Privacy Policy

1. Data Controller

BOHEME VENTURES s. r. o.
Sokolovská 178/10, 040 11 Košice, Slovakia
Company ID: 56421761, Tax ID: 2122300235
Registered in the Commercial Register of the Municipal Court Košice, section Sro, insert no. 60107/V
Email: info@bohemebarbers.sk
Phone: +421 915 286 536

2. Data We Collect

When using our services, we collect the following personal data:

• Identity data: first and last name
• Contact data: email address, phone number
• Booking data: booking history, selected services, preferred staff, visit dates and times
• Account data: password (encrypted), loyalty points, language preferences
• Technical data: anonymized IP address, browser type (only with your consent for analytics cookies)

3. Purpose of Processing

We process your personal data for the following purposes:

• Contract performance: managing bookings, providing services, appointment communications
• Legitimate interest: improving services, loyalty program
• Consent: marketing communications — email newsletters and SMS promotions (based on separate consent), analytics cookies (Google Analytics)

4. Legal Basis

• Art. 6(1)(b) GDPR — processing necessary for contract performance (booking and service delivery)
• Art. 6(1)(a) GDPR — consent (analytics cookies, marketing)
• Art. 6(1)(f) GDPR — legitimate interest (service improvement, fraud prevention)

5. Data Recipients

Your data may be shared with the following third parties:

• Supabase Inc. — database hosting and authentication (EU servers)
• Resend Inc. — transactional email delivery (booking confirmations)
• Google LLC — Google Analytics 4 (only with your consent, anonymized IP)
• Vercel Inc. — web application hosting
• Twilio Inc. — SMS delivery (EU Standard Contractual Clauses in place)

We have Data Processing Agreements (DPAs) in place with all processors in accordance with Art. 28 GDPR.

6. Data Retention

• Account data: for the duration of the account + 30 days after deletion
• Booking data: 3 years from last booking (for loyalty program and dispute resolution)
• Analytics data: maximum 26 months (Google Analytics)
• Guest bookings: 12 months from the booking date
• Guest data: automatically anonymized after 12 months

7. Your Rights

Under the GDPR, you have the following rights:

• Right of access — you have the right to know what data we process about you
• Right to rectification — you can request correction of inaccurate data
• Right to erasure — you can request deletion of your data
• Right to data portability — you can request export of your data in a structured format
• Right to restriction — you can request restriction of processing
• Right to object — you can object to processing based on legitimate interest
• Right to withdraw consent — you can withdraw your consent at any time

To exercise your rights, you can use our data management portal or contact us at info@bohemebarbers.sk. We will respond to your request within 30 days.

Right to rectification (Art. 16 GDPR) and right to restriction of processing (Art. 18 GDPR) can be exercised by sending a request to info@bohemebarbers.sk.

8. Data Security

We protect your data using encryption in transit (TLS/SSL), encrypted passwords, secure authentication, and regular security audits. Only authorized personnel have access to your data.

All consent changes (grants, revocations) are recorded in an audit log with timestamps for GDPR accountability purposes.

9. Supervisory Authority

If you believe the processing of your personal data violates the GDPR, you have the right to file a complaint with:

Office for Personal Data Protection of the Slovak Republic
Galvaniho Business Centrum II
Galvaniho 7/B
821 04 Bratislava, Slovakia
dataprotection.gov.sk

10. Children's Data

When booking Mini BOHÈME services for children, we collect the child's name for service personalization. By booking a service for a child, you confirm that you are their parent or legal guardian in accordance with Art. 8 GDPR.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or a notice on our website.