service and the feature used. Reviews remain while relevant to presenting the salon, taking account of corrections and valid removal requests.
10Security and sensitive information
We limit processing to what is needed and use HTTPS for this website. Access to personal information should be limited to people who need it for their work. Please call us if you suspect information has reached the wrong person.
The website does not request sensitive personal data or build automatic customer profiles. We do not make decisions based solely on automated processing that have legal or similarly significant effects on you. For a child’s appointment, we ask a parent or carer to provide the necessary contact details.
11Your privacy rights
You can request access and a copy of your information, correction of errors and, subject to legal conditions, deletion or restriction of processing. You can request data portability where that right applies. You can object to processing based on legitimate interests on grounds relating to your particular situation.
Where processing is based on consent, you may withdraw it. This does not affect the lawfulness of processing before withdrawal. We may need to keep certain information to comply with the law. If we cannot fulfil a request in full, we will explain why.
Submit your request by telephone, WhatsApp or post using the details at the top of this page. We may ask for information to verify your identity, but do not routinely require a complete copy of an identity document. We normally respond within one month. A complex request may allow an extension of up to two further months under the legal conditions; we will tell you within the first month.
You can complain directly to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens. You do not need our permission to do so.
12Changes to this policy
We update this policy when our website or working practices change. The date at the top identifies the latest update. Publishing a new policy does not give us consent for new purposes that require separate consent. You can save a copy for your records.