Privacy Policy

§ 1. Personal data administrator

The administrator of personal data is Justyna Krzyszczuk, running a business at ul. Ładna 21/U1B, 50-353 Wrocław, NIP: 8982178530, hereinafter referred to as the "Administrator".
Contact the Administrator:
- e-mail: biuro@depilacjalaserowa-wroclaw.pl
- telephone: 791 292 874

The administrator may process the following personal data:
- name and surname,
- telephone number,
- address e-mail,
- data provided in the contact form,
- data provided when booking the visit,
- payment related data,
- address IP,
- device and web browser data,
- data regarding user activity on the website.
Providing data is voluntary, however, it may be necessary to use the contact form, make a reservation or make a payment.

Personal data are processed for the purpose:
- providing answers to submitted inquiries,
- making appointment reservations,
- contact with the client in matters related to the visit,
- making online payments,
- performance of the service,
- issuing accounting documents,
- keeping tax documentation,
- pursuing or defending against claims,
- conducting statistical analyses,
- conducting marketing activities after obtaining the required consent.
The basis for data processing is:
- art. 6 ust. 1 lit. a GDPR – consent of the person, to which the data relates,
- art. 6 ust. 1 lit. b GDPR – performance of a contract or action before concluding a contract,
- art. 6 ust. 1 lit. c GDPR – legal obligation imposed on the Administrator,
- art. 6 ust. 1 lit. f GDPR - legitimate interest of the Administrator.

Personal data may be transferred to entities supporting the Administrator in running its business, w szczególności:
- hosting providers,
- appointment booking system providers,
- payment operator PayU S.A.,
- IT service providers,
- accounting office,
- suppliers of analytical and marketing tools.
Data may be transferred to entities processing data on behalf of the Administrator only on the basis of appropriate contracts and in accordance with applicable law.

Data related to booking appointments are stored for the period necessary to provide the service and for the period required by law.
Data related to accounting documentation are stored for the period required by tax and accounting regulations.
Data processed on the basis of consent is stored until it is withdrawn.
Data processed on the basis of the legitimate interest of the Administrator is stored until an effective objection is raised.

Every person has the right to:
- access to data,
- rectification of data,
- deletion of data,
- processing restrictions,
- data transfer,
- object to processing,
- withdraw consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
Person, to which the data relates, also has the right to lodge a complaint with the President of the Personal Data Protection Office.

The website uses cookies and similar technologies.
Cookies are used for the following purposes:
- ensuring proper operation of the website,
- remembering user preferences,
- keeping visit statistics,
- analyzing website traffic,
- conducting marketing and remarketing activities.
The user can manage cookie settings using the settings of his web browser or via the cookie consent management tool available on the website.

The website may use tools provided by Google Ireland Limited and Meta Platforms Ireland Limited, w szczególności:
- Google Analytics,
- Google Ads,
- Google Tag Manager,
- Google Consent Mode,
- Meta Pixel (Facebook i Instagram).
These tools may use cookies and similar technologies:
- website traffic analysis,
- measuring the effectiveness of advertising campaigns,
- conducting remarketing activities,
- creating statistics on the use of the website.
Data collected through these tools may include, but is not limited to, your IP address, online identifiers, device information, browser and user activity on the website.
Marketing and analytical cookies are used only after obtaining the appropriate consent of the user, if required by applicable law.
The user may change or withdraw his/her consent to cookies at any time.

In connection with the use of Google and Meta services, some data may be transferred outside the European Economic Area, in particular to the United States of America.
Data is transferred in accordance with the requirements of the GDPR and with appropriate legal safeguards, in particular standard contractual clauses approved by the European Commission or other mechanisms provided for by applicable law.

The Administrator applies appropriate technical and organizational measures to protect personal data against loss, destruction, unauthorized access, change or disclosure.