Privacy Policy

Loop d.o.o., OIB (Company ID): 93207816519, with its registered office at Obala kralja Tomislava 8, 21215 Kaštel Lukšić, Croatia (hereinafter: "Data Controller" or "we"), operates the Trebam Termin platform (hereinafter: "Platform").

We are committed to protecting your privacy and personal data. This Privacy Policy explains what data we collect, why we collect it, how we use it, how long we retain it, and what your rights are under the General Data Protection Regulation (GDPR) and applicable laws of the Republic of Croatia.

This policy applies to all Platform users — end users who browse and book appointments, and business users (salons, studios, wellness centres, and other service providers) who use the Platform to manage bookings.

We collect the following categories of personal data:

• Account data: full name, email address, phone number, password (in encrypted form), and other data you provide during registration or when editing your profile.
• Booking data: details of bookings you have made or received, including selected services, appointment date and time, selected staff member, and booking status.
• Business user data: salon name, address, working hours, service offerings, prices, gallery photos, staff information, and other information published on the salon profile.
• Technical data: IP address, browser and operating system type, screen resolution, device information, page usage data (pages visited, time spent on page, navigation patterns), and data collected through cookies.

• Directly from you: when you create a user account, fill in a salon profile, make or manage a booking, contact us by email, or use any other Platform functionality.
• Automatically: through cookies and similar technologies that collect technical and usage data during your visit to the Platform. More details about cookies are available in our Cookie Policy.
• From third parties: from authentication service providers (e.g. if you sign in through an external provider), analytics services, and other partners that help us provide and improve our services.

We use your personal data for the following purposes:

• Service delivery: creating and managing your user account, processing and managing bookings, displaying salon profiles to users.
• Notifications: sending booking confirmations, reminders for upcoming appointments, notifications about changes or cancellations, and other service-related notifications.
• Platform improvement: analysing usage patterns to improve the user experience, functionality, and performance of the Platform.
• Security: protection against unauthorised access, fraud, and other security threats.
• Legal obligations: fulfilling legal obligations, responding to legal requests, and resolving disputes.
• Communication: responding to your enquiries and support requests.

We process your personal data based on the following legal grounds under the GDPR:

• Consent (Art. 6(1)(a) GDPR): for processing based on your explicit consent, such as sending marketing notifications or using non-essential cookies.
• Performance of a contract (Art. 6(1)(b) GDPR): for processing necessary to provide Platform services, including account registration and booking processing.
• Legitimate interest (Art. 6(1)(f) GDPR): for analysing Platform usage to improve services, ensuring Platform security, and preventing misuse.
• Legal obligation (Art. 6(1)(c) GDPR): for processing necessary to comply with legal obligations.

We implement appropriate technical and organisational measures to protect your data, including encryption of data in transit and at rest, access controls, regular security audits, and procedures for managing security incidents.

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR): you have the right to obtain confirmation as to whether we process your personal data and, if so, to access that data and receive a copy.
• Right to rectification (Art. 16 GDPR): you have the right to request correction of inaccurate personal data or completion of incomplete data.
• Right to erasure (Art. 17 GDPR): you have the right to request deletion of your personal data under the conditions set out in the GDPR.
• Right to restriction of processing (Art. 18 GDPR): you have the right to request restriction of processing of your personal data in certain circumstances.
• Right to data portability (Art. 20 GDPR): you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object (Art. 21 GDPR): you have the right to object to processing of your personal data based on legitimate interest or processing for direct marketing purposes.
• Right to withdraw consent: where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact us at info@trebampoklon.com. We will respond to your request within 30 days. You also have the right to lodge a complaint with the competent data protection authority — the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law.

Account data is retained while the account is active and for an additional period after account deletion in accordance with legal obligations. Booking data is retained in accordance with tax and accounting regulations. Technical and usage data is retained for up to 26 months from collection.

Upon expiry of the retention period, data is deleted or anonymised.

The Platform may contain links to third-party websites. We have no control over the content or privacy policies of those websites and bear no responsibility for their practices. We recommend that you read the privacy policy of every website you visit through links on our Platform.

We reserve the right to update this Privacy Policy at any time. We will notify you of significant changes through the Platform or by email. Continued use of the Platform after publication of changes constitutes acceptance of the updated policy. We recommend reviewing this page regularly.

For all questions, requests, or complaints regarding personal data protection, contact us: