- Controller
- The controller is the business shown under Business information. Legal and privacy requests can be submitted through the contact page or by email at info@gavopia.com.
- Data we process
- Depending on how you use GaVopia, we may process contact details, voluntary form content, booking and payment references, newsletter status, community submissions and technical security data. Please do not submit identity-document, bank-account or health data in free-text fields.
- Purposes
- We use data to answer enquiries, deliver requested services, process enabled payments, operate optional communications, secure the website, prevent abuse and meet applicable legal obligations.
- Legal basis
- The legal basis depends on the visitor, service and jurisdiction. It may include steps requested before a contract, contract performance, consent, legitimate interests or a legal obligation where the relevant law recognises those bases.
- Service-provider categories
- GaVopia may use hosting, email, payment, security and infrastructure providers. Only the data needed for the relevant function is shared. Payment-provider details and purchase terms are shown at checkout where applicable.
- Appointment scheduling
- When online booking is enabled, GaVopia may embed or link to an external appointment-scheduling provider. Loading the booking interface or making a booking can transmit the information needed for availability, contact details, confirmations and technical operation to that provider. The active provider and its privacy information are disclosed before the booking service is enabled. Use the contact form if you prefer not to use the external booking service.
- International processing
- Because GaVopia serves customers internationally, data may be processed outside your country. Where applicable law requires a transfer mechanism, contractual safeguard, adequacy framework or other protection, the appropriate safeguards are used.
- Security
- Administrative and technical safeguards include restricted admin access, secret management, rate limits, encrypted backups and restore testing. No internet service can promise absolute security.
- Retention
- Data is kept only as long as necessary for the stated purpose, security, contract evidence or mandatory record-keeping, then deleted or anonymised where appropriate.
- Your rights
- Depending on applicable law, you may have rights to access, correct, delete, restrict, port or object to certain processing, withdraw consent, or opt out of certain uses. Requests can be made through the Contact page.
- Minors
- GaVopia services are intended for adults. Please do not submit personal data about a child unless it is genuinely necessary for your enquiry and you are authorised to provide it.