Privacy policy

Blonde by Katja Atelier inside Kriszta Korosi Makeup Artist Pyramou 2, 8046 Paphos, Cyprus E-mail: hallo@blondebykatja.com Phone / WhatsApp: +357 97 567603 Website: blondebykatja.com Responsible person: [FULL LEGAL NAME OF OWNER]

(a) Contact via WhatsApp — when you write to me on WhatsApp, your phone number and your message are processed by WhatsApp / Meta Platforms Ireland Ltd. under their own privacy policy. I use your message only to answer you and arrange your appointment. Legal basis: Art. 6(1)(b) GDPR.

(b) Contact form and e-mail — name, e-mail address and your message, used to answer your enquiry. Legal basis: Art. 6(1)(b) and (f) GDPR.

(c) Appointment data — name, phone number, service and date, used to plan and carry out your appointment. I keep it as long as needed for bookings and for statutory retention periods.

This website is hosted on the infrastructure of Lovable (Lovable Labs Inc.). Server log files (IP address, browser/user agent, time of access and page requested) are processed to operate and secure the site. Legal basis: Art. 6(1)(f) GDPR. These logs are deleted after a short period.

The map on the contact page is loaded from Google (Google Ireland Ltd.). When the page is displayed, your IP address is transmitted to Google. Legal basis: Art. 6(1)(f) GDPR — showing you how to find the atelier. Google's privacy policy: https://policies.google.com/privacy

I display public Google reviews of the atelier (author name, rating, review text and profile image), fetched from the Google Places API. The content comes from Google and is already public there.

This website uses the Meta Pixel (Meta Platforms Ireland Ltd.) to measure the reach of my Instagram and Facebook advertising. It is only loaded with your consent.

[NOTE: consent banner still to be implemented — until then the pixel is used for statistical purposes only; see https://www.facebook.com/privacy/policy]

You can object to personalised advertising at any time: https://www.facebook.com/adpreferences/ad_settings

Links to Instagram are plain external links. No data is transferred to Instagram until you actually click one.

You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, to object to processing, and to withdraw consent you have given at any time.

You can also complain to the supervisory authority: Office of the Commissioner for Personal Data Protection, Cyprus — https://www.dataprotection.gov.cy

I keep personal data only as long as necessary for the purpose it was collected for, or as long as legal retention periods require.

The website is served over an encrypted HTTPS connection.

I may update this policy when the website or the services offered change. The current version always applies and is published on this page.