Privacy Policy

1. Data controller

Garofita Kozmetika (Moldovan Garofita, sole trader).

Address: 1094 Budapest, Bokréta u. 11–13., Hungary.

Email: info@garofitakozmetika.hu · Phone: +36 70 242 9821

Registration / tax number: […] (to be completed).

2. Data we process

Appointment booking: name, phone number, email address, selected treatment(s), requested time, your note and the "first visit" flag.

Contact form: name, email address and the message content.

Notifications (optional): if you subscribe to browser notifications, we store the technical subscription identifier.

Log data: the server may process technical data (e.g. IP address, timestamp) for security and operation.

3. Purpose and legal basis

Fulfilling appointment requests and communication — basis: performance of the service agreement (GDPR Art. 6(1)(b)).

Responding to contact messages — basis: steps taken at your request / legitimate interest (Art. 6(1)(b) and (f)).

Sending browser notifications — basis: your consent (Art. 6(1)(a)), which you may withdraw at any time.

Service security and abuse prevention — basis: legitimate interest (Art. 6(1)(f)).

4. Retention

Booking data is kept for as long as needed to provide the service and until any related claims lapse.

Contact messages are kept until the matter is resolved, then deleted.

Notification subscriptions are kept until you unsubscribe or withdraw consent.

5. Processors

Hosting: Contabo GmbH (Aschauer Str. 32a, 81549 Munich, Germany) — the website and database run on this server.

Email: confirmation and notification emails are delivered through the mail system on the same server.

The website uses no third-party analytics or advertising services and shares no data with third parties for marketing.

6. Cookies and local storage

The site uses only storage strictly necessary to function: the cart is kept in the browser (localStorage), and admin sign-in uses a session cookie.

There are no tracking, analytics or advertising cookies. Functional storage can be cleared in your browser settings.

7. Your rights

You may request access to, rectification or erasure of your data, restriction of processing, object to processing, and exercise data portability.

Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.

Send requests to info@garofitakozmetika.hu or the postal address above; we aim to respond within the statutory deadline.

8. Remedies

If you believe processing infringes your rights, you may lodge a complaint with the Hungarian Data Protection Authority (NAIH, 1055 Budapest, Falk Miksa u. 9–11.; ugyfelszolgalat@naih.hu; www.naih.hu) or seek a judicial remedy.

9. Security

The website is served over an encrypted (HTTPS) connection. Data is accessible only to authorised persons and protected by reasonable technical and organisational measures.