Privacy Policy
Effective from: 1st August 2026
This document explains how we process the personal data of website visitors, clients, and people who contact us through our website, email, phone, SMS, WhatsApp, booking system, or social media.
Who is the personal data controller
The personal data controller is:
2LIPE s.r.o.
Company ID: 10719628
VAT ID: CZ10719628
Registered office: Na Vysoké 2371/24, 251 01 Říčany u Prahy
Email: info@na3se.store
Website: www.na3se.studio
Related website / online store: www.na3se.store
Studio location:
na3se.studio, Vršovická 95, Prague 10
The operation of the studio is organized by the controller stated above. Cosmetic services in the studio are provided by authorized responsible persons, Petra Šebo, Company ID: 09036903, and Ludmila Poláková, Company ID: 29646600, who have access only to the data necessary for communication with clients, bookings, and the provision of agreed services.
What personal data we process
We process only the data we need for communication, bookings, the provision of services, necessary records, compliance with legal obligations, and the improvement of our services.
This may include in particular:
- first name and surname,
- email address,
- phone number,
- content of your message or inquiry,
- information about the booked service,
- date and time of the booking,
- history of bookings and visits,
- data necessary for payment, invoicing, or issuing a receipt,
- notes about the course of the service and products used,
- information you provide during a consultation or before a cosmetic treatment, such as skin type and current skin condition, skin sensitivity, allergies, reactions to cosmetic products, contraindications, or other information important for the safe and suitable setting of cosmetic care,
- technical data related to your visit to the website, such as IP address, device type, browser, cookie settings, and basic data about website use.
We process data related to health condition, allergies, contraindications, or similarly sensitive circumstances only to the extent that you provide it to us yourself and only where it is necessary for the safe and suitable provision of a cosmetic service. This data is not used for medical diagnosis or treatment.
Please do not send us detailed health information through a regular contact form unless it is necessary. More sensitive information is best discussed during a consultation at the studio.
Why we process personal data
We process personal data for the following purposes:
Communication and handling inquiries
If you contact us through a contact form, email, SMS, WhatsApp, or social media, we process your data so that we can reply to you and handle your inquiry.
Legal basis: our legitimate interest in communicating with people interested in our services, or steps taken before entering into a contract.
Bookings and provision of services
If you book a cosmetic treatment, facial massage, makeup service, course, workshop, or another service, we process the data necessary to create the booking, communicate with you about the appointment, and provide the service.
Legal basis: performance of a contract or steps taken before entering into a contract.
Consultation, client card, and setting of care
For cosmetic services, we may keep basic notes about your skin, preferences, products used, the course of the treatment, and any contraindications you share with us. We do this so that we can provide follow-up care that is continuous and safely adjusted to your needs.
Legal basis: performance of a contract, our legitimate interest in providing high-quality services, and, in the case of more sensitive data, your explicit consent.
Payments, accounting, and tax obligations
If we issue a receipt or invoice for you, we process the data necessary for accounting, taxes, and compliance with legal obligations.
Legal basis: compliance with a legal obligation.
Newsletters and marketing communication
We send news, service offers, promotions, or other marketing messages only where we have an appropriate legal basis to do so, such as your consent or an existing customer relationship within the limits permitted by law.
You can unsubscribe from commercial communications at any time.
Legal basis: consent, or legitimate interest within the scope permitted by law.
Photos, reviews, and social media
We use client photos, service results, reviews, or testimonials for marketing purposes only with the separate consent of the person concerned.
Legal basis: consent.
Website analytics and cookies
The website may use technical cookies necessary for its operation. We use analytical and marketing cookies only according to your settings in the cookie banner.
Legal basis: for necessary cookies, our legitimate interest in the proper functioning of the website; for analytical and marketing cookies, your consent.
Website security and spam protection
We also process basic technical data for the purpose of website security, protection against spam, attacks, misuse of forms, and unauthorized access.
Legal basis: our legitimate interest in the secure operation of the website.
How long we keep personal data
We keep personal data only for as long as necessary for the relevant purpose.
In general:
- data from the contact form is kept for the time necessary to handle the inquiry, usually no longer than 12 months, unless the communication leads to further cooperation or a booking,
- data related to bookings and services provided is kept for the duration of the client relationship and for a reasonable period afterwards in case of follow-up care, complaints, or the protection of rights,
- client notes and consultation data are usually kept for no longer than 3 years from the last visit, unless there is a reason to keep them longer or unless you request earlier deletion,
- accounting and tax documents are kept for the period required by law,
- data processed on the basis of consent is kept until the consent is withdrawn, unless there is another legal basis for further processing,
- technical and security records are kept for a limited period necessary for website protection and handling possible incidents.
Who has access to the data
Personal data is accessible only to persons who need it for the operation of the studio, communication with clients, provision of services, website administration, accounting, or technical security.
This may include in particular:
- responsible persons providing services in the studio,
- providers of web hosting and technical website administration,
- provider of the booking system,
- providers of email and communication services,
- payment service providers, if used,
- accountants or tax advisors,
- providers of analytical and marketing tools, if you give consent to their use,
- public authorities, where we are required to provide data by law.
We cooperate with processors only to the extent necessary for the operation of the website, studio, and provision of services.
Transfers of data outside the EU
We primarily process personal data within the Czech Republic and the European Union. Some providers of technical, analytical, or marketing services may process data outside the European Economic Area. In such cases, we make sure that appropriate legal mechanisms are used to protect personal data.
Cookies
The website uses cookies and similar technologies.
Cookies are small files that the website stores on your device. They help, for example, with website functionality, security, remembering settings, or measuring website traffic.
We mainly use the following types of cookies:
Necessary cookies
These cookies are necessary for the proper functioning of the website and cannot be disabled through the cookie banner. Without them, the website may not work properly.
Analytical cookies
These cookies help us understand how visitors use the website, which pages they visit, and what is useful to them. We use these cookies only with your consent.
Marketing cookies
These cookies may be used to measure and evaluate advertising or for remarketing, meaning showing more relevant advertising to people who have visited our website. We use these cookies only with your consent.
You can change or withdraw your cookie consent at any time through the cookie settings on the website.
Google Analytics, Google Ads, and other marketing tools
If we use Google Analytics, Google Ads, or other analytical or marketing tools on the website, they are activated according to your cookie consent settings.
If you reject analytical or marketing cookies, we will not use these tools to include you in remarketing activities.
Minor clients
If a service is booked or used by a minor, we may, depending on the nature of the service, require the consent or presence of a legal guardian. For minors, we process only the data necessary for communication, booking, and the safe provision of the service.
Your rights
In connection with the processing of personal data, you have in particular the right to:
- request access to your personal data,
- request correction of inaccurate data,
- request deletion of data if there is no legal reason for its further storage,
- request restriction of processing,
- object to processing based on legitimate interest,
- request data portability, where the legal conditions are met,
- withdraw consent at any time if processing is based on consent,
- lodge a complaint with the Office for Personal Data Protection.
Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
How to contact us
If you have any questions about the processing of personal data, you can contact us at:
You may include the following in the subject line of your message: Personal Data Protection.
Changes to this document
We may update this document, especially if there are changes to our services, technical website setup, booking system, cookie tools, or legal requirements. The current version will always be available on this page.