Personal data protection

1. Data controller

The data controller is VHAYE&KESS ENTERPRISES spółka z ograniczoną odpowiedzialnością, ul. Skierniewicka 14, 01-230 Warszawa, Poland, NIP 5252877627, REGON 520013649, KRS 0000923326 (the "Studio").

Privacy contact: privacy@vibratewarsaw.com

2. Data collection and usage

We process your data for the following purposes:

• General enquiries: handling form submissions (Art. 6(1)(a) GDPR - consent).
• Service enquiries: preparing quotes or bookings (Art. 6(1)(b) GDPR - pre-contractual steps).
• Diagnostic profile: assessing hair condition before consultation (Art. 6(1)(b) GDPR - necessity for service delivery).
• Security: server logs processed by our hosting provider (Art. 6(1)(f) GDPR - legitimate interest).

3. Data recipients

We may share your data with trusted technology partners:

• Vercel Inc.: web hosting and IT infrastructure.
• Resend Inc.: email notification delivery.
• Booksy Inc.: online booking system (separate data controller).

For data transfers outside the EEA, we rely on Standard Contractual Clauses (SCC) approved by the European Commission.

4. Your rights

You have the right to access, rectify, or erase your data ("right to be forgotten"), restrict processing, data portability, and the right to object.

To exercise your rights, contact: privacy@vibratewarsaw.com

You also have the right to lodge a complaint with your local data protection authority.