Terms of Use and Privacy Policy

Effective from 13 July 2026

1. Who we are

The booking system and salon websites are technically operated by Embly s.r.o. (the “platform operator”) as a solution for salons and service providers (the “salon”).

With respect to the personal data you enter when booking, the data controller is the salon you are booking with — its identification and contact details can be found in the contact section of this website. Embly s.r.o. acts as a processor within the meaning of Art. 28 of Regulation (EU) 2016/679 (GDPR) — it processes the data solely on behalf of the salon, on its instructions and for the purposes listed below.

2. Booking an appointment

A booking is created by submitting the booking form and is honoured by the salon by providing the service at the booked time. If you provide an e-mail address, we will send you a booking confirmation (usually with an attachment to add the appointment to your calendar) and a reminder one day before the appointment. Booking is free of charge; you pay for the service directly at the salon according to its price list.

3. Cancelling a booking

You can cancel your booking online via the link in the confirmation e-mail, at the latest within the notice period set by the salon (stated in the confirmation e-mail). After this period, please contact the salon directly by phone. The salon may cancel a booking; if you provided an e-mail address, we will notify you of the cancellation.

4. What data we process

When you create a booking we process: first and last name, phone number, e-mail address (if provided) and booking details (selected service, time, selected staff member). We do not request or process any other data.

5. Purpose and legal basis

We process the data solely for: creating and managing the booking, sending the confirmation, the appointment reminder and a notice of any cancellation. The legal basis is the performance of a contract to which you are a party (booking of a service) under Art. 6(1)(b) GDPR. We do not use your data for marketing and will not send you any commercial communications.

6. Retention

Booking data is retained for the duration of the salon’s contractual relationship with the platform operator, at most until the salon’s account is deleted or a justified erasure request is fulfilled. The salon may have its own statutory retention obligations (e.g. accounting records), which are governed by its own policies.

7. Recipients and sub-processors

The data is accessible to the salon you booked with and to the platform operator as its processor. We use the following sub-processors to run the service:

— a hosting provider with servers in the European Union,
— an e-mail (SMTP) provider for sending confirmations and reminders,
Google Ireland Ltd. (Google Calendar) — only where the salon has calendar synchronisation enabled; in that case booking details (name, contact, time) are also transferred to the salon’s Google calendar. Any transfer outside the EU relies on the EU Standard Contractual Clauses.

We do not sell the data or share it with any other third parties.

8. Security

Communication with the website is encrypted (HTTPS). Booking data is accessible only to the salon via a secured login and to authorised personnel of the platform operator to the extent necessary for operation and support. Data is backed up regularly.

9. Cookies

This website uses only technical cookies strictly necessary for the booking to work — a temporary session cookie is created only when a booking is submitted (it carries the confirmation of its creation). We use no analytics, marketing or tracking cookies and do not share cookie data with third parties. Strictly necessary technical cookies do not require consent under applicable law.

10. Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and the right to object. Please direct requests primarily to the salon you booked with (the data controller) or to the platform operator — requests are handled without undue delay, at the latest within one month. You also have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava (dataprotection.gov.sk), or with the supervisory authority in your country of residence.

11. Platform operator contact

Embly s.r.o.
[DOPLŇTE: sídlo]
IČO: [DOPLŇTE: IČO]
E-mail: [DOPLŇTE: e-mail]