I. General provisions
1. The privacy policy defines how the personal data of Users necessary for providing services electronically through the website [website address] (hereinafter: the Service) is collected, processed, and stored.
2. The Service collects only personal data necessary for providing and developing the services offered therein. 3. Personal data collected through the Service is processed in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016, on the protection of natural persons regarding the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter GDPR) and the Personal Data Protection Act of May 10, 2018.
II. The administrator of the personal data collected through the Service is:
Beauty Salon
Izabela Lemańska
Wielandstrasse 24
10707 Berlin
tel. +491637003646
www.beauticianizabelalemanska.com
Represented by the owner Izabela Lemańska. The appointment of a data protection officer in the company is not required.
III. Purpose of collecting personal data
1. Personal data is used for: registering an account and verifying the User's identity, enabling login to the Service, fulfilling the agreement regarding services and e-services, communicating with the User (live chat, contact form, etc.), sending newsletters (after the User's consent to receive it), managing a comment system, providing social services, promoting the Administrator's offer, marketing, remarketing, affiliation, personalizing the Service for Users, conducting analytical and statistical activities, debt collection, establishing and pursuing claims or defending against them.
2. Providing data is voluntary but necessary to conclude a contract or to use other functionalities of the Service.
IV. Types of processed personal data
The Administrator may process the User's personal data: first name and surname, date of birth, residential address, email address, phone number, VAT number. V. Duration of personal data processing Personal data of Users will be processed for the period:
• when the basis for data processing is the performance of the contract – until the expiration of claims after its execution,
• when the basis for data processing is consent – until its withdrawal, and after the withdrawal of consent until the expiration of claims.
In both cases, the limitation period is 6 years, and for claims for periodic benefits and claims related to conducting business activity – 3 years (unless a specific provision states otherwise).
VI. Sharing personal data
1. Users' personal data may be shared with: entities related to the Administrator, its subcontractors, entities cooperating with the Administrator, e.g. companies handling e-payments, companies providing courier/mail services, legal offices.
2. Users' personal data will/not be transferred outside the European Economic Area (EEA).
VII. Users' rights
1. The User of the Service has the right to: access the content of their personal data, rectify, delete, limit processing, transfer, object to processing, withdraw consent at any time (which does not affect the lawfulness of processing carried out based on consent before its withdrawal).
2. A notification from the User exercising a right arising from the aforementioned rights should be sent to [email address].
3. The Administrator fulfills or refuses to fulfill the request promptly – within a maximum of one month from its receipt. 4. The User has the right to lodge a complaint with the President of the Personal Data Protection Office if they believe that the processing infringes their rights and freedoms (GDPR).
VIII. Cookies
1. The Service collects information using cookies – session, persistent, and third-party cookies. 2. The collection of cookies supports the proper provision of services in the Service and serves statistical purposes.
3. The User can specify the scope of access of cookies to their device in the browser settings.
IX. Automated decision-making and profiling
1. User data may not be processed in an automated manner such that any decisions could be made regarding them as a result.
2. User data may be profiled in order to tailor content and personalize offers, provided they have given their consent.
X. Final provisions
1. The Administrator has the right to make changes to the Privacy Policy, provided that the rights of Users are not restricted.
2. Information about the changes made will be available in the form of a notice on the Service.
3. In matters not regulated by this Privacy Policy, the provisions of the GDPR and Polish law shall apply.