This is an English translation provided for convenience. In case of any discrepancy, the Hungarian version shall prevail.
Privacy Notice
LORINCZ Studio
In force: from 1 July 2026 until withdrawn
LORINCZ Studio (the "Service Provider" / "Data Controller") is committed to protecting the personal data of its Guests. This notice has been prepared on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (the "Information Act").
1. Details of the data controller
| Data controller | Lőrincz Bence, sole trader (LORINCZ Studio) |
| Registered seat | 1171 Budapest, Almafa utca 33., Hungary |
| Tax number | 91477024-1-42 |
| Registration number | 61226722 |
| info@lorinczstudio.hu | |
| Phone | +36 20 404 5565 |
2. Categories, purposes and legal basis of personal data processed
| Data category | Purpose of processing | Legal basis | Retention period |
|---|---|---|---|
| Name | Identifying the booking, addressing the Guest, performance of the service | Performance of a contract (GDPR Art. 6(1)(b)) | For the lifetime of the account, or a reasonable period after the service has been performed |
| E-mail address | Booking confirmation, cancellation/amendment notifications, correspondence, account authentication | Performance of a contract (GDPR Art. 6(1)(b)) | For the lifetime of the account |
| Phone number (optional) | Correspondence, urgent notification of booking changes | Performance of a contract / consent (GDPR Art. 6(1)(b) / (a)) | For the lifetime of the account |
| Booking data (service, barber, date, time, status) | Provision and recording of the service | Performance of a contract (GDPR Art. 6(1)(b)) | For the lifetime of the account, or as required by applicable statutory retention periods |
| Contact message (name, e-mail, message) | Responding to the enquiry | Consent (GDPR Art. 6(1)(a)) | A reasonable period after the enquiry has been answered |
| Misuse/blacklist data (fact of no-show, repeated lateness, inappropriate conduct) | Protection of the salon and its clientele, documenting refusal of service | Legitimate interest (GDPR Art. 6(1)(f)) | For as long as the legitimate interest subsists |
The Service Provider does not systematically process special category (health) data. Where a Guest discloses health-related information (e.g. allergy, skin condition) to ensure the service is carried out safely, the Barber takes it into account only on-site, for the purpose of performing the service, and does not retain it on an ongoing basis.
3. How the data is processed
3.1. The Service Provider stores personal data electronically, within the booking system.
3.2. The Service Provider applies appropriate technical and organisational measures to protect the data (access restrictions, encrypted data transfer, access management).
3.3. Only the Service Provider and the staff carrying out the services (barbers) have access to the data, to the extent necessary to perform their duties.
4. Data processors
The Service Provider engages the following data processors for its data processing activities:
- Application, database and authentication service: Lovable Cloud (running on Supabase infrastructure) – storage and management of booking data and user accounts.
- Web hosting / CDN: Cloudflare – serving the website.
- Transactional e-mail delivery: Lovable Cloud's built-in e-mail service – delivery of booking confirmation, cancellation and notification e-mails.
- E-mail mailbox hosting: Rackhost Zrt. – operation of the info@ and foglalas@ mailboxes.
The data processors process the data solely on the instructions of the Service Provider, to the extent necessary to achieve the purposes set out above.
5. Data transfers
The Service Provider does not transfer personal data to third parties beyond the data processors listed above, unless required to do so by law or where the Guest has expressly consented to such transfer.
6. Rights of the data subject (Guest)
Under the GDPR, the Guest may exercise the following rights:
- Right of access: to request information on what data the Service Provider processes about them.
- Right to rectification: to request correction of inaccurate data.
- Right to erasure ("right to be forgotten"): to request deletion of their data, within the limits of statutory retention obligations and obligations based on legitimate interest.
- Right to restriction of processing.
- Right to data portability.
- Right to object to processing based on legitimate interest.
- Right to withdraw consent (for processing based on consent), without affecting the lawfulness of processing carried out before the withdrawal.
The Guest may exercise the above rights by writing to info@lorinczstudio.huor at the Service Provider's registered seat. The Service Provider will deal with the request within the statutory time limit from the date of receipt.
7. Account deletion and the blacklist
7.1. The Guest may request deletion of their account at any time at info@lorinczstudio.hu.
7.2. In the cases set out in point 6 of the Terms and Conditions (repeated no-shows, regular last-minute cancellations, regular lateness, inappropriate conduct), the Service Provider may, on the basis of its legitimate interest, place the Guest on the blacklist. In doing so, the Service Provider processes the minimum data necessary for the block (the fact and reason for the block) for as long as the legitimate interest subsists. The Guest may object to this processing using the contact details given above.
8. Cookies
The website may use cookies necessary for its operation and, subject to the Guest's consent, cookies for statistical/analytical purposes. Detailed information on cookies is provided in the Cookie Notice.
9. Remedies
9.1. If the Guest considers that the Service Provider's processing of their data infringes their rights, they may lodge a complaint with the Service Provider at info@lorinczstudio.hu.
9.2. The Guest is entitled to lodge a complaint with the supervisory authority:
National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary
Postal address: 1363 Budapest, Pf. 9., Hungary
E-mail: ugyfelszolgalat@naih.hu
Website: https://naih.hu
9.3. The Guest may also bring proceedings before a court if their rights have been infringed.