Privacy policy
How Synergy Massage handles your personal data under the GDPR.
Data controller
Synergy Massage is operated by Rafal Andersen, sole trader, org.nr 871228-7971. Contact: bokning@synergymassage.se.
What data we process
• Booking data: name, email, phone, treatment, appointment time. • For mobile massage: address, postal code, city and access notes. • Analytics data (only with your consent). • Email correspondence.
We don't collect health information via the website
We do not collect health information via the website. Health and any complaints are discussed verbally before treatment.
Purposes and legal bases
• Delivering bookings (contract, GDPR art. 6(1)(b)). • Accounting and tax records (legal obligation, Bokföringslagen). • Analytics and marketing email (consent, art. 6(1)(a)). • Service quality follow-up (legitimate interest, art. 6(1)(f)).
Recipients and processors
We rely on: Supabase (hosting/database), an email delivery provider, Google Calendar for scheduling, Google Analytics (only with consent), Milo Analytics (only with consent) and Lovable (website platform/hosting). Transfers outside the EU/EEA may occur for Google, with appropriate safeguards (Standard Contractual Clauses).
Retention
• Booking and accounting records: 7 years (Bokföringslagen). • Address and access notes for mobile bookings: deleted 3 months after the appointment. • Analytics: max 14 months. • Feedback: 2 years.
Your rights
You have the right of access, rectification, erasure, restriction, portability, objection and to withdraw consent at any time. Contact us at bokning@synergymassage.se. You may also complain to the Swedish Authority for Privacy Protection (imy.se).