Privacy Policy

1. Data Controller

bahlou.dk CVR number: 44660342

2. Contact Person and Contact Information

bahlou.dk c/o Robin Koch Nielsen info@fiind.app Ellebjergvej 19 1 tv, 2450 Copenhagen SV

3. Registry Name

Customer registry for appointment booking ("Registry")

4. Purpose and Background for Processing Personal Data

Personal data about individuals given to Bahlou through the Service is collected in the registry to offer the Service in a correct and lawful manner. Regarding the use of the Service, individuals are considered Bahlou's customers or employees ("the Customer"), but regarding appointments made through the Service, individuals are considered customers of Bahlou's partners. Customers' personal data is used especially to manage the customer relationship, communication, and direct marketing. The main part of managing the customer relationship is to offer a marketplace for so-called last-minute appointments, which are available times offered by Bahlou's partners. Additionally, the customer's personal data is transmitted through the Service to Bahlou's partners with whom the customer has booked an appointment. Bahlou's partners may especially be companies within the hairdressing, wellness, or beauty industry.

5. Permission for Direct Marketing

If the customer has given Bahlou permission for direct marketing, Bahlou has the right to contact the customer for marketing purposes via email, phone, mail, or other electronic communication means. The customer has the right to withdraw permission for direct marketing at any time by notifying Bahlou.

6. Registry Content

Personal information that the customer has provided in connection with booking and which is considered necessary to handle the customer relationship responsibly is collected in the registry. If the customer has logged into the service by providing an email address and password to Bahlou, the customer is asked to provide the following information in connection with bookings, which Bahlou collects:

• Name
• Phone number
• Email address
• Password
• Customer information connecting the customer's payment card with the Stripe service
• IP address
• Location data (if the customer has not prohibited the use of location data)
• Possibly CPR number (if required by the practitioner)

If the customer has logged into the service via Facebook or Google, the following information about the customer is collected in addition to the above:

• Customer information connecting the customer to their Facebook or Google account.

7. Regular Information Sources

Personal data is received when a Customer makes a last-minute booking or otherwise uses the Service (e.g., in connection with creating or updating an employee account). In addition to the above, Bahlou may collect user data (e.g., IP address and browser version) from these websites using analytical tools. Bahlou does not use analytical data to identify individuals, but we are aware that analyses performed with other data may make it possible to connect the information to individuals. In these cases, we treat data as personal data. Bahlou also reserves the right to use cookies on their websites, which users can normally choose not to allow in browser settings.

8. Disclosure of Personal Data

When disclosing personal data, legislation is followed in all cases. The customer understands and accepts that personal data is transferred to Bahlou partners in connection with the appointments the customer has made through the Service. In this connection, the following information is disclosed:

• Name
• Email address
• Phone number
• Appointment information

The customer should be aware that the above information may be combined with the customer's other personal data by Bahlou's partners if the customer has also provided other personal data about themselves to Bahlou's partners. In this connection, the customer is asked to contact and make a data protection request directly to the partner with whom the customer has booked an appointment. Bahlou will not disclose the customer's personal data to other third parties than the above-mentioned partners at Bahlou with whom the customer has booked an appointment. In accordance with legislation, personal data may also be disclosed to public authorities upon request. The registry is stored and secured in such a way that unauthorized parties do not have access to the information in the registry.

9. Transfer of Personal Data

To deliver its service, Bahlou uses subcontractors who, from a data protection legislation perspective, are so-called "data processors". Bahlou may publish more information about its data protection practices on its website, and the customer may also contact Bahlou with questions regarding data protection. The customer accepts that their personal data may be transferred to third parties who process information through the Bahlou service, provided that the transfer of personal data is performed in accordance with EU data protection legislation. The above also includes the right to transfer personal data to a third country outside the European Union and the European Economic Area, provided that all requirements in EU data protection legislation are met during the transfer.

10. Protection of the Registry

Bahlou has ensured that the Registry's data protection follows generally accepted practices and strives to prevent unauthorized parties from gaining access to both IT systems and material maintained and stored manually. Only Bahlou employees or Bahlou's contractors and their employees have access to the information in the Registry, and all are bound by confidentiality.

11. Right of Inspection

The customer has the right to be told what data about the customer is stored in the Registry, or to be notified that no data about the customer is stored in the Registry. At the same time, Bahlou must inform about the Registry's usual sources of information as well as the purposes of using the Registry's data and routine disclosures. A customer who wishes to check information about themselves must submit a request to Bahlou in the form of a personally signed document or a document that is officially equivalent.

12. Google Calendar Integration

When you choose to connect your Google Calendar to Bahlou, you give consent for us to access specific information from your Google account.

• Calendar ID and calendar name
• Events that Bahlou creates or updates in your calendar
• Availability information (busy/free times)

We do not access or collect any other Google data such as Gmail, Google Drive files, contacts, or unrelated calendar details.

What data do we collect?

In connection with the Google Calendar integration, we may access:

Purpose

This data is used exclusively to:

• synchronise appointments between Bahlou and your Google Calendar
• prevent double bookings
• ensure that your availability in Bahlou reflects your real calendar
• create, update, or cancel events when a booking is made or changed

Retention and deletion of Google data

We only retain Google Calendar data while the integration is active and only for the purpose of providing the calendar synchronisation feature. If you disconnect Google Calendar inside Bahlou, we immediately stop accessing your data. All Google-related calendar information used for synchronisation will be deleted or anonymised within 30 days. If you delete your Bahlou account, all personal data—including Google Calendar-related data—will be deleted within 30 days, unless legal requirements dictate longer retention (e.g., accounting records). You can also revoke access directly through Google by visiting Google Account → Security → Third-party access and removing Bahlou. If you would like your data deleted earlier, you can contact us at support@bahlou.dk, and we will remove the data within 14 days.