Draft for review. Have the text reviewed by a lawyer before publishing.
Data controller
Katerina Koleva, a self-employed professional makeup artist providing services under the name “The House of Beauty by KK”, with correspondence address 20A Slav Karaslavov St., Sofia. Contact for data protection questions: contacts@katerinakoleva.com, phone +359 893 717 160.
What data we collect
- Enquiries and forms (contact, gift vouchers, online course waitlist): name, email, phone and your message.
- Online booking via Cal.com: name, email, phone (if provided), chosen service, date and time, notes.
- Communication by phone, Viber, WhatsApp, Instagram and Facebook – the data you send us.
- Technical and analytics data – only with your consent (see the Cookie policy).
Why we use the data
| Purpose | Legal basis |
|---|---|
| Replying to enquiries, booking and delivering a service or course | Steps prior to and performance of a contract (Art. 6(1)(b) GDPR) |
| Accounting and tax obligations | Legal obligation (Art. 6(1)(c) GDPR) |
| Analytics and ad measurement | Consent (Art. 6(1)(a) GDPR) |
| Abuse prevention and website security | Legitimate interest (Art. 6(1)(f) GDPR) |
Who we share data with
We use trusted processors that act only on our instructions:
- Amazon Web Services – website hosting and email delivery (EU).
- Cal.com – online booking calendar.
- Google (Tag Manager, Analytics, Ads, Maps) – only with your consent or when you explicitly load the map.
- Meta Platforms (Facebook/Instagram) – ad measurement, only with your consent.
Where data is transferred outside the EEA, this relies on an EU adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses.
How long we keep data
- Enquiries without a subsequent contract – up to 12 months.
- Booking and course data – up to 3 years after the last service.
- Accounting records – as required by the Bulgarian Accountancy Act.
- Online course waitlist – until you unsubscribe or the courses launch.
Your rights
You have the right to access, rectify, erase, restrict processing, data portability and to object, and to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). Contact us at [email].
You may lodge a complaint with the Bulgarian Commission for Personal Data Protection – 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg.
Changes
We may update this policy. The date of the latest change is shown at the top of the page.