Timma GDPR Guide 🇪🇺

Timma is developed to adhere to the regulations posed by GDPR. In this article we have gathered some of the common questions we get to give you some guidance on GDPR and how you can make sure that your business is aligned with the requirements that GDPR poses on businesses when using Timma Pro. 🌟

GDPR stands for General Data Protection Regulation and was passed in the EU in 2018. In short, the purpose of GDPR is to strengthen consumers rights when it comes to how companies, organizations and authorities can collect, process and use their personal data.

Understanding GDPR involves knowing who's in charge of the data and who handles it. There are three main roles:

In Timma Pro, you as a salon owner own the data about your customers in your customer registry, and Timma helps you store and manage it by keeping it on our platform.

There are many great sources of information created by the authorities that can guide you on what GDPR means for you as a business owner. Here is an example of a checklist where you can learn more about how GDPR applies to you as a small business owner and data controller.

//Remove the other countries from the list for local translations//

Here we have gathered all our best recommendations for how you can keep your account secure against unauthorized people gaining access to your account.

Make sure that the correct people are registered as data controllers in your Timma account. You can manage the registered owners of the information in the customer registry under: Company>Legal>Rights to the customer register.

One of the requirements of GDPR is that you have to inform your customers of what personal information you collect, why you need it, how long you will store it and who has access to it. Your customers also need to be able to consent to you storing this information and know how they can request to see and get their information edited or deleted. Timma helps you with this by providing you with a privacy policy that your customers consent to before they can book a time with you online.

You can view the Privacy policy to your customers under Company>Legal>Privacy Policy

Ensure that you only store the information that you need. For example, make it a common practice to remove any unnecessary information about customers and delete customers that no longer visit your salon. This does not only help you adhere to GDPR, but also makes it easier for you to only see the relevant information when you prepare for your customers arrival.

We have strengthened security so that the extra users such as accountants cannot see or access the customer notes you write to ensure that the information about your customers is protected.

Generally, you need your customer to consent to you storing and using their personal information.

When it comes to marketing, we have provided you with some tools to collect consents from your customers to receive marketing messages from you. In the Marketing page, you can send email or SMS marketing messages only to customers who have consented to receiving them. Easily view which customers have consented and which have not from their customer card, or by filtering them according to marketing permissions on the Customers page.

If you're collecting information about your customers' health such as allergies, there are additional points to take note of. Read more about this below!