Privacy notice

American Hair Lines Barber Shop is operated by Erdei Márk, who is also the controller of the data you enter on this site.

Shop and postal address: Várkörút 58, 8000 Székesfehérvár, Hungary. Phone: +36 70 544 0994. Email: rdbrandbymark@gmail.com. Website: rdcltr.com.

Send any privacy question, request or complaint to the email address above, or call us. We are not required to appoint a data protection officer, so requests are handled directly by the operator.

When you book: your name, phone number and email address, the service, the barber, the appointment time and the status of the booking. Without these we cannot hold the chair for you or tell you if something changes.

When you create an account: your email address, an encrypted password, your name and your phone number. If you sign in with Google we receive your name and email address from Google, and we neither store nor see a password.

From running the site: the cookies that keep you signed in, your language choice, and automatic server error logs. To prevent abuse, the booking form counts incoming requests in server memory only, temporarily; that count is never written to storage and is not tied to a person.

We do not ask for or process special category data such as health information, and we carry out no automated decision-making or profiling.

Booking data is processed to provide the service, that is, to perform the contract between us, under Article 6(1)(b) GDPR.

Confirmation, change and reminder emails are part of fulfilling that booking, so they rest on the same legal basis. They are not newsletters: we send no marketing, and we pass your data to no one for that purpose.

Technical data is processed on the basis of our legitimate interest in the security of the system and the prevention of abuse, under Article 6(1)(f) GDPR.

Where an invoice is issued, keeping it is a legal obligation under Article 6(1)(c) GDPR.

Booking data is kept for 2 years after the appointment, so returning customers keep their history and a later complaint can still be investigated.

Account data is processed for as long as your account exists. You can ask us to delete it at any time using the contact details above, and we will, except where the law requires us to keep it.

Invoices must be kept for 8 years under Hungarian accounting law. Error logs are retained for at most 30 days.

We do not sell your data, publish it, or use it for marketing. We rely on the following processors to run the site, each only to the extent their own task requires:

Supabase Inc.: the database and user accounts. Vercel Inc.: serving the website and hosting. Resend: delivering confirmation, change and reminder emails. Google Ireland Limited: only if you sign in with a Google account.

These providers may operate infrastructure outside the European Union, typically in the United States. Such transfers rest on the standard contractual clauses adopted by the European Commission.

Beyond this we disclose data only where an authority or a court legally compels us to.

The site uses only strictly necessary cookies. They keep your signed-in session and remember your language. There are no analytics, advertising or profiling cookies and no third-party tracking code, so we do not ask for cookie consent.

If you sign in during a booking, the details you already entered are held temporarily in your browser's sessionStorage so you can carry on where you left off. Your browser clears it when you close it, and it never reaches us.

Traffic between the site and our servers is encrypted end to end. Passwords are never stored in readable form, only as an irreversible hash.

Booking data is accessible only to the operator and authorised staff, after authentication. Further access rules at the database level limit who can see what.

The management link in your confirmation email is unique and cannot be guessed, so please do not share it with anyone.

You may request access to the data we hold about you, its correction or erasure, restriction of processing, object to processing based on legitimate interest, and ask for your data in a machine-readable form, either for yourself or to be sent to another controller.

Send your request to the email address above. We respond within one month at the latest, free of charge.

If you believe your data is being handled unlawfully, you may complain to the Hungarian National Authority for Data Protection and Freedom of Information (1055 Budapest, Falk Miksa utca 9-11., phone +36 1 391 1400, ugyfelszolgalat@naih.hu), or take the matter to the court with jurisdiction over your place of residence.

If the service changes and the processing changes with it, the updated notice is published on this page with a new date above. It is worth checking now and then.