Privacy Policy
Last updated: 13 August 2026
This English version is an aligned convenience translation. The German version is the source document for Austrian legal review.
1. Controller
Aurelia Maria Potoczak
F.W.-Raiffeisen-Straße 1b, 1st floor
5061 Elsbethen
Austria
Email: hello@aurinails.com
Telephone / WhatsApp: +43 650 218 21 58
2. Delivery of this website
The main website at aurinails.com is delivered through Cloudflare Pages. Cloudflare receives the technical data needed to deliver and secure each page, such as the IP address, requested page, access time, and browser and device information.
The main website has no forms, analytics, tracking, cookies, external fonts, or embedded third-party content. Auri Nails does not create visitor profiles. The separate booking page is described in section 4. This technical processing is necessary to provide the website securely and reliably. The legal basis is Article 6(1)(f) GDPR.
Cloudflare keeps personal data only for as long as needed to provide the service or meet legal obligations. It may process data in the United States and the European Economic Area and describes the safeguards for international transfers in its privacy notice.
3. Contacting Auri Nails directly
If you contact Auri Nails by email, WhatsApp, or Instagram, we process the contact details and message content you provide to answer your inquiry, prepare an appointment, or provide the agreed service.
We use Google Workspace for business email and calendar administration. Google processes the related communication, calendar, and appointment data on our behalf. WhatsApp and Instagram are Meta services and receive the data needed to provide the communication channel you choose.
Google may process personal data outside the European Economic Area. The accepted Google Cloud Data Processing Addendum provides safeguards for these transfers, including the EU Standard Contractual Clauses where required. Google lists its Workspace subprocessors; further information is available on request.
The privacy notices of WhatsApp and Instagram also apply.
Where your message concerns an appointment or requested service, the legal basis is Article 6(1)(b) GDPR. General inquiries are answered under Article 6(1)(f) GDPR; the legitimate interest is responding to incoming business communications.
Messages are kept only for as long as needed to handle the inquiry, administer the appointment, or answer reasonable follow-up questions. They are then deleted unless a statutory retention or evidence obligation applies.
4. Appointment booking
At booking.aurinails.com, the Cal.com booking interface is embedded and loads when the booking page opens. The browser therefore connects to Cal.com before you select a service or enter booking information. Cal.com and its technical service providers receive connection and device data such as the IP address, access time, and browser and device information.
Cal.com uses session and security cookies and local browser storage to display and protect the interface and maintain the booking session. Session cookies are temporary. A Cloudflare security cookie expires after approximately 30 minutes of inactivity. Local Cal.com storage may remain until Cal.com removes it or you clear your browser data.
Cal.com also uses Sentry for technical error and performance monitoring. Auri Nails does not add its own analytics, advertising, or profiling to the booking page. The purpose is to provide online appointment booking securely and reliably. The legal basis is Article 6(1)(f) GDPR. Further information is available in the privacy notices of Cal.com, Cloudflare, and Sentry.
When you use the interface to request an appointment, the following booking data is processed:
- required fields: name and email address; without them, the appointment cannot be booked and confirmed;
- optional fields: phone number and a free-text note; do not enter health or allergy information in the note;
- booking details: selected service, date and time, duration, location, and timezone.
Cal.com administers the booking and sends email reminders. WhatsApp reminders are sent only if you provide a phone number. The booking is synchronised with Google Calendar, which receives your name, email address, optional phone number, and optional note.
We use the information you enter to arrange, confirm, and provide the appointment, including the necessary communication and calendar administration. The legal basis is Article 6(1)(b) GDPR. Booking data is not used for marketing.
Cal.com, Inc. processes booking data on our behalf and may use service providers to operate the booking service. Its Data Processing Agreement includes the EU Standard Contractual Clauses and additional safeguards where required for international transfers. You can find further information about Cal.com’s providers at cal.com/privacy or request it from us. Google Workspace receives the data needed for the email and calendar purposes described above.
5. Retention and deletion of booking data
The booking profile and booking history are retained for three years after the last completed or cancelled appointment. At the end of that period, the records are manually deleted from Cal.com and Google Calendar in Google Workspace. Invoice or accounting records that must be kept by law are a separate data category and are not covered by this booking retention period.
6. No automated decisions
There is no automated decision-making, including profiling, within the meaning of Article 22 GDPR.
7. Your rights
Subject to the conditions in the GDPR, you have rights including access, rectification, erasure, restriction of processing, data portability, and objection where the relevant right applies.
Requests may be sent to hello@aurinails.com. We normally respond within one month. Where a request is particularly complex, the period may be extended as permitted by law; we will tell you within the first month.
You also have the right to lodge a complaint with the Austrian supervisory authority:
Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria