Privacy policy
Here we explain what personal data is processed when you visit this website or contact us, why, for how long and what your rights are. We provide this information under Art. 13 of Regulation (EU) 2016/679 (GDPR) and Act No. 18/2018 Coll. on Personal Data Protection (zákon č. 18/2018 Z. z. o ochrane osobných údajov). This translation is provided for information; the Slovak version is binding.
Last updated: 20 October 2026
Data controller
The controller of your personal data (prevádzkovateľ) is:
- Company name
- [to be added by the owner]
- Company ID (IČO)
- [to be added by the owner]
- Registered office
- [to be added by the owner]
- Salon address
- Šustekova 3621/4, 851 04 Bratislava-Petržalka
- [to be added by the owner]
- @flow.beauty.bratislava
If you have questions about your personal data, write to us at the email address above or on Instagram Direct.
What data we process
Visiting the website
When you open the website, your browser sends technical data to the hosting server: IP address, time of the request, page address, browser and device type. Without this data the page cannot be delivered or protected from attacks. The website has no user accounts or forms, and you do not enter your name or contact details.
Price calculator
The calculator runs only in your browser. The technique, amount and length you choose are not sent or stored anywhere. The “Direct” and “Copy” buttons only copy the calculation text to your device's clipboard — whether and to whom you send it is up to you.
Messages and booking via Instagram Direct
Consultations and bookings take place via Instagram Direct. By clicking “Direct” or “Instagram” you leave this website and go to a service of Meta Platforms Ireland Ltd.; what Meta processes is governed by its privacy policy. We see what you send us: your profile name, the content of your messages, any photos of your hair and the agreed appointment time.
Deposit
When booking you pay a 30 € deposit, which is deducted from the price of the service. For this we process only the data needed to record it and refund it if applicable: who paid the deposit and when, the amount and the appointment it belongs to.
Cookies and local storage
The website remembers only your cookie consent choice in your browser. Analytics and marketing tools run only if you allow them. Details and list: Cookies.
We currently do not use any analytics or marketing tools on the website.
Links to Google Maps and Instagram
The map on the website is an image hosted by us, not an embedded Google map. Google Ireland Limited or Meta receive data about you only when you click a link and open their service (Google privacy policy).
Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Delivering the website and protecting it from attacks | legitimate interest in a functional and secure website — Art. 6(1)(f) GDPR |
| Replying to your message, consultation, booking an appointment | steps taken at your request before entering into a contract, and performance of a contract — Art. 6(1)(b) GDPR |
| Recording the deposit and accounting documents | performance of a contract — Art. 6(1)(b) GDPR; legal obligation — Art. 6(1)(c) GDPR in conjunction with Act No. 431/2002 Coll. on Accounting (zákon o účtovníctve) |
| Remembering your cookie consent choice | legal obligation to demonstrate consent — Art. 6(1)(c) and Art. 7(1) GDPR; strictly necessary storage under § 109(8) of Act No. 452/2021 Coll. on Electronic Communications (zákon o elektronických komunikáciách) |
| Visitor statistics (analytics tools) | your consent — Art. 6(1)(a) GDPR and § 109(8) of Act No. 452/2021 Coll. |
| Measuring and showing ads (marketing tools) | your consent — Art. 6(1)(a) GDPR and § 109(8) of Act No. 452/2021 Coll. |
You can object at any time to processing based on legitimate interest (see Your rights).
How long we keep data
- Hosting technical logs — according to the hosting provider's terms (privacy policy).
- Messages and booking data — as long as needed to handle your request and provide the service, for no longer than [to be added by the owner].
- Deposit data — for the duration of the booking; if part of an accounting document, 10 years under § 35 of Act No. 431/2002 Coll. on Accounting.
- Cookie consent choice — 12 months, after which the website asks you again. You can also delete it by clearing the site data in your browser.
- Analytics and marketing cookies — the period is stated for each tool on the Cookies page.
Who receives the data
- Cloudflare, Inc. — hosting provider, delivers the website (privacy policy).
- Meta Platforms Ireland Ltd. — when you use Instagram or Instagram Direct; if you allow marketing cookies and Meta Pixel is enabled, also data about your visit to the website.
- Google Ireland Limited — when you open a link to Google Maps; if you allow analytics cookies and Google Analytics is enabled, also data about your visit to the website.
- Public authorities — only if required by law.
Transfers outside the EU
Meta, Google and Cloudflare belong to groups headquartered in the USA, so data may also be transferred outside the European Union. Transfers rely on the European Commission's adequacy decision (EU-US Data Privacy Framework) or on standard contractual clauses under the provider's terms.
Do you have to give us your data?
No. You can browse the website and calculate a price without any personal data. Without contact (for example a message on Direct), however, we cannot confirm an appointment for you.
We do not carry out automated decision-making under Art. 22 GDPR.
Your rights
Under the GDPR you have the right:
- of access to the data we process about you (Art. 15),
- to rectification of inaccurate data (Art. 16),
- to erasure (Art. 17) and to restriction of processing (Art. 18),
- to data portability (Art. 20),
- to object to processing based on legitimate interest (Art. 21),
- to withdraw consent at any time (Art. 7(3)) — withdrawal does not affect the lawfulness of processing before it. You can change your cookie consent in the cookie settings.
Send your request to [to be added by the owner] or on Instagram Direct. We will reply without undue delay and within one month at the latest (Art. 12(3) GDPR).
Complaints
If you believe we are handling your data unlawfully, you can file a petition to initiate proceedings with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.
Changes
If the way we process data changes (for example, a new tool or booking method is added), we will update this page. The date of the last change is shown at the top.