Privacy Policy

Proposed controller within the meaning of the GDPR [REQUIRES BUSINESS CONFIRMATION]: DepilConcept, Lda. (Portuguese private limited company, legal person number 508311268), Rua Tomás Ribeiro, n.º 71, 3.º piso, 1050-227 Lisboa, Portugal.

Privacy and data protection requests: dpo@grupoconcept.com

General franchising enquiries: franchising@depilconcept.pt

When you request the franchise dossier we process the data you enter in the form: full name, email address, optional phone number, available capital, optional professional background and the language of the website you used.

Purpose: to send you the franchise dossier and to assess and discuss your interest in the Master Franchise opportunity. Legal basis: your consent (Art. 6(1)(a) GDPR) and steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).

Providing this data is voluntary, but without it we cannot send the dossier or contact you.

Together with the enquiry we store the submission time, your privacy and optional marketing consent with their timestamps, and campaign information about how you reached this website (for example campaign parameters, click identifiers, referring page and landing page). Campaign information is kept in your browser before submission only if you accepted marketing cookies.

Retention [REQUIRES LEGAL VALIDATION]: we intend to keep dossier enquiries, including the related consent and campaign information, for 12 months from the date of submission, unless you request deletion earlier or a statutory retention obligation applies. Deletion after this period is currently carried out manually; automatic deletion is not yet active.

To protect the form against automated abuse we use an invisible form field and store an irreversible cryptographic fingerprint of your network address. The network address itself is not stored.

Legal basis: our legitimate interest in the security and availability of this website (Art. 6(1)(f) GDPR).

This website is hosted by {HOSTING_PROVIDER}. Form submissions are stored in a database operated on our behalf by Supabase, hosted in {SUPABASE_REGION}.

Server log data (including IP address, date and time, requested page, browser and referrer) is processed to operate and secure the service. Legal basis: Art. 6(1)(f) GDPR. These providers act as processors under a data processing agreement pursuant to Art. 28 GDPR.

No automatic confirmation emails are currently sent by this website. The franchise dossier and replies are sent to you by our team by email. If an email service provider is introduced, this section will be updated before it is used.

If you give the separate, optional marketing consent in the form, we may contact you with further information about the DepilConcept franchise opportunity. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw this consent at any time with effect for the future, by writing to dpo@grupoconcept.com.

Subject to your consent, we use Google Analytics 4 ({GA4_MEASUREMENT_ID}) to understand how this website is used. Analytics cookies and scripts are only loaded after you have consented in the cookie banner.

Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TTDSG). Data may be transferred to Google Ireland Limited and, where applicable, to the United States on the basis of the EU standard contractual clauses and the EU-US Data Privacy Framework. Further processors: {OTHER_PROCESSORS}.

Subject to your consent, we use Google Ads ({GOOGLE_ADS_ID}) and the Meta Pixel ({META_PIXEL_ID}) to measure and optimise our advertising campaigns. We use Google Tag Manager (GTM-KNFW8P5T). Its container is loaded only when both analytics and marketing are accepted; consent signals default to “denied” and a saved choice is reapplied.

Google Ads and Meta Pixel set cookies or similar technologies and may create pseudonymous usage profiles. Their scripts managed directly by this website are only loaded after your consent. Tags within Google Tag Manager must be configured to respect the corresponding consent choice. Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TTDSG).

Strictly necessary cookies and local storage entries are used to operate the website and to store your cookie choice. Non-essential cookies are only set after your consent, managed through {COOKIE_PROVIDER}.

You can change or withdraw your choice at any time via “Cookie Settings” in the footer. Details are set out in the Cookie Policy.

Personal data is shared with the processors named above and, within the DepilConcept / GrupoConcept network, with those persons involved in assessing franchise applications. Transfers outside the EU/EEA take place only on the basis of an adequacy decision or appropriate safeguards under Art. 46 GDPR.

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). Where processing is based on consent, you may withdraw it at any time with effect for the future.

To exercise your rights, contact our data protection contact at dpo@grupoconcept.com. You also have the right to lodge a complaint with a supervisory authority: {SUPERVISORY_AUTHORITY}.

You can ask us to delete your personal data by sending an email to dpo@grupoconcept.com from the address you used in the form, stating that you request deletion of your franchise enquiry.

We may ask for additional information to confirm your identity before acting on the request. We will respond within the periods set by the GDPR (generally one month). Deletion covers your enquiry, the related consent and campaign information; data that we are legally required to keep will be restricted instead of deleted until that obligation ends. Copies in technical backups are overwritten in the regular backup cycle and are not restored for other purposes.