privacy policy

The controller of the bivi.sk website and of your personal data is Bivi Beauty Studio, TOWER 5, Kalinčiakova 33, 831 04 Bratislava (hereinafter “we” or “the studio”). Contact: studio@bivi.sk, 0911 084 666.

We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Act No. 18/2018 Coll. on the Protection of Personal Data.

We only process data that you provide to us yourself or that is generated when you visit the website:

• identification and contact data – first name, last name, phone, email (bookings, vouchers, newsletter, contact form)
• booking data – selected service, date and time, note (via the Bookio booking system)
• information about the health of your skin that you share with us during a consultation – only to the extent necessary for a safe treatment, with enhanced protection
• technical data – IP address, browser type, cookies (see below)

We use the data exclusively for the following purposes:

• providing and booking services – performance of a contract (Art. 6(1)(b) GDPR)
• issuing and delivering gift vouchers – performance of a contract
• sending news (newsletter) – your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time
• accounting and archiving – legal obligation (Art. 6(1)(c) GDPR)
• website security and basic visitor statistics – legitimate interest (Art. 6(1)(f) GDPR)

Cookies are small text files stored in your browser. We divide them into three groups:

• necessary – ensure that the website and the booking system work and store your cookie preferences; no consent required
• analytics – anonymized measurement of website traffic so that we know which services interest you; only with your consent
• marketing – connection to social networks (Instagram, Facebook) and possible remarketing; only with your consent
• you can change your choice at any time by clicking the cookie icon in the bottom left corner or in your browser settings

We do not provide data to third parties for marketing purposes. We only make it available to trusted partners who process it on our behalf and under a contract:

• Bookio (booking system) – management of appointments and reminders
• Google Ireland Ltd. (Google Analytics) – anonymized visitor statistics, only with your consent to analytics cookies
• provider of email and newsletter services
• accounting firm and web hosting provider
• public authorities, where required by law

We keep data only for as long as necessary for the given purpose:

• bookings and client records – for the duration of our relationship and 3 years after your last visit
• accounting documents – 10 years under the Slovak Accounting Act
• newsletter – until you withdraw your consent
• cookies – depending on the type, from the end of the session up to a maximum of 13 months

In connection with the processing of personal data, you have the right:

• to access your data and to information on how we process it
• to rectification of inaccurate data or completion of incomplete data
• to erasure (“right to be forgotten”) if we no longer need the data
• to restriction of processing and to data portability
• to object to processing based on legitimate interest
• to withdraw your consent at any time – without affecting the lawfulness of processing before its withdrawal
• to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, www.dataprotection.gov.sk

We have adopted appropriate technical and organizational measures: an encrypted connection (HTTPS), access to data restricted to authorized persons only, backups and regular system updates. Paper client records are kept in locked areas of the studio.

We may update this policy from time to time. The current version is always published on this page together with its effective date. In the event of a material change, we will notify you on the website or by email.