Privacy Policy
Fosyj Barbershop ("we", "our service") processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Sb.
1. Data we collect
Booking: name, phone, e-mail (optional), Telegram (optional), birthday (optional). Client cabinet registration: PIN (stored as bcrypt hash). Automatic: IP, visit time, device type (security logs).
2. Purposes
Managing bookings and communication (confirmations, reminders, cancellations), loyalty program, marketing (with consent), legal compliance.
3. Legal basis (GDPR art. 6)
Contract performance, legitimate interest (reminders, security), consent (marketing, optional fields).
4. Third parties
Resend Inc. (USA) — e-mail delivery; Telegram (LLC, Dubai) — messenger notifications; MongoDB Atlas — data storage. DPA agreements in place. No sale of data.
5. Retention
Visit history — 5 years since last visit, contacts — until consent withdrawal, logs — 12 months.
6. Your rights
Access, rectification, erasure, restriction, portability, consent withdrawal, complaint to supervisory authority (ÚOOÚ, www.uoou.cz). Requests: reserve@fosyj.cz.
7. Security
Encryption at rest and in transit (TLS 1.2+), bcrypt for PIN/passwords, JWT authentication.
8. Data controller
Fosyj Barbershop, Tušarova 9, Praha 7, 170 00, Česká republika. E-mail: reserve@fosyj.cz.