Privacy Policy
This policy explains how Brush and Bubbles Krakow handles personal data for workshop bookings and communications. We follow the EU General Data Protection Regulation (GDPR).
Data controller
Brush and Bubbles Krakow, Studio Stakkato, Berka Joselewicza 23, 31-051 Krakow, Poland. Contact: Brushandbubbles.krk@gmail.com.
Data we collect
- Booking details such as name, email, session date, and ticket quantity.
- Payment details are processed by TicketingHub on a separate domain; we do not store card data.
- Messages and inquiries you send to us.
- Optional photos or videos if you consent to being featured.
- Basic technical data (such as IP address, device, and browser) may be processed by our hosting provider for security and abuse prevention.
How we use data and legal bases
- To provide the service and manage bookings (contract performance).
- To respond to questions and customer support (legitimate interests).
- To meet legal or tax obligations (legal obligation).
- For marketing photos or newsletters where you have consented (consent).
- For analytics or advertising tags where you have consented (consent).
Sharing and processors
We share data only with trusted providers needed to run the service, such as TicketingHub for booking and payment processing, email providers, and site hosting. We use Google Tag Manager to manage analytics and advertising tags when consent is provided. We may also share data when required by law.
Cookies and advertising
We use essential cookies or similar technologies required for hosting, security, and core site features. With your consent, we use analytics and marketing cookies, including tags managed through Google Tag Manager (such as Google Ads) to measure performance. You can update your preferences anytime via Cookie Preferences in the footer.
Retention
We keep personal data only as long as necessary for the purposes above and to comply with Polish legal requirements.
Your rights
You can request access, correction, deletion, restriction, portability, or object to processing. You can withdraw consent at any time for consent-based processing.
International transfers
If any service provider processes data outside the European Economic Area, we rely on appropriate safeguards such as standard contractual clauses.
Contact and complaints
To exercise your rights, contact Brushandbubbles.krk@gmail.com. You may also file a complaint with the Polish Data Protection Authority (PUODO).
Last updated: January 2026

