Privacy

Last updated: 12 October 2026

Who handles your data

Yeltsin’s Barber (Yeltsin Farid Bernal Ortiz), Rúa Míster Archer Milton Huntington 13⁠–⁠15, bajo D, 15011 A Coruña. Tax ID (NIF): X7410338Z. Contact: yelsinbarbero@gmail.com · 658 660 779.

What data and why

• Your appointment: name, mobile, email if you give it, service, day and time, and language. To book you in, confirm it, remind you by email the day before, and let you change or cancel it.
• Your history: appointments, visits, no-shows and the notes the salon keeps about your cut (never published or sent to anyone). After three no-shows without notice, further appointments are booked by phone; Yeltsin reviews this and can lift it at any time.
• Your access to «My bookings» (optional): if you create it after booking, we keep your name, mobile and email (if you gave it), the public part of your passkey (never your fingerprint or face: those never leave your phone), when you sign in and the bookings you make with it. If you like, also a photo of you, so the salon can put a face to your name: only you and the salon’s team see it, and you can remove it whenever you like. You don’t need it to book. Delete it whenever you like from «My bookings» or by asking the salon; it is deleted on its own if unused for 24 months.
• The chat assistant: it is an AI. What you type is sent to Anthropic (USA) to produce the reply. We do not keep the text of conversations: it is cleared from the server's memory within two hours. We only keep how many questions there were and what they cost. The assistant books nothing: an appointment is made only if you press Confirm.
• The contact form: name, mobile or email and your message, so we can answer. The salon reads it in its panel; it is deleted after 12 months.
• Technical logs: IP address and the page requested (without your appointments' private links), for the security of the service.

Legal basis

Your appointment: performing the service you ask for (GDPR art. 6.1.b). The no-show rule and security logs: the salon's legitimate interest in protecting its diary and the service (art. 6.1.f); you can object by writing to us. Email is optional.

Who else sees it

• InTechCenter, which builds, hosts and maintains the site on the salon's behalf. It acts as the salon's data processor: it handles your data only on the salon's behalf and for what the salon asks. By the salon's decision, its account in the admin panel has full access, including customer data and appointments, to maintain the site and help the salon; every access is logged and the salon can withdraw it at any time. When someone on the salon's team writes to it from the panel, the message carries their role and first name, never their email or mobile; and the panel tells it only the name and status of its connections (Google, the chat assistant), never accounts or keys.
• Railway (USA): the server and database.
• Google: once bookings are live, the appointment is written to the salon's Google Calendar and the confirmation is sent from its Gmail.
• Anthropic (USA): processes chat messages.

Transfers to the USA rely on the GDPR's safeguards (the EU-US adequacy decision or standard contractual clauses). We do not sell your data or use it for advertising.

How long

Up to two years after your last appointment. After that it is deleted automatically. Contact form messages after 12 months.

Your rights

You can ask for access, rectification, erasure, objection, restriction and portability by writing to yelsinbarbero@gmail.com. The salon can export or delete your data from its panel. If you are not satisfied, you can complain to the AEPD (the Spanish data protection authority).

On your device

We use no analytics or advertising cookies. Fonts and the map are served from our own server. In your browser we keep only: your name, mobile and email if you tick “Remember my details”; the private links to your appointments, so you can look them up; the chat session while it is open; the language, if you change it yourself; and, if you pick light or dark, that one choice (on “Auto” it follows your device and nothing is stored; going back to “Auto” deletes it). The links to your appointments reach us when you open one and with each chat message, so the chat can answer about them; it never shows them to anyone else. If you sign in to «My bookings», your browser keeps a technical session cookie (yb_c) that keeps you signed in until you sign out; it does nothing else. You can clear all of it from your browser settings. The salon's panel uses another technical session cookie.

Security

The panel requires two factors (a passkey, or username and password plus an authenticator app) and logs every access. If a breach affected your data, we would notify the AEPD within 72 hours and tell you when the law requires it. To report a security issue: adrian@intechcenter.com.

Google

The salon's panel uses Google's API only to read and write events in its own calendar and to send confirmations from its account; it does not read its email. Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.