1. Who we are
VEGNA B.V. ("we", "us") is an aesthetic clinic located at Herengracht 182, 1016 BR Amsterdam, Netherlands. For any question about this policy or your data, contact us at clinic@vegna.eu or +971 58 305 8688.
Chamber of Commerce (KVK) number: 85741689. VAT (BTW) number: [to be added].
2. What data we collect
We collect the information you give us directly: your name, email address, phone number, and any message you send through our contact form or by email, including the treatment you are interested in.
If you become a client, we also hold consultation notes and treatment records, which can include health information (for example, allergies, medication, or skin condition). Under the GDPR this counts as a special category of personal data, and we only process it with your explicit consent, to provide safe and appropriate treatment.
We do not currently use analytics, advertising, or tracking cookies on this website. If that changes, this policy and a cookie banner will be updated accordingly before any such cookie is set.
3. Why we process your data
- To respond to your enquiry and arrange a consultation (legitimate interest / pre-contract steps).
- To provide safe, appropriate treatment and keep accurate medical records (explicit consent, and legal obligation for record-keeping).
- To send appointment reminders and, only with your separate consent, occasional updates about the clinic.
4. How long we keep it
Enquiry messages that do not lead to a booking are kept for up to 12 months, then deleted. Client treatment records are kept for the period required by Dutch healthcare record-keeping obligations, generally at least 15 years from the last treatment, after which they are securely deleted.
5. Who we share it with
We do not sell your data. We may share limited data with service providers strictly needed to run the clinic, such as booking or email software, and any such provider is bound by a data processing agreement. We do not transfer your data outside the European Economic Area without appropriate safeguards.
6. Your rights
Under the GDPR you have the right to access, correct, or request deletion of your personal data, to restrict or object to processing, and to data portability. To exercise any of these rights, email clinic@vegna.eu. We will respond within one month.
You also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens, if you believe your data has been mishandled.
7. Security
We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse, including restricting access to client records to staff directly involved in your care.
8. Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects the most recent update.