Privacy Policy

Last updated: 20.03.2026

1. Data Controller

The data controller is Dynomica Ltd (UIC: 175213159), registered at: Sofia, 5 Razslatitsa St., CEO: Alexander Nenov.

Contact email: info@krasotata.net

2. Data We Collect

When using the Krasotata platform, we collect the following categories of personal data:

2.1. Registration Data

  • First and last name
  • Email address
  • Phone number (optional)
  • Salon name

2.2. Service Usage Data

  • Salon client information (names, emails, phones, visit history)
  • Staff information (names, schedules, services)
  • Booking and appointment data
  • Payment information (processed by a secure payment gateway — we do not store card details)

2.3. Technical Data

  • IP address
  • Browser and device type
  • Date and time of access
  • Session and login cookies

3. Purpose of Processing

We process your personal data for the following purposes:

  • Providing and maintaining the service
  • Managing your account and subscription
  • Sending booking notifications and reminders
  • Improving the Platform and user experience
  • Fulfilling legal obligations
  • Communicating with you on technical and administrative matters

4. Legal Basis

Data processing is based on:

  • Contractual basis — performance of the service you registered for (Art. 6(1)(b) GDPR)
  • Legitimate interest — improving security and functionality (Art. 6(1)(f) GDPR)
  • Legal obligation — tax and accounting legislation (Art. 6(1)(c) GDPR)

5. Sharing Data with Third Parties

We do not sell your personal data. Data may be shared only with:

  • Hosting providers (for data storage)
  • Payment processors (for payment processing)
  • Government authorities (when legally required)

6. Data Retention

  • Account data — until account deletion or 1 year after subscription termination
  • Transaction data — 5 years (per tax legislation)
  • Technical logs — up to 90 days

7. Your Rights

Under Regulation (EU) 2016/679 (GDPR), you have the right to:

  • Access — obtain information about what data we process about you
  • Rectification — request correction of inaccurate data
  • Erasure — request deletion of your data ("right to be forgotten")
  • Restriction — request restriction of processing
  • Portability — receive your data in a structured format
  • Objection — object to processing

To exercise these rights, please contact us at info@krasotata.net.

8. Cookies

The Platform uses cookies for:

  • Session cookies — required for system operation
  • Remember login — if you choose the "Remember me" option
  • Language preferences — remembering the selected language

We do not use advertising or third-party tracking cookies.

9. Data Security

We implement appropriate technical and organizational measures to protect data, including:

  • SSL encryption for all connections
  • Password hashing (bcrypt)
  • Encryption of sensitive settings in the database
  • Daily backups
  • Restricted access to server infrastructure

10. Changes to This Policy

We reserve the right to update this Privacy Policy. In case of significant changes, we will notify you by email or through a notice on the Platform.

11. Contact and Complaints

Dynomica Ltd
Sofia, 5 Razslatitsa St.
UIC: 175213159
Email: info@krasotata.net

If you believe your rights have been violated, you have the right to file a complaint with the Commission for Personal Data Protection (CPDP): www.cpdp.bg.