Privacy Policy

Kaya Thai Massage
Operator: Karolína Černá
Business ID: 21832145
Registered office: Žerotínova 1220/31, Prague 3 – Žižkov, 130 00
E-mail: kaya@kayathai.cz
Phone: +420 775 858 111

1. Introduction

These Privacy Policy principles describe how Kaya Thai Massage, operated by Karolína Černá (hereinafter referred to as the “Controller”), processes the personal data of its clients in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

2. Personal Data We Process

When you use our services (especially when making massage bookings, communicating with us, or for marketing purposes), we process the following personal data:

• First name and surname
• Telephone number
• E-mail address
• Billing details (if an invoice is issued)

This data is provided voluntarily when making a reservation via the Amelia booking system or when communicating via e-mail or phone.

3. Purposes of Processing Personal Data

Personal data is processed only for the following purposes:

• Creating and managing massage bookings
• Communication with clients (confirmation, changes, reminders of reservations)
• Fulfilling legal obligations (e.g., accounting)
• Marketing purposes (e.g., sending information about promotions and discounts, if consent has been given)
• Improving the quality of our services and website (analytical and statistical purposes)

4. Legal Basis for Processing

We process personal data based on:

• Performance of a contract (providing the booked service)
• Legitimate interest (communication with customers, marketing to existing clients)
• Legal obligation (accounting documents)
• Consent (if given for marketing purposes)

5. Access to Personal Data

Access to personal data is limited to the Controller and, where necessary, to:

• The provider of the Amelia booking system
• Providers of analytical and advertising tools (Google Analytics, Meta/Facebook Pixel)
• Accountant (in the case of invoicing)

Personal data is not shared with third parties outside the EU.

6. Data Retention Period

Personal data is retained only for the necessary period:

• For the duration of the provided service
• For 3 years for marketing purposes (if consent was given)
• For the period required by law for accounting documents (5 years)

7. Your Rights

In accordance with the GDPR, you have the right to:

• Access your personal data
• Rectify or erase your data
• Restrict processing
• Data portability
• Object to processing
• Withdraw your consent to processing
• Lodge a complaint with the Office for Personal Data Protection (www.uoou.cz)

To exercise your rights, please contact us at kaya@kayathai.cz.

8. Data Security

The Controller has implemented appropriate technical and organizational measures to protect personal data, including data encryption, restricted access, and secure communication channels.

9. Cookies and Analytical Tools

Our website may use cookies for measuring traffic and marketing purposes (e.g., Google Analytics, Meta Pixel).
You can modify or disable the use of cookies at any time in your browser settings.

10. Final Provisions

These principles may be updated as necessary or in connection with changes in legislation.
The current version is always available on our website at www.kayathai.cz/privacy-policy.

Last updated: October 2025