Privacy policy

01Data controller

The controller of your personal data is the operator of the Skin Atelier salon:

• OperatorKateryna Kadosh, company ID (IČO) 75368480
• AddressPecháčkova 4, 150 00 Praha 5 – Smíchov
• Contactinfo@skinatelier.cz · +420 777 100 059

02Data we process

We only process data you give us yourself, or data created during your visit.

• ContactName, phone, e-mail - for bookings and communication.
• Skin careFace Mapping® analysis results, information on sensitivity, allergies and contraindications - so we can choose a safe treatment.
• PhotosBefore and after photos of your skin - only with your explicit consent.
• WebsiteCookie identifiers, IP address, pages visited, clicks and device type - only with your consent, see the cookie policy.

03Purposes and legal basis

We process bookings and treatments on the basis of a contract. We process data on your skin condition and photos on the basis of your consent, which you can withdraw at any time. We keep accounting records to meet a legal obligation. We send news only with your consent.

Website analytics (Google Analytics, Microsoft Clarity) and ad measurement (Meta Pixel) run only on the basis of the consent you give in the cookie banner. You can withdraw it at any time with the “Cookie settings” link in the site footer.

04Retention

We keep data for as long as we work together and then for no more than 3 years after your last visit. We keep accounting records for 10 years as required by law. We delete data processed on the basis of consent once consent is withdrawn.

Website analytics data: Google Analytics 14 months, Microsoft Clarity 30 days for visit recordings and 13 months for other data, Meta according to its own terms. The cookie policy lists how long each cookie lasts.

05Who we share data with

We never sell data. We only share it with vetted processors who help us run the salon: the Reservio booking system, Boonapi.com for vouchers, our e-mail provider and our accountant.

With your consent, also Google (Google Analytics, Google map), Microsoft (Clarity) and Meta (Meta Pixel). For collecting and transmitting data through the Meta Pixel we are joint controllers with Meta Platforms Ireland Ltd.; Meta governs any further processing.

06Transfers outside the EU

Google, Microsoft and Meta may also process website analytics data in the USA. These companies are certified under the EU–US Data Privacy Framework, for which the European Commission has recognised an adequate level of protection. Transfers are additionally covered by standard contractual clauses.

07Your rights

You have the right to access your data, have it corrected or erased, restrict processing, data portability and the right to object. You can withdraw consent at any time. Just write to us at info@skinatelier.cz - we reply within 30 days.

If you believe we are not handling your data properly, you can lodge a complaint with the Czech Office for Personal Data Protection (www.uoou.cz).

08Security

We keep client records in a secure system that only salon staff can access. We take technical and organisational measures to protect your data against loss or misuse.