Last updated: 08.09.2026
This Privacy Policy sets out how the personal data of users of the website veronikamakarova.com (hereinafter referred to as the “Website”) is processed and protected.
The data controller is:
Name / Business Name: Veronika Makarova
E-mail: info@veronikamakarova.com
The data controller operates within the territory of the Slovak Republic and processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), as well as applicable legislation of the Slovak Republic.
Depending on how users interact with the Website, the following data may be processed:
first and last name;
telephone number;
email address;
information provided by the user when making an enquiry;
information necessary for booking a service;
the content of messages and requests;
technical information about visits to the Website, including IP address, device type, browser and technical data;
information related to the use of cookies.
The data controller does not request or collect personal data that is not necessary for the relevant purpose.
Personal data may be processed for the following purposes:
handling user enquiries;
communicating with clients;
arranging and confirming service appointments;
providing consultations;
organising visits and providing hairdressing services;
responding to user questions;
ensuring the operation and security of the Website;
improving the quality and content of the Website;
analysing Website traffic, where relevant analytical tools are used;
complying with the data controller’s legal obligations;
protecting the data controller’s legitimate interests.
Personal data is not used for purposes incompatible with those for which it was originally collected.
Personal data is processed on the basis of one or more legal grounds provided for under the GDPR, in particular:
Article 6(1)(b) GDPR – processing is necessary for taking steps at the request of the user prior to entering into a contract or for the performance of a contract;
Article 6(1)(c) GDPR – processing is necessary for compliance with a legal obligation;
Article 6(1)(f) GDPR – processing is necessary for the purposes of the legitimate interests pursued by the data controller;
Article 6(1)(a) GDPR – processing is carried out on the basis of the user’s consent, where such consent is required.
To book services, users may use third-party services linked from the Website, including WhatsApp and the online booking system DIKIDI.
When users navigate to the relevant service, they leave the Website, and further processing of personal data is also subject to the rules and privacy policies of the respective third-party service.
The data controller does not control the content or data processing practices of third-party services.
Users are advised to review the privacy policy of the relevant service before providing their personal data.
If a user contacts the data controller via WhatsApp, the information shared during such communication may include their name, telephone number and the content of messages.
This data may be used for:
responding to enquiries;
providing consultations;
arranging the date and time of an appointment;
confirming bookings;
discussing services and client preferences.
The processing of data within WhatsApp itself is also governed by the terms and privacy policy of Meta Platforms, Inc.
Users may be redirected to the DIKIDI service to make an online appointment.
When using the online booking form, users provide the information necessary to arrange their appointment themselves.
Data processing within DIKIDI is also subject to the privacy policy and terms of use of the service itself.
The data controller receives only the information necessary to organise and provide the relevant service.
The Website may use cookies and similar technologies to ensure its proper functioning, store user preferences, maintain security and, where relevant tools are available, analyse Website traffic.
Some cookies may be placed by third-party services.
Detailed information about the cookies used, their purposes, retention periods and available management options is provided in a separate Cookie Policy.
Users may change their cookie settings through the tools available on the Website or through their browser settings.
When analytical or technical tools are used on the Website, certain technical data may be processed automatically, such as:
IP address;
device type;
operating system;
browser type;
date and time of the visit;
pages visited;
source of the visit to the Website;
technical information about interactions with the Website.
This information may be used to ensure security, perform technical maintenance and improve the functioning of the Website.
Where third-party services are used for analytics, the relevant data may also be processed by those services in accordance with their own privacy policies.
The data controller does not sell or disclose personal data to third parties for their own marketing purposes.
Personal data may be made available to third parties only where necessary for:
the operation and technical maintenance of the Website;
providing online booking or communication services;
compliance with legal obligations;
protecting the rights and legitimate interests of the data controller;
using services selected by the user.
Such third-party services may include the hosting provider, technical service providers, online booking services, communication services and other technology providers actually used on the Website.
Some service providers used on the Website or by users when interacting with the data controller may process personal data outside the European Economic Area.
In such cases, data transfers are carried out only where an appropriate legal basis under the GDPR exists and relevant safeguards for the protection of personal data are in place.
Personal data is retained for no longer than necessary to achieve the purposes for which it was collected or for the period required by applicable law.
The retention period may depend on the nature of the data and the purpose of its processing.
After the relevant retention period expires, the data is deleted or otherwise anonymised unless further retention is required by law.
In accordance with the GDPR, users have the right, subject to the conditions laid down by law, to:
obtain information about which of their personal data is being processed;
obtain a copy of their personal data;
request the correction of inaccurate or incomplete data;
request the erasure of personal data;
request restriction of processing;
object to certain types of processing;
receive personal data in a structured, commonly used and machine-readable format, where the right to data portability applies;
withdraw consent at any time, where processing is based on consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
To exercise their rights, users may submit a request to:
E-mail: info@veronikamakarova.com
The data controller may request additional information necessary to verify the identity of the applicant where this is required to protect personal data.
If a user believes that the processing of their personal data violates applicable data protection legislation, they have the right to lodge a complaint with the competent supervisory authority.
In the Slovak Republic, this authority is:
Office for Personal Data Protection of the Slovak Republic
Úrad na ochranu osobných údajov Slovenskej republiky
Galvaniho 7/B
821 04 Bratislava
Slovak Republic
E-mail: statny.dozor@pdp.gov.sk
The Office supervises compliance with personal data protection legislation in the Slovak Republic.
The data controller takes reasonable technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
However, no method of data transmission over the Internet or electronic storage can guarantee absolute security.
The Website contains links to third-party services, including WhatsApp, Instagram and DIKIDI.
When following these links, users leave the Website. The processing of personal data on the relevant third-party websites is governed by the privacy policies and terms of those services.
The data controller is not responsible for the content, security or personal data processing practices of external websites.
The data controller may periodically update this Privacy Policy, for example, when changes are made to the functionality of the Website, the services used or applicable legal requirements.
The current version of the Privacy Policy is always published on this page.
The date of the latest update is indicated at the beginning of the document.
For any questions regarding the processing of personal data, users may contact:
Name / Business Name: Veronika Makarova
E-mail: info@veronikamakarova.com
Effective date: 08.09.2026