Privacy Policy

This privacy policy describes how Barbermo OÜ collects, uses, and protects your personal data. We take your privacy protection very seriously and are committed to protecting your personal data in accordance with the European Union General Data Protection Regulation (GDPR) and the laws of the Republic of Estonia.

1. Data Controller

2. Personal Data Collection

We collect your personal data only for service provision and on legal grounds:

• Name and contact details - for making and confirming bookings
• Email address - for service notifications and booking reminders
• Phone number - for confirming bookings and quick contact
• Service preferences - for providing personalized service

Note: We do not collect or process payment data. All payments are made on-site in cash or by card.

3. Legal Basis for Data Processing

We process your personal data on the following legal grounds:

• Contractual obligation - for service provision
• Legitimate interest - for customer service and accounting
• Consent - for marketing activities (if you have given consent)
• Legal obligation - for taxation and accounting

4. Data Usage

We use your data only for:

• Planning and confirming bookings
• Providing service and ensuring quality
• Customer service and communication
• Accounting and taxation
• Fulfilling legal obligations
• Marketing activities (only with consent)

5. Data Retention

We retain your data for the following periods:

• Client data - 3 years after the last service provision
• Accounting documents - 7 years based on legal obligation
• Marketing data - until consent is withdrawn

6. Data Sharing

We do not share your personal data with third parties, except:

• Setmore - booking system (your data is stored on their servers)
• Vercel - website hosting provider (only technical data, not your personal data)
• Tax Authority - based on legal obligation

Note: We do not have our own database. All booking data is processed in the Setmore system.

7. Data Security

We implement appropriate measures to protect your personal data:

• Secure website (SSL encryption)
• Limited access to personal data
• Setmore system security (booking data)
• Vercel hosting security (website files only)

Note: Since we do not collect data directly, data security depends mainly on Setmore service security. Vercel collects only technical data (IP addresses, logs), not your personal data.

8. Your Rights

Under GDPR, you have the right to:

• Access your data (contact info@barbermo.ee)
• Correct data (contact info@barbermo.ee)
• Delete data (contact info@barbermo.ee)
• Object to data processing (contact info@barbermo.ee)
• Data portability (contact info@barbermo.ee)
• Withdraw consent (contact info@barbermo.ee)

Note: All data requests must be submitted in writing by email. We will respond within 30 days.

9. Cookies

10. Privacy Policy Changes

We may update this privacy policy from time to time. Important changes will be notified to you by email or on our website.

11. Contact

12. Filing Complaints

If you believe that the processing of your personal data violates laws, you may file a complaint with the Data Protection Inspectorate (www.aki.ee).