Privacy
Policy

Effective from 6 September 2026

1. Who is the data controller

I am a self-employed individual operating under a trade licence, and in connection with my business I process the personal data of my clients and of people interested in my services in the role of data controller under the GDPR – Regulation (EU) 2016/679.

2. What data I process and why

When you contact me through the contact/enquiry form on this website, I store the following data:

• first name and surname
• e-mail address
• phone number
• the service you selected and your preferred date and time
• the content of your message

This data is used solely so that I can handle your enquiry – get back to you and agree on a date and the terms of the service. The legal basis for the processing is taking steps prior to entering into a contract and my legitimate interest in responding to your enquiry (Article 6(1)(b) and (f) GDPR).

I do not use the data for bulk marketing mailings, nor do I sell it to third parties.

3. How long I keep the data

I keep enquiry data for as long as necessary to handle your booking and for a reasonable period afterwards in case of follow-up communication (usually 3 years from the last interaction), after which I delete it. Data from completed bookings that is tied to accounting records is kept for the period required by law (usually 10 years).

4. Who I share the data with

I process personal data in a database running on infrastructure provided for me by the following technical processors:

• Vercel Inc. – website hosting and server infrastructure
• Neon (Databricks) – the database where enquiries are stored

With any other processors (e.g. an e-mail notification service) I have concluded or will conclude a data processing agreement under Article 28 GDPR. I do not provide the data to any of them for their own marketing purposes.

5. Cookies and analytics

This website does not use advertising or tracking cookies. I measure traffic with my own simple solution that works anonymously – it does not store cookies, IP addresses or any personal identifier, only aggregate statistics (e.g. the number of page views).

6. Your rights

With regard to your personal data, you have the right:

• to access the data I process about you
• to have inaccurate or outdated data rectified
• to erasure (the “right to be forgotten”) where the data is no longer needed
• to restriction of processing
• to object to processing
• to data portability
• to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů) if you believe your right to personal data protection has been infringed

To exercise any of these rights, write to me at makeupbartoskova@gmail.com. I will respond to your request within 30 days at the latest.

7. Data security

Data transferred between your browser and the website is encrypted (HTTPS). Access to the enquiry database is password-protected and limited to the persons who need the data to handle your booking.

8. Changes to this policy

I may update this policy from time to time, for example when the data processed or the services used change. The current version is always available on this page.