Privacy Policy

Gros Anastasiia egyéni vállalkozó (sole proprietor), brand “grosmua”, artist name Anastasia Gros, 1121 Budapest, Hungary. Tax number (adószám): 92490509-1-43. Email: kontakt@grosmua.com, phone: +36 70 657 8835. Full details in the Imprint.

We process data solely to provide this website, answer your enquiries, arrange appointments and deliver our make-up and hair services. No tracking, no analytics tools, no advertising profiles, no sale of data.

This website is delivered via Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you visit, Cloudflare processes technically necessary connection data (IP address, time, page requested, browser identifier) to deliver the site and protect it against attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and fast operation). According to its own statements, Cloudflare is certified under the EU-U.S. Data Privacy Framework; standard contractual clauses apply in addition.

If you use the contact form, your name, email address, event date, requested service, your message and, technically, your IP address are transmitted to the form service Formspree (Formspree, Inc., USA), stored there and forwarded to us by email. Purpose: answering your enquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps at your request). Formspree's servers are located in the USA. To our knowledge Formspree is not certified under the EU-U.S. Data Privacy Framework; the transfer is based on the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR). If you prefer not to use it, simply email us directly.

The Cal.com calendar is embedded for appointment bookings (Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, USA). As soon as the contact section is displayed, your browser loads the calendar from Cal.com's servers. Your IP address and browser data are transmitted, and a technically necessary security cookie is set (protection against automated access, approx. 30 minutes). If you book an appointment, Cal.com processes your name, email address, phone number if provided, your answers in the booking form and the chosen time. Purpose: online appointment scheduling. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in simple online booking) for loading the calendar, Art. 6(1)(b) GDPR for the booking itself. According to its own statements, Cal.com is certified under the EU-U.S. Data Privacy Framework; standard contractual clauses and a data processing agreement apply in addition.

If you email us, we process your details to reply (Art. 6(1)(b) GDPR); the mailbox is provided by Google (Gmail). WhatsApp (WhatsApp Ireland Ltd.) and Instagram (Meta Platforms Ireland Ltd.) are only linked: no data is transferred until you actively click the link. The privacy policies of those providers then apply.

To display the typefaces, your browser loads font files from Google Fonts (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Your IP address is transmitted to Google, possibly also to Google LLC in the USA (certified under the EU-U.S. Data Privacy Framework). Legal basis: Art. 6(1)(f) GDPR (consistent, legible presentation).

Enquiries received via the form, email or WhatsApp are deleted no later than 12 months after the correspondence ends if no booking results. The same applies to submissions stored with Formspree and booking data with Cal.com (no later than 12 months after the appointment). If a booking results, invoices and related records are kept for 8 years under Hungarian accounting law (Act C of 2000, Section 169). Cloudflare stores hosting connection data only briefly.

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on our legitimate interest (Art. 15–21 GDPR). An email to kontakt@grosmua.com is sufficient.

Hungarian supervisory authority NAIH (Nemzeti Adatvédelmi és Információszabadság Hatóság), 1055 Budapest, Falk Miksa utca 9-11, naih.hu

This website itself sets no cookies and uses no tracking or analytics. The only exception is the technically necessary security cookie of the embedded Cal.com calendar (see above).