Dear customer, when booking an appointment, using our services, contacting us through the website, or visiting the website, we process some of your personal data. Protecting your personal data and processing it in a lawful, fair, and transparent manner is important to us. In this policy, you will learn what personal data we process, for what purposes, on what legal basis, how long we keep it, and what rights you have.
1. Who processes your personal data?
The data controller is the company Gentlemans World BA s.r.o., with registered office at Panská 240/6, 811 01 Bratislava – Old Town district, Slovak Republic, Company ID: 52 649 636, Tax ID: 2121124093, VAT ID: SK2121124093, website: gentlemansworld.sk, phone: +421 948 927 486 (hereinafter referred to as "controller").
This policy applies to the processing of personal data for which Gentlemans World BA s.r.o. is responsible. If a particular facility or service is operated by another legal entity, information about the respective controller must be provided at the time of booking or in a separate privacy notice.
2. What personal data do we process?
Depending on how you communicate with us or use our services, we may process mainly the following personal data:
a) identification and contact details – first name, last name, phone number, and email address;
b) booking data – selected facility, service, barber, date and time of booking, booking status, its change or cancellation, possibly information about no-show at the appointment and notes you voluntarily provide to us;
c) payment and invoicing data – payment data and its status, invoicing details, address, trade name, Company ID, Tax ID, and VAT ID if you request a document issued to a business entity; we do not process full payment card data if payment is handled by a payment service provider;
d) communication content – data provided in the contact form, email, telephone, or other communication;
e) technical data from website use – IP address, device and browser data, operational and security logs, and cookie identifiers; analytical and marketing data are processed only to the extent permitted by your cookie settings;
f) photos or audiovisual recordings – only if you have given specific consent for their creation and use.
Providing data necessary to create and handle a booking is a contractual requirement. Without this data, we may not be able to create your booking or provide the ordered service. Providing data for marketing, analytical or advertising cookies, and photos is voluntary.
3. For what purpose and on what legal basis do we process your personal data?
We process your personal data for the following purposes and legal bases:
a) creation, confirmation, modification, cancellation, and handling of booking and provision of the ordered service – processing is necessary for taking steps prior to concluding the contract and for the performance of the contract under Article 6(1)(b) GDPR;
b) handling contact inquiries – depending on the nature of the inquiry, this is either taking steps prior to concluding the contract under Article 6(1)(b) GDPR or our legitimate interest in responding to your request under Article 6(1)(f) GDPR;
c) bookkeeping, issuing and archiving accounting and tax documents, and fulfilling other legal obligations – compliance with a legal obligation under Article 6(1)(c) GDPR;
d) recording changes and cancellations of bookings, handling no-shows, protecting our rights, asserting or defending legal claims, and preventing abuse of the booking system – our legitimate interest in the proper functioning of operations and protecting rights under Article 6(1)(f) GDPR;
e) securing the website, fraud prevention, and protecting information systems – our legitimate interest in the security and functionality of services under Article 6(1)(f) GDPR;
f) sending marketing notifications, using analytical and marketing cookies, and creating or publishing photos and audiovisual recordings – your consent under Article 6(1)(a) GDPR if consent is required;
g) fulfilling obligations to public authorities – compliance with a legal obligation under Article 6(1)(c) GDPR.
When processing based on legitimate interest, we always assess whether your interests or fundamental rights and freedoms override our interest.
4. How can you give us consent?
You can give consent by a separate and voluntary action, for example by ticking the appropriate box, setting cookies in the cookie banner, or signing a separate consent when taking a photo or audiovisual recording. Consent for marketing, analytical or advertising cookies, or for publishing photos is not a condition for making a booking or providing the service.
Consent is generally not required for making and handling bookings because the data is processed to take steps prior to concluding the contract and to perform the contract.
5. How can you withdraw consent?
You can withdraw consent at any time through the contact options provided on the website gentlemansworld.sk or in writing to the controller’s registered office. Consent to cookies can be changed or withdrawn via the "Cookie Settings" link on the website.
Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal. After withdrawal, we will stop processing data for that purpose unless we have another legal reason for further storage or processing.
6. To whom do we provide your data?
Your personal data may be made available or provided to the following recipients or categories of recipients to the necessary extent:
a) authorized employees and collaborators of the controller who need the data to handle the booking and provide the service;
b) the booking system provider and technical support for the booking system;
c) providers of web hosting, website management, email, cloud, and IT services;
d) external accountant, tax advisor, auditor, legal representative, or other professional advisors;
e) banks and payment service providers if you use cashless or online payment;
f) Google Ireland Limited when using Google Analytics, Google Ads, or Google Tag Manager services, and Meta Platforms Ireland Limited when using Meta Pixel, if you have enabled the relevant cookies or given consent;
g) public authorities, courts, police, or other authorized entities if the law requires us or it is necessary to protect our rights.
We have concluded data processing agreements or otherwise ensure an adequate level of data protection with providers who process personal data on our behalf.
7. How long do we keep your personal data?
We retain personal data only for the period necessary to fulfill the purpose of processing:
a) booking data and provided service – during the handling of the booking and subsequently for the period needed to assert or defend legal claims according to relevant limitation periods; if a dispute or proceeding arises, until its final conclusion and fulfillment of related obligations;
b) data from contact inquiries that did not lead to a booking or contract – typically up to 12 months after handling the inquiry, unless needed longer to protect legal claims;
c) accounting and tax documents – for the period prescribed by relevant legal regulations, usually 10 years following the year to which they pertain;
d) data processed based on consent for marketing – until withdrawal of consent, but no longer than 3 years from its granting or last active interaction if no special law or consent wording specifies a shorter period;
e) photos and audiovisual recordings processed based on consent – during the period specified in the particular consent or until its withdrawal;
f) data obtained through cookies – for the period specified in the cookie settings or in separate cookie usage policies.
After the applicable period expires, we securely delete or anonymize the data, unless further retention is required by law or for the protection of legal claims.
8. Where do we transfer your personal data?
As a rule, we do not transfer your personal data to countries outside the European Economic Area. However, when using certain third-party tools, there may be a transfer or remote access to certain technical, analytical, or marketing data from a third country, particularly from the USA. We use such tools for analytical and marketing purposes only in accordance with your cookie settings and, where required, based on your consent.
Google Analytics (Google Ireland Limited) – analysis of website traffic and usage
Privacy Policy: https://policies.google.com/privacy
Google Ads and Google Tag Manager – measurement of ad performance and management of tags and scripts; Google Tag Manager itself typically serves for managing tools, with the scope of processing depending on the implemented tags.
Privacy Policy: https://policies.google.com/privacy
Meta Pixel (Meta Platforms Ireland Limited) – conversion measurement and ad optimization on Facebook and Instagram platforms.
Privacy Policy: https://www.facebook.com/privacy/policy
If personal data is transferred to a third country, the transfer is secured by the appropriate legal mechanism under the GDPR, especially the European Commission's adequacy decision, including the EU–U.S. Data Privacy Framework for certified recipients, or standard contractual clauses approved by the European Commission, supplemented if necessary by additional protective measures.
9. Are you dissatisfied with the processing of your data?
If you are dissatisfied with how we process your personal data, you may contact us through the contact options on the website. gentlemansworld.sk or in writing at the address of our registered office.
You also have the right to file a complaint with the Office for Personal Data Protection of the Slovak Republic if you believe that the processing of your personal data violates legal regulations. More information can be found at dataprotection.gov.sk.
10. How do we process your personal data?
We process personal data electronically and, if necessary, also in paper form, primarily through the website, reservation system, email, accounting or invoicing system, cloud storage, and internal records.
We do not perform automated individual decision-making, including profiling, which would have legal effects on you or similarly significantly affect you. Automatic booking confirmations or reminders are not considered such decision-making.
11. How do we ensure the protection of your personal data?
We implement appropriate technical and organizational measures corresponding to the nature, scope, and risks of processing to protect personal data. These include managing access rights, password use, appropriate system security, backups, updates, data transmission protection, secure document storage, and training of persons working with personal data. Access to personal data is granted only to persons who need it to fulfill work or contractual duties and are bound by confidentiality.
12. What rights do you have?
a) Right of access to data. You have the right to obtain confirmation whether we process your personal data and, if so, to access them and receive information about their processing.
b) Right to rectification. You have the right to request correction of inaccurate personal data and completion of incomplete data.
c) Right to erasure. Under the conditions set by the GDPR, you can request the deletion of personal data, especially if they are no longer necessary for the purpose for which they were collected, you withdraw consent and there is no other legal basis, you successfully object to processing, or the data were processed unlawfully. The right to deletion does not apply if further processing is necessary, for example, for compliance with a legal obligation or for establishing, exercising, or defending legal claims.
d) Right to restriction of processing. Under the conditions set by the GDPR, you can request that we restrict the processing of your personal data, for example, while verifying their accuracy or during the assessment of your objection.
e) Right to data portability. If the processing is based on your consent or on a contract and is carried out by automated means, you have the right to receive the data you provided to us in a structured, commonly used, and machine-readable format and, subject to legal conditions, to transfer them to another controller.
f) Right to object. You have the right to object, on grounds relating to your particular situation, to processing based on our legitimate interests. In such a case, we will stop processing personal data unless we demonstrate compelling legitimate grounds overriding your rights and interests, or grounds for establishing, exercising, or defending legal claims. You may object to processing for direct marketing purposes at any time; after objection, we will no longer process data for this purpose.
g) Right to withdraw consent. If we process data based on consent, you may withdraw it at any time without affecting the lawfulness of processing before its withdrawal.
h) Right to lodge a complaint and seek judicial protection. You have the right to lodge a complaint with the supervisory authority and, under the conditions established by legal regulations, to seek protection in court.
13. How can you exercise these rights?
You can submit your request via the contact options provided on the website. gentlemansworld.sk or in writing to Gentlemans World BA s.r.o., Panská 240/6, 811 01 Bratislava – Staré Mesto district, Slovak Republic.
To prevent unauthorized access or modification of data, we may reasonably ask you to verify your identity. We will inform you about the handling of your request without undue delay, usually no later than one month from its receipt. In justified cases, this period may be extended in accordance with GDPR; we will inform you about the extension and its reasons.
Final Provisions
These privacy policies are effective from the date of their publication on the website. Last update: 20 July 2026. We reserve the right to reasonably update the policies, especially in case of changes to the way personal data is processed, services used, or legal regulations. The current version will always be published on the website.
