Bober Beauty · Kraków-Kazimierz
The controller of your personal data is Bober Beauty, ul. Przemyska 4/1, 31-036 Kraków, Poland. For anything concerning personal data, write to kontakt@boberbeauty.pl.
We have not appointed a Data Protection Officer — please use the address above for all matters.
| What | Why | Legal basis | How long |
|---|---|---|---|
| Statistics from Google Analytics 4 (anonymised IP address, device, traffic source) | To see which pages help and which do not | Your consent — Art. 6(1)(a) GDPR | 14 months, or until you withdraw consent |
| Ad click identifiers (gclid, gbraid, wbraid, fbclid) and UTM parameters | To check which ads actually bring clients, so we stop paying for the ones that do not | Your consent — Art. 6(1)(a) GDPR | 90 days |
| Your email address or Instagram handle, if you choose to enter it in the try-on to save a design | To send you the saved manicure, brow or lash design | Your consent — Art. 6(1)(a) GDPR | Until you withdraw consent, no longer than 24 months |
| The photo of your hand in the virtual try-on | Only to show you the colour on your own hand | We do not process it — see the box below | Never stored |
The try-on photo never leaves your phone. All image processing happens in your browser, on your device. The photo is not uploaded to our server, not stored by us and not shared with anyone. Close the tab and it is gone.
To recognise the nails, your browser downloads the MediaPipe model (Google's open-source library) from a content delivery network — only at the moment you add a photo yourself, never before. What travels is the model file; your photo goes nowhere. During that download the CDN sees your IP address, the same as with any file fetched from a website.
We take bookings through Booksy (Booksy International sp. z o.o.). When you tap the booking button you move to Booksy's site, and it is Booksy that collects your name, phone number and email under its own privacy policy. We see that data afterwards, in the salon calendar, and use it only to carry out your visit (Art. 6(1)(b) GDPR) and for accounting (Art. 6(1)(c) GDPR).
Google and Netlify may process data outside the European Economic Area. This happens under standard contractual clauses approved by the European Commission.
We do not sell your data. We do not profile you in a way that produces legal effects for you, and we make no automated decisions about you.
The site runs without analytics or advertising cookies — none of them fire without your consent. Until you agree, the Google scripts are not loaded at all.
You can withdraw consent at any time — right here, or with the "Cookie settings" link in the footer of the home page. Withdrawal does not affect the lawfulness of processing carried out before it.
Your current choice: —
You have the right to access your data, rectify it, erase it, restrict processing, port your data, object to processing, and withdraw consent at any moment. Write to kontakt@boberbeauty.pl — we reply within one month at the latest.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, Poland.
No. Providing data is entirely voluntary. Without cookie consent the site works exactly the same — you can browse the offer, use the try-on and book a visit.
← Back to the main page