Privacy policy

This notice explains how Canal Paw Studio (controller: Lotte Bakker, Prinsengracht 188, 1016 HA Amsterdam, Netherlands) processes personal data when you use affilsgret.hair or contact us. Processing follows the EU General Data Protection Regulation (GDPR) and the Dutch Uitvoeringswet AVG (UAVG).

1. Controller

Lotte Bakker · Canal Paw Studio · Prinsengracht 188 · 1016 HA Amsterdam · Netherlands
Email: [email protected] · Phone: +31 20 555 4412

2. Data we process

• Contact and booking details you send (name, email, phone, dog information, messages).
• Technical data needed to deliver the website (e.g. IP address in server logs, browser type) for a limited period.
• Cookie preferences stored locally in your browser under the key affilsgret_cookie.

3. Purposes and legal bases

• Responding to enquiries and arranging appointments — Art. 6(1)(b) GDPR (pre-contractual steps) or Art. 6(1)(f) (legitimate interest in answering messages).
• Operating and securing the website — Art. 6(1)(f) GDPR.
• Optional analytics or marketing cookies — only with your consent, Art. 6(1)(a) GDPR; you may withdraw consent at any time via the cookie banner or by clearing site data.

4. Retention

Enquiry data is kept as long as needed to handle your request and any follow-up booking, then deleted or restricted unless longer storage is required by commercial or tax law (including Dutch fiscal retention rules where applicable). Server logs are rotated on a short cycle. Cookie consent records remain until you clear them or change your choice.

5. Recipients

We do not sell personal data. Hosting and email providers may process data on our behalf under Art. 28 GDPR contracts. Transfers outside the EEA occur only with appropriate safeguards where applicable.

6. Your rights

You have the right of access, rectification, erasure, restriction, data portability, and objection (Arts. 15–21 GDPR), and the right to withdraw consent without affecting prior lawful processing. To exercise these rights, contact us at the address above.

You may lodge a complaint with a supervisory authority. In the Netherlands, the competent authority is the Autoriteit Persoonsgegevens (AP). You may also contact any other EU supervisory authority of your choice.

7. No automated decision-making

We do not use profiling or automated decisions that produce legal or similarly significant effects under Art. 22 GDPR.

8. Updates

We may update this policy when our processes or the law change. The current version is always published on this page.