Privacy Policy
This privacy policy forms part of Aura Massage’s terms and conditions. It
explains what personal data we collect, why we collect it, and what rights you
have over it.
Last updated: 2026
1. Who Controls Your Data
The data controller is:
BEAUTY Lab s.r.o., trading as Aura Massage
IČO: 11677805
Registered office: Rybná 716/24, Staré Město, 110 00 Praha, Czech Republic
Salon: Pštrossova 1895/14, 110 00 Praha 1 – Nové Město
Email: info@auramassage.cz
Aura Massage
Pštrossova 1895/14, 110 00 Praha 1 – Nové Město, Czech Republic
Email: info@auramassage.cz
Phone: +420 778 555 378
We operate a single salon at the address above and offer our services in
the Czech Republic. Send any question about your data, or report any security
incident, to the email address above.
We have not appointed a Data Protection Officer under Article 37 of
Regulation (EU) 2016/679 (“GDPR”), as we are not required to.
2. What We Collect
When you contact us or book
- Your name, or the name you give us
- Phone number, and your WhatsApp or Telegram handle if you write to us
there - Email address, if you email us
- Booking details: date, time, which massage, session length, and any
preferences or requests you tell us - For outcall bookings: the address you want us to come to
When you visit this website
- IP address and approximate location derived from it
- Device type, browser and operating system
- Pages viewed and how you arrived at the site
- Cookie identifiers, where you have consented to them
Payment
We take payment in cash at the salon. We do not process card payments and
we do not collect or store any payment card details.
You do not need to give us a real name to book. We ask only for what we
need to hold the appointment and contact you about it.
3. Why We Use It, and on What Legal Basis
| Purpose | Legal basis |
|---|---|
| Taking and confirming your booking, and contacting you about it | Performance of a contract (Art. 6(1)(b)) |
| Keeping accounting and tax records | Legal obligation (Art. 6(1)(c)) |
| Keeping the website working and secure | Legitimate interest (Art. 6(1)(f)) |
| Analytics and non-essential cookies | Consent (Art. 6(1)(a)) |
| Sending you offers or news | Consent (Art. 6(1)(a)) |
Where we rely on consent, you can withdraw it at any time. Withdrawing
consent does not affect processing that already happened.
4. Who Else Sees It
We do not sell your data and we do not share it with third parties for
their own purposes. We do use service providers who process data on our
behalf:
- Our website host
- Messaging platforms, where you choose to write to us on them —
WhatsApp and Telegram operate under their own privacy policies - Analytics providers, where you have consented to cookies
Because we take payment in cash, no payment processor is involved and no
financial data leaves the salon.
We may also disclose data where the law requires it, or to protect our
rights or the safety of our staff and guests.
Your data is not transferred outside the European Economic Area except
where a provider listed above does so under standard contractual clauses or
another lawful transfer mechanism.
5. How Long We Keep It
- Booking messages and contact details: deleted once the
appointment has passed and there is no outstanding matter, unless you ask us
to keep them for future bookings - Accounting records: kept for the period required by
Czech tax and accounting law - Website and analytics data: kept for the retention
period set by the provider, or until you withdraw consent - Marketing consent: kept until you withdraw it
After these periods the data is deleted or anonymised.
6. Your Rights
Under the GDPR you have the right to:
- Access — ask what data we hold about you
- Rectification — have inaccurate data corrected
- Erasure — have your data deleted where we no longer
need it - Restriction — ask us to limit how we use it
- Objection — object to processing based on legitimate
interest - Portability — receive your data in a portable format
- Withdraw consent — at any time, without giving a
reason
Write to info@auramassage.cz and we will respond within one month.
If you are not satisfied with how we have handled your data, you can
complain to the Czech supervisory authority:
Úřad pro ochranu osobních údajů
Pplk. Sochora 27, 170 00 Praha 7
uoou.gov.cz
7. How We Protect It
- The website runs over an encrypted HTTPS connection
- Access to booking information is limited to staff who need it, and they
are bound by confidentiality - We do not discuss guests with anyone, and we do not keep records of your
visit beyond what a booking requires - We hold no payment or card data at all, because we take cash only
8. Cookies
We use cookies to make the site work and, with your consent, to understand
how it is used.
- Essential cookies keep the site functioning — including
remembering that you have confirmed your age. These do not require
consent. - Analytics cookies tell us which pages are visited and
how people arrive. These are only set if you accept them.
You can accept or decline non-essential cookies when you first visit, and
change your choice at any time. You can also block or delete cookies in your
browser settings, though the site may not work correctly without the essential
ones.
9. Changes to This Policy
If we change this policy we will update the date at the top of the page.
Significant changes will be noted on the site.