01Data controller
The data controller is CONSOO SRLS, the company that provides Saloria. Saloria is the product's trade name, not a separate company.
- Registered office: Piazzetta Umberto Giordano 2, 20122 Milan (MI), Italy
- VAT number: IT13823860963
- Email: info@saloria.cloud
- Certified email (PEC): consoo@pec.it
02What this notice covers
This notice covers the website www.saloria.cloud: the information pages, the contact form, the email addresses published on the site and the activation and payment flow.
The Saloria app used by salons (app.saloria.cloud) has its own privacy documentation: it is governed by the terms of service and the data processing agreement (DPA) the salon accepts. For client data processed during a consultation, the salon is the controller.
03What data we process
- Browsing data. To serve the pages and protect the site, our servers log technical data such as IP address, date and time of the request, page visited, browser and operating system.
- Contact form. Full name, salon name, email, phone (optional), reason for contact, number of workstations and message (optional), together with the page you write from and its language. The site does not store them in a database: the server forwards them as an email to info@saloria.cloud through the Resend sending service. Your IP address is also used to limit repeated submissions.
- Email. If you write to one of the addresses published on the site, we process your address and the content of your message.
- Activation and payment. On the “Start now” page we ask for company name, country of the registered office, first name, last name, email, phone and, if you wish, a short description of the salon, together with the plan and billing period you choose. This data is sent to Stripe to create the payment session. You enter your card details in Stripe's secure form: they never pass through Saloria's servers and we do not store them. When a payment succeeds or fails, Stripe notifies us and we receive an email summary with email, salon name, plan, billing period, phone and payment status.
- Statistics, only with your consent. If you accept in the banner, Google tags may collect data about how the site is used, such as pages viewed, where the visit came from, device and cookie identifiers.
The required fields of the form and of the activation page are needed to reply to you or to activate the subscription: without them we cannot proceed. Everything else is optional.
04Why we process data and for how long
| Purpose | Legal basis | Retention |
|---|---|---|
| Serving the site and protecting it from abuse | Legitimate interest in a working, secure site | Indicatively 12 months, unless there is an incident |
| Replying to demo, information and support requests | Pre-contractual steps you request; legitimate interest in replying | As long as needed to handle the request, plus a reasonable history |
| Activating the subscription, handling payment and the contract | Performance of the contract and pre-contractual steps | Duration of the relationship and the technical period after it |
| Invoicing and tax obligations | Legal obligation | Applicable tax retention periods |
| Visit statistics and campaign measurement | Consent, which you can withdraw at any time | Until you withdraw it, within the cookie lifetimes listed below |
05Who receives the data
Data is processed by authorized CONSOO SRLS staff and by the providers that help us run the site, bound by contract:
- Hostinger: hosting of the site and of the server that forwards requests (servers in Germany), and the email mailbox.
- Resend: sending the emails generated by the contact form and by payment notifications.
- Stripe: payment and subscription management. Stripe collects card details directly and handles them under its own privacy policy.
- Google: Google Tag Manager, loaded on every page, and Google's statistics and measurement services, which use cookies only after your consent.
Where the law requires it, data may be disclosed to the competent authorities.
06Transfers outside the EEA
Google, Stripe and Resend belong to groups headquartered in the United States, so some data may be processed or made accessible outside the European Economic Area. In these cases the transfer relies on an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework for certified providers, or on the standard contractual clauses approved by the Commission, together with the safeguards in our contracts with the providers.
07Your rights
You can ask for access to your data, rectification, erasure, restriction of processing and, where applicable, portability. You can object to processing based on legitimate interest and withdraw your consent to statistics cookies at any time, without affecting what happened before. Write to info@saloria.cloud or to the certified address consoo@pec.it.
If you believe the processing breaches the GDPR, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the supervisory authority of the EU country where you live or work.
09Changing your choice
You can change your mind at any time: reopen the banner from “Cookies” at the bottom of the page, or with the button below, and choose “Accept” or “Reject”. If you reject after accepting, the site deletes the Google cookies in the table. You can also delete cookies and site data from your browser settings.
10Changes
We update this notice when the site, our providers or the law change. The date at the top shows the latest revision.
This is a translation: if it differs from the Italian version, the Italian version prevails.