MK Nails by Kitty Book now Book

Legal information

Privacy notice

This is an English translation of the Hungarian privacy notice. If the two differ, the Hungarian version applies.

1. Who handles your data? — Legal notice

Data controller
Csaplárné Mikla Kitti, sole trader (egyéni vállalkozó)
Registered address
3700 Kazincbarcika, Tulipán utca 5.
Tax number
92196841-1-25
Registration number
62538679
Activity
Manicure and nail extensions (TEÁOR 962206)
Salon address
3700 Kazincbarcika, Tulipán utca 5.

2. What data do I handle, and why?

Two details are required to book an appointment: your name and your e-mail address. You can also give a phone number and a note, but neither is required.

I use these solely to arrange, confirm and, if needed, change your appointment. I do not send newsletters, and I do not pass your data on to third parties for marketing purposes.

When I confirm a booking, your name and the time of the appointment are entered into my own Google Calendar, so that I can see who I am expecting and when. Your phone number, e-mail address, note and the name of the treatment are not entered into the calendar.

You may also write health information in the note field (for example, an allergy). I use it only to carry out the treatment safely. If you would rather not put it in writing, tell me in person.

3. On what legal basis?

The legal basis for processing is your consent (Article 6(1)(a) GDPR), which you give on the booking form, and the performance of the service agreement between us (Article 6(1)(b) GDPR).

Consent is voluntary, but without it I cannot accept your booking, because I would not be able to notify you or confirm your appointment.

4. How long do I keep it?

In the booking database I keep your personal data for 12 months after the treatment; after that it is deleted automatically. The fact of the booking — date, treatment, price — is kept without your name, so that the salon has records of its activity.

The calendar entry (your name and the time) is deleted immediately if the booking is cancelled, and otherwise no later than 12 months after the treatment.

If you would like it deleted sooner, just let me know.

5. Who has access to your data?

I am the one who sees your data. To run the site, I use the following services, which technically process the data:

ServicePurposeLocation
Netlify, Inc. Hosting the website and processing the booking form United States / EU, under the EU–US Data Privacy Framework
Supabase, Inc. Storing booking data European Union
Resend, Inc. Delivering confirmation and notification e-mails United States / EU
Cloudflare, Inc. Protection against automated (bot) submissions United States / EU
Google Ireland Ltd. Showing the embedded map in the contact section European Union / United States
Google Ireland Ltd. Entering confirmed bookings into my own calendar (only your name and the time) European Union / United States

6. Cookies and tracking

This site does not use tracking cookies, and there is no Google Analytics or similar profiling tool on it. I do not collect data about who looks at what on the site.

Fonts and images are served from my own server, so loading them does not involve contacting any third party.

There is one exception: the map in the contact section is an embedded Google Map. When it loads, your browser connects to Google’s servers, and Google receives your IP address and may set cookies. The map only loads when you scroll down to it — if you never reach the contact section, no such connection is made.

If you click the “Get directions” button, Google Maps opens — from then on, Google’s own privacy terms apply.

7. How do I protect your data?

The site uses an encrypted connection (HTTPS). Booking data is stored in an access-restricted database, and your browser never reaches the database directly. IP addresses are used only to filter out abuse, and are stored only in a form that cannot be reversed.

8. What are your rights?

Access
You can ask me to tell you what data of yours I handle.
Rectification
You can ask me to correct inaccurate data.
Erasure
You can ask me to delete your data, unless there is a legal obstacle.
Restriction
You can ask me to restrict the processing of your data.
Objection
You can object to the processing of your data.
Portability
You can ask for your data in a machine-readable format.
Withdrawal
You can withdraw your consent at any time — this does not affect processing carried out before the withdrawal.

Send any of these requests to the contact address above. I will reply within one month at the latest.

9. Complaints

If you feel your data is not being handled properly, you can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa utca 9–11., naih.hu), or go to court.

The cancellation deadline for bookings is 24 hours — see the house rules for details.

Book an appointment Back to the home page

Free slots

Mon–Fri 8–12,14–17 · alternate Saturdays

Book