Policy
Privacy policy
Short and free of legalese: what I need to know about you, why I need it and what I do with it.
Last updated: 9 September 2026
Who processes your data
The data controller is Lenka Šínová, company ID 86981731. You can reach me at info@wauwaumasaze.cz or on +420 722 108 199.
What I collect
- When you book: your name, phone number and sometimes an email address — so I know who I’m expecting and can let you know if anything changes.
- Before the massage: whatever you tell me about your health — injuries, surgery, pregnancy, allergies to oils. I only write these down when I need them to give you the massage safely.
- When you pay: the transaction details that show up on my payment provider statement.
- Visiting the website: the technical data needed to display the page. If you agree to it, I also measure anonymous visit statistics through Google Analytics — how many people came, which pages they looked at and where they arrived from. Without your consent nothing is measured.
Why I process it
- Performance of a contract — so I can give you the massage and agree a time with you.
- Legal obligation — I’m required by law to keep accounting and tax records.
- Legitimate interest — so I can remind you of your appointment or get back to you about a question.
- Consent — if you give it to me, for example for photographs or for publishing a review. You can withdraw your consent at any time.
How long I keep it
- Client contact details: for as long as you keep coming, and for 3 years afterwards.
- Notes about your health: for as long as you keep coming, and for 3 years afterwards.
- Accounting records: 10 years, as required by the Accounting Act and the VAT Act.
- WhatsApp messages and emails: usually 1 year, unless they are part of a booking.
Who I share it with
I never sell your personal data or pass it on to anyone for marketing purposes. I only share it where it is genuinely necessary:
- with the accountancy firm that handles my books,
- with the booking system provider (Booqito) if you book online,
- with Google (Google Analytics), if you consented to visit measurement,
- with my email and messaging providers (Google, WhatsApp / Meta),
- with public authorities, where the law requires it.
The booking system and the messaging tools are separate controllers or processors with privacy policies of their own.
Cookies and analytics
This site uses no advertising cookies and builds no profile of you. I measure visit statistics with Google Analytics 4, but onlyafter you agree to it in the bar that appears on your first visit. Until then no measurement cookie is stored and nothing that could identify you is sent to Google.
Declining is exactly as easy as agreeing — both buttons sit side by side. Your choice is remembered in your browser (localStorage). To change it, clear the site data in your browser and the bar will ask again.
Your IP address is anonymised in Google Analytics. Both language versions (wauwaumasaze.cz and wauwaumassages.cz) report into a single account so that switching language is not counted as a second visit.
If you open the embedded Google map or the booking widget, third-party content loads and that third party may set its own cookies under its own rules.
Your rights
Under the GDPR you have the right to:
- know what data I hold about you and receive a copy of it,
- have it corrected if it’s inaccurate,
- have it erased, if I no longer need it for a legal reason,
- restrict the processing or object to it,
- withdraw any consent you’ve given me, at any time,
- lodge a complaint with the Office for Personal Data Protection.
Just drop me a line at info@wauwaumasaze.cz. I’ll reply within 30 days at the latest.
Security
Paper notes are kept locked away at the studio. Electronic records live on devices protected by a password and two-factor authentication. I’m the only one with access.
Changes to this policy
I may update this policy when the way I work changes. You’ll always find the current version on this page, along with the date it was last updated.