Legal Documents
Privacy Policy
Last updated: 21 June 2026
1. Data Controller
The data controller is: Maja Hušić s.p. Vodnikova cesta 211, 1000 Ljubljana, Slovenia Email: maja.bogataj@telemach.net Phone: +386 31 384 676 (Maja) / +386 40 284 288 (Neđad)
2. What Data We Collect
Booking customers
- first and last name
- phone number
- email address
- selected service and appointment time
- therapist name
- service price
- notes or special requests (optional)
This data is necessary to process and confirm your booking.
Website visitors
- Page View (PageView): every visit to any page on the site
- Booking started (InitiateCheckout): when you select a service category; no personal data is transmitted
- Booking completed (Purchase): booking value, currency (EUR) and service category identifier
The Meta Pixel does not activate until you give consent via the cookie banner shown on your first visit.
Website administrator
Access to the admin panel requires an email address and password, stored only in Firebase Authentication (Google).
3. Legal Basis for Processing
- Contract (Art. 6(1)(b) GDPR): processing necessary to fulfil your booking, confirm your appointment and communicate with you
- Consent (Art. 6(1)(a) GDPR): Meta Pixel cookies — only when you provide explicit consent via the cookie banner
- Legal obligation (Art. 6(1)(c) GDPR): retention of business records as required by Slovenian tax law (ZDavP-2)
4. Third Parties We Share Data With
- Google LLC (Firebase Firestore and Authentication) — booking storage and admin panel. Data stored in European data centres. Privacy policy: policies.google.com/privacy
- Meta Platforms Ireland Ltd. (Meta Pixel) — only with your consent, for analytics and advertising. Privacy policy: facebook.com/privacy/policy
- Resend Inc. — delivery of booking confirmation emails to you and the salon owner. Privacy policy: resend.com/privacy
We do not sell your data or share it with third parties for commercial purposes. Some of the listed providers (notably Resend Inc. and Meta Platforms Ireland Ltd.) may process data outside the European Economic Area, primarily in the United States. These transfers are based on the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, the EU–US Data Privacy Framework. Google LLC (Firebase) stores data in European data centers (europe-west3).
5. Data Retention
- Booking records and customer contact data: 5 years from the date of service (required by Slovenian tax law, ZDavP-2)
- Meta Pixel: Meta typically retains event data for up to 2 years; details available in Meta's privacy policy.
- Email messages: until you request deletion
- Admin login credentials: until account deactivation
6. Your Rights
Under GDPR, you have the following rights:
- Right of access: request a copy of the personal data we hold about you
- Right to rectification: request correction of inaccurate or incomplete data
- Right to erasure: request deletion of your data (right to be forgotten), except where we are legally required to retain it
- Right to portability: request your data in a structured, machine-readable format
- Right to object: withdraw your cookie consent at any time and we will immediately stop processing that data
- Right to lodge a complaint with the Slovenian Information Commissioner: www.ip-rs.si, info.ip@ip-rs.si
To exercise your rights, contact us at: maja.bogataj@telemach.net
7. Cookies
The masazemaya.si website uses marketing cookies (Meta Pixel) only with your explicit consent. Strictly necessary cookies (e.g. admin login session) do not require consent.
You can change your cookie preferences at any time:
8. Contact
For privacy-related questions or to exercise your rights: Maya Massage Salon — Maja Hušić s.p. Vodnikova cesta 211, 1000 Ljubljana, Slovenia Email: maja.bogataj@telemach.net Phone: +386 31 384 676 (Maja) / +386 40 284 288 (Neđad)