Privacy policy

To book and provide services, we process data as necessary: name, surname, telephone number, email address, appointment details, chosen service and visit history. For payments and complaints, we process the information needed for documentation and resolving the request.

Where necessary to assess contraindications safely, we may, with separate explicit consent, record health information and treatment details in client records. Before-and-after photographs are published for marketing only with separate, freely given consent.

• Bookings, confirmations, rescheduling, reminders and services: performance of a contract or pre-contractual steps requested by the client (GDPR Art. 6(1)(b)).
• Accounting and legal obligations: compliance with a legal obligation (Art. 6(1)(c)).
• Complaints and legal claims: legal obligation or legitimate interest as applicable (Art. 6(1)(c) and (f)).
• Health information necessary for safe treatment: performance of a contract and explicit consent under Art. 9(2)(a) GDPR.
• Publishing identifiable photographs on Instagram: consent under Art. 6(1)(a) GDPR.

We do not send advertising text messages or marketing emails to clients.

Where necessary, data may be processed by authorised salon personnel, the Bookio booking system, IT and email service providers, accountants and public authorities when required by law.

Separate businesses operating within the salon premises do not automatically have access to Maison Beauté s. r. o. client data. Once a photograph is voluntarily published on Instagram, users may view it and platform operators may process it under their own policies.

Use of internet services and Instagram may involve processing outside the European Economic Area. In such cases, safeguards under Chapter V GDPR apply, for example adequacy decisions or standard contractual clauses, according to the relevant provider's arrangements.

• Bookings and contact details: generally up to 24 months after the last booking, unless legal claims justify longer retention.
• Accounting documents: 10 years following the year to which they relate, as required by accounting rules.
• Complaint files: generally 3 years after closure; in a dispute, until its final resolution and a necessary subsequent period.
• Health data in client records: while explicit consent remains effective, generally no more than 3 years after the last treatment; if consent is withdrawn, we cease processing for that purpose unless another independent legal basis permits retention.
• Marketing photographs: until consent is withdrawn or the purpose ends, with periodic reassessment.

Your name, contact details and booking information are required to arrange an appointment; without them a booking may not be possible. Relevant contraindication information is necessary to assess treatment safety.

Consent to publish photographs is entirely voluntary; refusal does not affect provision of the service.

Subject to statutory conditions, you have the right to access, rectify or erase data, restrict processing, data portability, and object to processing based on legitimate interests.

You can withdraw consent at any time by emailing info@savaya-beaute.sk. Withdrawal does not affect the lawfulness of processing before withdrawal. We generally respond within one month. You can also complain to the Slovak Office for Personal Data Protection.

We do not carry out automated decision-making, including profiling with legal or similarly significant effects, within the meaning of GDPR Art. 22. Automatic appointment reminders are not marketing communications.