Privacy policy

Privacy Policy

Effective from 15 October 2026. We provide this information pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Act No. 18/2018 Coll. on the Protection of Personal Data.

1. Controller

elura s.r.o., Nad Hrabinou 4671/72, 949 01 Nitra, Company ID (IČO): 563 60 894, registered in the Commercial Register of the District Court Nitra, Section Sro, Insert No. 63778/N
Salon: Nuvé Beauty, Rázusová 40, 949 01 Nitra
Contact for data protection questions: info@nuvebeauty.sk, +421 911 24 00 24. The controller has not appointed a data protection officer, as it is not required to do so.

2. What data, for what purpose, on what legal basis and for how long

Purpose	Data	Legal basis	Retention period
Processing orders in the online store, delivery, communication	first name, surname, address, e-mail, phone, goods ordered, payment details	performance of a contract – Art. 6(1)(b) GDPR	for the duration of the contract and until the limitation periods expire (usually 4 years)
Booking treatment appointments and providing services in the salon	name, phone, e-mail, appointment, chosen treatment; information about your skin condition that you provide to us for a safe treatment	performance of a contract – Art. 6(1)(b); health data based on your explicit consent – Art. 9(2)(a) GDPR	for the duration of the services, no longer than 3 years from your last visit or until consent is withdrawn
Accounting and taxes	data on invoices and receipts	legal obligation – Art. 6(1)(c) GDPR (Accounting Act)	10 years from the end of the year to which they relate
Handling complaints and withdrawals from contract	identification and contact details, order and defect details	legal obligation – Art. 6(1)(c) GDPR	5 years from resolution
Sending news (newsletter)	e-mail	consent – Art. 6(1)(a) GDPR	until consent is withdrawn (unsubscribe link in every e-mail)
Establishing and defending legal claims, online store security	data necessary for the given purpose, technical data (IP address, device)	legitimate interest – Art. 6(1)(f) GDPR	for the duration of the dispute, or no longer than 1 year for technical logs
Analytics and marketing cookies	online identifiers, website behaviour data	consent – Art. 6(1)(a) GDPR and Section 109(8) of Act No. 452/2021 Coll.	depending on the cookie type, no longer than 2 years

Providing the data necessary to conclude a contract is a contractual requirement; without it we cannot process your order or booking. We do not carry out automated decision-making or profiling with legal effects.

3. Recipients

Shopify International Ltd. (Ireland) – operation of the online store and payment gateway,
payment service providers and the bank – payment processing,
carriers – parcel delivery,
accounting service provider,
providers of booking, e-mail and analytics software,
public authorities, where required by law.

4. Transfers to third countries

Some providers (e.g. Shopify Inc., Canada/USA) may process data outside the EU. Transfers take place on the basis of a European Commission adequacy decision (Canada, EU-US Data Privacy Framework) or standard contractual clauses.

5. Your rights

You have the right to access your data, to rectification, erasure, restriction of processing and data portability, the right to object to processing based on legitimate interest and the right to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). Send your request to info@nuvebeauty.sk; we will handle it within 1 month.

You also have the right to lodge a complaint with the supervisory authority: Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic), Hraničná 12, 820 07 Bratislava 27, www.dataprotection.gov.sk.