1. Global Data Protection Standards
We treat your personal data confidentially and in accordance with the legal data protection regulations of the Swiss Federal Act on Data Protection (FADP) and the EU GDPR. As a globally available system, we also consider the standards for the United Kingdom (UK GDPR), the USA (COPPA/CCPA), Australia (Privacy Act), India (DPDPA), and Latin American markets, including LGPD (Brazil) and data protection laws in Mexico and Panama.
2. Controller & Grievance Officer
Responsible for global data processing is:
T2S AG
c/o Hermann Herger
Hellgasse 8
6460 Altdorf UR
Switzerland
Email: chris@thesharpslot.com
3. Hosting & Infrastructure (Root Server)
Secure Operation at IONOS
The software and all customer data are operated on an independently administered root server infrastructure at IONOS SE (Germany). This ensures full control over security configurations. Physical storage takes place in certified data centers within the European Union. A Data Processing Agreement (DPA) according to Art. 28 GDPR is in place.
System Emails & Appointment Reminders
To fulfill the contract, the system sends automated notifications (booking confirmations, reminders). The data processed for this purpose is used exclusively for the intended purpose.
4. International Data Transfer
We transfer and process data worldwide under the following conditions:
- CH/EU/UK: The transfer is legitimized by adequacy decisions.
- Australia/Latin America/Asia: Users in these regions (e.g., Brazil, Mexico, Panama) acknowledge and agree that their data will be processed on servers in the EU/Switzerland ("overseas").
- Worldwide: By using the service, users outside Switzerland/EU expressly agree to their data being stored in these jurisdictions.
5. Protection of Minors (Global)
Our software is a B2B product. Data of minors (e.g., children's haircuts) may only be entered into the system by legal guardians or with their consent.
We do not knowingly collect data directly from children under 13 (USA/Brazil/LATAM) or 16 (EU). If we become aware of unauthorized data entries from minors, these will be deleted immediately.
6. Registration & Founder Edition
When a license is purchased, master and payment data are processed. We comply with the respective national tax-related retention periods.
7. Your Rights Worldwide
Regardless of your location, you have the right to information, correction, and deletion of your data.
- EU/UK/CH: Your rights correspond to the GDPR, UK GDPR, and FADP respectively.
- Brazil: You can assert your rights according to LGPD.
- India/Mexico: Inquiries regarding DPDPA or LFPDPPP should be directed to our Grievance Officer (see point 2).
- Australia: Complaints are processed according to the Privacy Act 1988.
8. Data Security
We use end-to-end SSL/TLS encryption. Through the independent administration of our root servers, we ensure immediate security updates and a strict logical separation of salon databases.