Privacy Policy

1. Data controller

The controller of your personal data is Brud Rud s.r.o., company ID 198 41 426, registered at Konviktská 291/24, 110 00 Prague 1, operating Next Level Barberat Vojenova 2540/8, 180 00 Prague 8. Contact: phone +420 777 799 482.

2. What data we process

When you join our loyalty programme (10% cashback) we process the name and e-mail address you give us. For online bookings, the Reservio booking system processes the data needed to arrange your appointment.

If you leave your e-mail in the offer form on this website, we additionally process the date and time of submission, the IP address the form was sent from, the page you filled it in on, and the exact wording of the consent shown to you at that moment. We keep this so we can demonstrate when and to what you gave consent.

3. Purpose and legal basis

Data from the loyalty sign-up and from the offer form on the website is processed in order to send commercial and marketing messages (offers, discounts, news) on the basis of your consent (Art. 6(1)(a) GDPR and § 7(2) of Act No. 480/2004 Coll.). You confirm the consent by clicking a link in an e-mail we send you right away — until you do, no further messages are sent to you. Consent is voluntary and you can withdraw it at any time, free of charge, using the link in the footer of every e-mail; withdrawal does not affect the lawfulness of processing before it.

When you submit the form we process your IP address, and your browser solves a short computation that tells a human from a bot. This runs entirely on our own servers, with no third-party service involved. The basis is our legitimate interest (Art. 6(1)(f) GDPR) — without this protection the form would serve to send unsolicited mail to other people's addresses.

4. Processors

We use the SmartEmailing platform (SmartSelling a.s.) to send e-mails. Bookings run on Reservio (Reservio s.r.o.). Marketing automation is handled by Boostware. The website and the form run on Vercel servers, and traffic measurement is provided by Google Ireland, only if you consent to it in the cookie banner. These processors handle the data under a data processing agreement and in line with the GDPR.

5. Retention

We keep the data for as long as your consent lasts, at most 3 years from the moment it was given, or until it is withdrawn — whichever comes first. If you do not confirm the consent by clicking the link in our e-mail, we delete the record within 30 days. The consent record (time, IP address and the wording you were shown) is kept for the same period as the consent itself, as it is our proof that we acted lawfully. Once consent is withdrawn or the period lapses, we remove the data from our database.

6. Your rights

You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, and to object. You can withdraw consent to commercial messages at any time (via the link in every e-mail or the contact above). You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (uoou.cz).

7. Cookies

The website uses essential cookies to function. Analytics and marketing cookies are set only with your consent through the cookie banner.