1. Data Controller

Barbershop Vlk (the "controller") processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

2. What Personal Data We Process

As part of the online reservation system, we process: first and last name, email address, phone number, reservation date and time, and any other information you provide when booking a table.

3. Purpose of Processing

We process personal data for the purpose of managing and confirming reservations, communicating with guests (confirmation emails, reminders, change notifications), and fulfilling legal obligations.

4. Legal Basis for Processing

Processing is carried out on the basis of: (a) performance of a contract – Art. 6(1)(b) GDPR, (b) legitimate interests of the controller in sending operational notifications – Art. 6(1)(f) GDPR, and (c) consent to the processing of personal data for reservation purposes – Art. 6(1)(a) GDPR.

5. Retention Period

We retain personal data for as long as necessary to fulfil the purposes described above, for a maximum of 3 years from the last reservation. After this period, data is securely deleted.

6. Sharing Data with Third Parties

If you pay online, the payment is processed by Stripe, Inc. as a separate controller — card details never reach us. The website and the reservation system are operated for us by Rezervos as a processor under a data processing agreement. Further recipients may be e-mail and SMS providers, strictly to the extent needed to deliver a message about your reservation.

7. Your Rights

As a data subject, you have the right to: access your personal data, rectification or erasure, restriction of processing, data portability, and the right to object. You may withdraw your consent at any time by email or by clicking the unsubscribe link in our email communications.

8. Contact

For questions about personal data processing or to exercise your rights, please contact us through the contact form on the Barbershop Vlk website.