Data protection

Proper processing of your personal data is very important to our company and its protection is a matter of course for us, therefore we would like to provide you with detailed information, primarily about why we process your personal data, what reasons we have for doing so, what rights you have in connection with the processing of personal data, as well as other information that might interest you.

We do not provide your personal data outside of MasterHair sro, except in cases where you wish to transfer your personal data to another operator, when we have your consent to do so, and in cases where we are required or authorized by law to do so, or if it is our legitimate interest.

Please read the information below about the processing of personal data, which we have designed to make this document as clear and practical as possible for you.

If anything is unclear or you are unsure after reading this document, we will be happy to explain any term or part of this document to you. In these cases, you can contact us in writing at the e-mail address info@masterhair.sk or at MasterHair sro, Bajzova 11/A, 821 08 Bratislava.

1. Who is the controller of your personal data?

The controller of personal data is always the company to which the personal data was provided and which determines the purpose and means of processing personal data.

The controller of personal data is the company MasterHair sro, with its registered office at Lermontovova 911/3, Bratislava 811 05, Company ID: 52 983 951, registered in the Commercial Register of the Municipal Court Bratislava III, section: Ltd., file no. 162555/B (hereinafter referred to as "MasterHair").

You can exercise your rights in writing by post or email. You can exercise your rights at the following contacts:

Contact: MasterHair sro
Address: Bajzova 11/A, 821 08 Bratislava
Email: info@masterhair.sk

2. What is the processing of personal data and what concepts are associated with processing?

First, we would like to introduce you to the basic terms used in this document, which will help you better understand it.

Personal data – any information relating to an identified or identifiable natural person, such as name, surname, date of birth, social security number, telephone number, email address, IP address, etc.
Data subject – a natural person to whom personal data relates.
Processing of personal data – an activity that a controller or processor performs with personal data.
Controller – a natural person or legal entity that determines the purpose and means of processing personal data; the controller may entrust the processing to a processor.
Processor – a natural or legal person, public authority, agency or other entity that processes personal data for the controller on its behalf.
Purpose – the reason why the controller processes personal data.
Special categories of personal data – sensitive personal data that has a specific nature, such as health data or biometric data enabling the identification of a person.
Legitimate interest – the interest of the controller or another entity, which results in the need to process personal data, if it outweighs the interests of the data subject, for example when the data subject is a customer of the controller.
Profiling – any automated processing of personal data that is used to evaluate specific personal conditions, such as behavior on the Internet and when making online purchases.
Cookies - small data files that are stored in a special browser cache on the user's computer and are necessary for some website functions, such as logging in, and are often used to track user behavior on the website; their use can be disabled in most internet browsers.
Recipient – ​​a natural person, legal entity, public authority or other entity to which personal data is provided.
Service – any of the services we offer you.

3. What personal data do we process?

We only process personal data to provide you with our services and customer support, to comply with our legal obligations, and to protect our legitimate interests.

We collect personal data about our customers, including potential customers who have placed an order for a service with us.

We process in particular the following categories of personal data:

Basic identification data
We need basic identification data for the purpose of ordering a service and the contract you conclude with us. This includes your first and last name.
Contact information
Contact details include email and phone number.
Information about using our services
This information includes information about the services you have purchased or ordered from us, and based on this information we can recommend other suitable services to you.
Information about interaction with you
We record information about our interactions with you in writing so that we can provide you with adequate customer support.
Transaction data
This is solely information about payments for our services.

4. For what purposes do we process personal data?

We process personal data:
– without the need for your consent,
– with your consent.

Processing without your consent:

Processing based on order and contract
We process your personal data for the purposes of the order and the contract between you, as our customer and potential client, and us, as the supplier, when using our services. In such a case, personal data is processed only to the extent necessary for ordering the service and concluding and fulfilling the relevant contract. This mainly concerns the fulfillment of the subject matter of the contract, customer support, contract administration and registration of participants.

For this purpose, providing your personal data is completely voluntary, but it is necessary for ordering the service and concluding the contract and its subsequent administration. Without this data, we would not be able to conclude the contract with you and fulfill the obligations and rights arising from it.

Processing based on legitimate interests
MasterHair's legitimate interest is:
– to inform you about news related to the management of your contract and to offer you MasterHair services,
– defense of legal claims.

Use of cookies
We only use cookies with your consent. To prevent the use of cookies, simply activate the Private Browsing function in your browser before visiting the website. However, in this case, it is possible that some parts of the website will not be displayed correctly, browsing will be more difficult for you, and you will not see content that meets your needs.

5. How long do we store your personal data?

We retain your personal data for the duration of your order or contract in order to provide you with our services. After the termination of the contractual relationship and the settlement of all obligations arising from or related to the order or contract, we retain your personal data for the necessary time, up to 10 years, which is required by applicable law.

The retention period of personal data results mainly from Act No. 431/2002 Coll. on Accounting, as amended, and Act No. 40/1964 Coll. on the Civil Code, as amended.

6. Where do we obtain personal data from?

We collect personal data:
– directly from you when ordering the service by phone or email,
– directly from you upon conclusion and during the term of the contract and during the performance of the contract,
– from other persons to whom you have given consent.

7. Do we use automated processing of your personal data?

We would like to inform you that we do not use so-called profiling, i.e. automated processing, in the provision of our services.

8. What rights do you have in relation to the processing of your personal data?

The proper processing of your personal data is important to us and its protection is a matter of course. When processing personal data, you can exercise the following rights:

Information on the processing of your personal data
The information includes, in particular, the identity and contact details of the controller, the purposes of processing, the categories of personal data concerned, the recipient or categories of recipients of personal data, information on the transfer of personal data to third countries, the period of retention of personal data, authorised controllers, a list of your rights, the possibility of contacting the Personal Data Protection Office, the source of the processed personal data, information on whether and how automated decision-making and profiling occur.

Right of access to personal data
You have the right to obtain confirmation as to whether or not personal data are being processed and, if so, you have the right to access information on the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients, the period for which personal data will be stored, information on your rights, the right to lodge a complaint with the Personal Data Protection Office, information on your rights, the right to lodge a complaint with the Personal Data Protection Office, information on the source of personal data, information on whether automated decision-making and profiling are taking place, information and safeguards in the event of the transfer of personal data to a third country or an international organisation. You have the right to be provided with copies of the processed personal data.

Right to repair
Are we processing your outdated or inaccurate personal data? Have you changed your email, for example? Please inform us and we will correct the personal data.

Right to erasure (right to be forgotten)
In some cases stipulated by law, we are obliged to delete your personal data upon your instruction. However, each such request is subject to an individual assessment of whether the conditions are met, because, for example, MasterHair may be obliged to retain personal data if its legitimate interest outweighs your interests.

Right to restriction of processing
If you wish us to process your personal data exclusively for the most necessary legal reasons or to block your personal data.

Right to data portability
If you wish us to provide your personal data to another controller, another company, we will transfer your personal data in an appropriate format, unless there are any legal or other significant obstacles preventing us from doing so, to the entity designated by you.

The right to object to automated individual decision-making
If you discover or even believe that we are processing personal data in violation of the protection of your private and personal life or in violation of legal regulations, please contact us and ask us for an explanation or to eliminate the unsatisfactory situation that has arisen.

You can also object directly to automated decision-making.

The right to file a complaint or suggestion with the Personal Data Protection Office
You can at any time contact the supervisory authority with your suggestion or complaint regarding the processing of personal data, namely the Office for Personal Data Protection of the Slovak Republic, with its registered office at Hraničná 12, 820 07. Bratislava 27, Slovak Republic, Company ID: 36 064 220, phone number: +421/2/3231 3220, website https://dataprotection.gov.sk/uoou/

9. Where can you exercise your rights and is there a fee for exercising them?

You can exercise your individual rights with MasterHair by email to info@masterhair.sk or in writing to the correspondence address Bajzova 11/A, 821 08 Bratislava.

We provide all notifications and statements regarding your exercised rights free of charge. However, if the request is clearly unfounded or disproportionate, in particular because it is repeated, we are entitled to charge a reasonable fee taking into account the administrative costs associated with providing the requested information. In the event of a repeated request for copies of the processed personal data, we reserve the right to charge a reasonable fee for administrative costs for this reason.

How long can you expect a response from MasterHair?
We will provide you with a statement and, if applicable, information about the measures taken as soon as possible, but no later than within one month. We are entitled to extend the deadline by two months if necessary and given the complexity and number of requests. We will inform you about the extension of the deadline, including the reason.

10. Who can access your data?

The controller, its employees and contractual intermediaries, primarily accounting companies and IT service providers, may also have access to personal data.

11. Overview of selected legal regulations governing the issue of personal data

European framework:
– Charter of Fundamental Rights of the EUROPEAN UNION
– Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR)

National legislation:
– Constitution of the Slovak Republic (published under No. 460/1992 Coll.)
– Act No. 18/2018 Coll. on the protection of personal data and on amendments and supplements to certain acts, as amended

12. Where can you contact us?

If you have any questions or comments about this information obligation, please do not hesitate to contact us at any time, by email to info@masterhair.sk or in writing to the correspondence address Bajzova 11/A, 821 08 Bratislava.

This document will be updated regularly. Status as of 01.09.2023