1. Controller and contact
Power Tan Unipessoal Lda., company number 510531024, at the address in the legal information, controls data concerning visitors, demo requests, customer representatives, contracts and billing. Contact info@nextan.eu for privacy questions and rights requests. This contact does not imply the appointment of a data protection officer.
2. Data collected
The form collects name, salon or business, email, optional phone number, number of locations, plan of interest, language and message. The request, date and technical information needed for security and abuse prevention are recorded. Contracts may also require tax details, business contacts and payment records. Do not include health information or your salon customers’ data in a demo message.
3. Purposes and legal grounds
We use data to respond, arrange demos, provide support, manage contracts and meet tax obligations. Depending on the circumstances, the legal ground is requested pre-contractual steps, performance of a contract, a legal obligation or, for representative contacts and security, legitimate interests in managing business relationships and protecting the service. A demo request does not subscribe anyone to advertising or newsletters.
4. Demo emails
A valid request generates an internal notification and an acknowledgement to the supplied email address in the form’s language. These emails relate to that request. The form checkbox confirms that demo contact is wanted; it does not accept a paid subscription. Required fields are identified in the form; without them the request cannot be handled through that channel.
5. Recipients and service providers
Access is limited to authorised Power Tan staff and necessary providers of hosting, email, IT support, accounting and payment services actually used. Hosting and email use PTisp; invoices are handled in Sage and sent manually. Data is shared with payment providers only when necessary for an available, authorised transaction. We do not sell contact data.
6. Salon-managed data
Each salon determines the purposes and lawfulness of processing its customer and staff data. Power Tan processes that data on the salon’s behalf under documented instructions and a data processing agreement. Categories may include identity, contacts, appointments, sales, payments, consents and, if required by the chosen record form, health information. Requests about that data should go to the salon; Power Tan provides the assistance required by its contract.
7. Retention
Business enquiries are kept while contact or a demo is ongoing and afterwards only where necessary to evidence the relationship, meet legal duties or defend rights. Criteria include request status, last contact, any contract and applicable legal periods; a business enquiry does not justify indefinite retention. Tax records follow their statutory periods. Salon-managed data follows the customer’s instructions and data processing agreement, including return or deletion on termination. Retention is reviewed when the purpose ends or a relevant right is exercised.
8. Security and transfers
We apply risk-appropriate measures, including access controls and secure communications. Hosting locations and provider terms are checked during contracting. Where a service requires transfers outside the European Economic Area, an appropriate basis and safeguards are required, such as an adequacy decision or standard contractual clauses with supplementary measures where needed. We do not assume that all providers are in the same country.
9. Rights and complaints
You may request access, correction, erasure, restriction, portability or object where the legal conditions apply by contacting info@nextan.eu. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. We respond within statutory deadlines, normally one month, and may request proportionate identity verification. You may complain to the CNPD at https://www.cnpd.pt/.
10. Analytics and policy updates
NexTan AI suggestions are management support tools subject to human assessment. They do not in themselves constitute automated decisions with legal effects on individuals. Material policy changes are dated and published, with notification where legally required. New purposes, providers or technologies require prior assessment and appropriate information.