Last updated: 25/10/2026

PRIVACY POLICY

WOMAS – Massage Studio Rotterdam

Last updated: 25 October 2026

At WOMAS, we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, book an appointment or receive a treatment at our studio.

We process personal data in accordance with the General Data Protection Regulation (GDPR), known in the Netherlands as the Algemene Verordening Gegevensbescherming (AVG).

1. Who We Are

WOMAS is an independent massage studio located in Rotterdam, the Netherlands.

Business name: WOMAS
Business address: Westblaak 92, 3012 KM Rotterdam, The Netherlands
Chamber of Commerce (KVK): 66035651
Email: womas.massage@gmail.com
Telephone: +31 6 26912188
Website: www.mywomas.com

WOMAS is responsible for the processing of personal data described in this Privacy Policy.

2. Personal Data We Collect

Depending on your interaction with WOMAS, we may collect the following personal information:

Full name.
Email address and telephone number.
Appointment dates and booking history.
Payment and billing information.
Information provided through enquiries or communications.
Relevant health information provided through paper-based intake questionnaires.
Handwritten treatment notes, including relevant precautions, techniques applied and treatment progress.
Technical website information, such as IP address, browser information and cookie preferences.

We collect only the information reasonably necessary for the purposes described in this policy.

3. Purpose and Legal Basis of Data Processing

WOMAS processes personal data for the following purposes:

Appointment management

To schedule, confirm, modify and manage appointments through Salonized.

Legal basis: performance of a contract or steps taken before entering into a contract.

Providing treatments

To provide massage services, assess treatment suitability and maintain appropriate treatment records.

Legal basis: performance of a contract and, where applicable, other relevant legal grounds.

Health-related information

To identify relevant precautions, contraindications and information necessary for the appropriate provision of treatments.

Because health information is classified as special-category personal data, it is processed only where a valid legal basis and an applicable exception under Article 9 of the GDPR exist.

Where explicit consent is required, it will be requested separately.

Payments and accounting

To process payments, maintain financial records and comply with Dutch tax obligations.

Legal basis: performance of a contract and compliance with legal obligations.

Client communication

To respond to enquiries and provide information related to appointments and services.

Legal basis: performance of a contract or legitimate interests, depending on the communication.

Legal obligations and complaints

To comply with applicable legislation and manage complaints or legal claims where necessary.

Legal basis: legal obligation or legitimate interests, as applicable.

4. Health Questionnaires and Treatment Notes

Before certain treatments, clients may be asked to complete a paper-based health questionnaire.

This questionnaire may include information about medical conditions, allergies, injuries, medication, symptoms or other relevant precautions.

WOMAS may also maintain handwritten treatment notes for returning clients.

These notes may contain information about:

Treatments performed.
Techniques applied.
Areas requiring particular attention.
Relevant physical complaints or precautions.
Responses to previous treatments.
Progress and changes observed over time.

This information is used to assess treatment suitability, support the appropriate provision of services and maintain treatment continuity.

Health questionnaires and handwritten treatment notes are maintained in paper format and are not uploaded to Salonized.

Access to these records is restricted to the business owner.

Health-related information is handled confidentially and is not used for marketing purposes.

5. Online Bookings and Payments

WOMAS uses Salonized, an external appointment management platform, to manage bookings and payments.

When booking an appointment, clients may provide personal information such as their name, telephone number, email address and appointment details.

Salonized may also process relevant payment and transaction information.

WOMAS uses this information to:

Manage reservations.
Send appointment confirmations and reminders.
Process payments.
Maintain booking and payment records.
Communicate with clients regarding their appointments.

Salonized processes relevant personal data under applicable data protection arrangements.

6. Data Storage and Security

WOMAS takes appropriate technical, physical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.

These measures include:

Restricting access to client information.
Keeping paper records in a designated administrative storage area.
Limiting access to health questionnaires and treatment notes to the business owner.
Using appropriate security measures for online accounts and service providers.
Handling personal and health-related information confidentially.

In the event of a personal data breach, WOMAS will assess the incident, take appropriate corrective measures and notify the relevant authorities or affected individuals where legally required.

7. Data Retention

WOMAS retains personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required by applicable Dutch legislation.

Financial and accounting records

Records subject to Dutch tax administration requirements are generally retained for seven years, unless a different statutory period applies.

Booking and contact information

Appointment and contact information is retained for as long as necessary for client administration, communication and applicable legal obligations.

Paper health questionnaires and treatment notes

Health questionnaires and handwritten treatment notes are retained according to the nature of the services provided, their purpose and applicable statutory retention requirements.

Where the Dutch Medical Treatment Contracts Act (WGBO) applies, relevant medical records are generally retained for 20 years from their last modification, subject to applicable legal exceptions.

Where no specific statutory retention period applies, records are retained only for a period that is necessary and proportionate to their purpose.

When records are no longer required, they are securely destroyed or deleted.

8. Sharing Personal Data

WOMAS does not sell personal information to third parties.

Personal data may be shared where necessary with:

Salonized: appointment management and payment processing.
Wix: website hosting and related website services.
Payment service providers: processing relevant financial transactions.
Professional advisers or complaint-handling organisations: where necessary and legally permitted.
Government or regulatory authorities: where disclosure is required by law.

We share only the information necessary for the relevant purpose and apply appropriate data protection safeguards.

Health-related information is disclosed only where legally permitted and where any additional requirements for special-category data are satisfied.

9. International Data Transfers

Some external service providers may process personal data outside the European Economic Area (EEA).

Where such transfers take place, WOMAS will rely on appropriate safeguards required under the GDPR, such as adequacy decisions or standard contractual clauses, where applicable.

10. Your Privacy Rights

Under the GDPR, you may have the right to:

Access the personal information held about you.
Request correction of inaccurate or incomplete information.
Request deletion of your personal information, where legally permitted.
Request restriction of certain processing activities.
Object to processing in circumstances provided by law.
Request data portability where applicable.
Withdraw consent at any time where processing is based on consent.

Certain rights may be limited where WOMAS is required to retain information under applicable legislation.

To exercise your rights, please contact:

womas.massage@gmail.com

We will respond to requests within the time limits established by the GDPR.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Website: www.autoriteitpersoonsgegevens.nl

11. Cookies and Website Analytics

Our website, www.mywomas.com, is hosted on Wix and uses cookies and similar technologies.

These technologies may be used to:

Ensure the website functions correctly.
Remember website preferences.
Improve website performance.
Analyse website usage, where applicable.

Where legally required, visitors are asked for consent before non-essential cookies are placed.

Visitors can accept, reject or manage cookie preferences through the cookie consent banner on our website.

Cookie settings can also be managed through browser preferences.

12. Marketing Communications

WOMAS may send promotional communications where permitted under applicable law.

Where consent is required, it will be obtained before marketing communications are sent.

Clients may withdraw their consent or unsubscribe from promotional communications at any time.

Health-related information is never used for marketing purposes.

13. Automated Decision-Making

WOMAS does not use personal information to make solely automated decisions that produce legal or similarly significant effects on individuals.

14. Changes to This Privacy Policy

WOMAS may update this Privacy Policy when necessary to reflect changes in our services, data processing activities or applicable legislation.

The most recent version will always be available on our website.

15. Contact

If you have questions about this Privacy Policy or how your personal information is processed, please contact: