This policy complies in particular with the provisions of the Regulation of the European Parliament
and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons in relation to with the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (GDPR).
1. About us
The controllers of your personal data are Paulina Kasprzak / Salon Maha Punye Ayurveda, Ul. Ruczaj 43 U2B, 30-409 Kraków. NIP: 5532371107 REGON: 123131161
and Martyna Kasprzak / Salon Maha Punye Ayurveda, ul. Ruczaj 43 U2B, 30-409 Kraków NIP: 6762476603, REGON: 123136369.
The administrators can be contacted by e-mail at: firstname.lastname@example.org, by phone: 539 338 836 or by letter at: Salon Maha Punye Ayurveda Ul. Ruczaj 43 U2B 30-409 Kraków.
2. Collected data
Before using our services, by completing the form, you provide us with the following data: name, surname, telephone number, e-mail address and possible data on contraindications to perform part of the service to the extent necessary to provide services. If you order the service by phone, you provide us with your name and phone number.
When ordering the service by e-mail, you provide us with your name, e-mail address and telephone number. If you order a service in the form of a voucher, you also provide us with your address details, and possibly the data of the recipient (name, surname, address details, telephone number, e-mail address) through the payment organization / paying agent. Additionally, our reception area is subject to video surveillance and is marked with a monitoring pictogram.
3. How the data is used
We only use your data to provide services. We will use your data (e-mail address) for marketing purposes and / or research (recommendation) of the quality of services only if you agree to this option by checking the appropriate boxes in the form. The data obtained as a result of the monitoring record are used to ensure the safety of you, our other clients and our employees, are saved for a period of 30 days and then deleted.
4. Your rights
a) The right to access your personal data. This right allows you to receive information as to whether we process personal data about you, and if so, the right to receive a copy of the personal data that we process. The right to access personal data allows you to verify that we are processing it lawfully.
b) The right to rectify your personal data. This right allows you to request the correction of incomplete, false or outdated data that we process. In some cases, when fulfilling your request, we will have to verify the correctness of the new data you provide to us.
The right to limit the processing of your personal data. This right allows you to ask us to suspend the processing of your personal data in the following situations: (I) when you want us to check the accuracy of the data; (II) when our processing is unlawful; (III) when you need the data to establish, assert or defend claims, even though we no longer need your data for our own processing purposes; (IV) when you have objected to our processing, but we need to verify whether we still have overriding and legitimate grounds to continue processing your personal data.
d) The right to delete your personal data. This right allows you to request the deletion of your personal data if it is no longer necessary for the purposes for which it was collected. You can also request us to delete your personal data, if you have successfully exercised your right to object to the processing (see below), if we process your data unlawfully or we are required to delete your personal data in order to comply with the legal obligation indicated in provisions of applicable law. Remember that in some cases, we are required to process your data on the basis of applicable regulations and we cannot fulfill your request. See section 10 for more information.
e) The right to object to the processing of your data in a situation where we process your data based on the premise of a legitimate interest. You can raise the right to object for reasons related to your particular situation, when, in your opinion, the processing affects your rights or freedoms. You also have the right to object if we process your data for direct marketing purposes. In some cases, we can demonstrate that we have legitimate grounds for data processing that override your rights and freedoms (e.g. data protection in connection with an ongoing legal dispute). In such cases, the right to object does not entail the deletion of your personal data.
f) The right to transfer your personal data. In exercising this right, we will provide you or a third party indicated by you with your personal data in a structured, commonly used and machine-readable format. Remember that you are entitled to this right only in relation to data processed on the basis of consent or the premise for the performance of a contract that you have concluded with us, and the processing itself is carried out in an automated manner (in IT systems).
g) If you have given us consent to process your personal data, you have the right to withdraw it at any time. Withdrawal of consent does not affect the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.
5. Communication and marketing
In order to provide the services, we will communicate with you via SMS. This message is to remind you of the booked service date. This message can also be sent via e-mail if you so wish. If you check the appropriate boxes on the form, we will send you marketing messages about our services to your e-mail address, we will try to keep their frequency moderate and we will ask for your opinion and / or recommendation of the quality of services on our website or external websites (e.g. Trip Advisor, Facebook).
Cookies are small text information in the form of text files, sent by the server and saved on your device (e.g. on the hard drive of a computer, laptop or smartphone’s memory card) during your visit to our website. We process them in order to implement the basic functionalities of the website, identify the logged in user, adapt the content of the website to the user’s preferences and remember the ordered products in the basket. Our site may also contain elements that place cookies on behalf of third parties, such as the Facebook "Like" button, or give feedback from Trip Advisor. If you disable cookies, you may not be able to use certain parts of our website. If you delete cookies from your browser, you may have to reinstall the rejected cookies. The storage time depends on the type of cookies. Session cookies expire when the browser is closed. Persistent cookies, including local shared objects ("flash cookies"), typically expire between two months and two years.
7. Data sharing
We may share your data with: (I) payment agents for the purpose of making a non-cash payment, to the extent specified in the contract that connects us with them; (II) public authorities (eg the Police) within the scope of applicable provisions of common law; (III) database service providers (the so-called cloud)
within the scope of the applicable contract; (IV) postal operators in order to send the purchased voucher to the address indicated.
8. Data storage
We store your data in two forms: paper and electronic. The paper form is the form you fill out before using the services; the electronic form is a password-protected database. We store your data for as long as it is necessary to achieve the purposes for which it was collected, until you request its deletion. We also take into account the potential risk of unauthorized use or unauthorized disclosure of your personal data. We store the monitoring record for 30 days and then delete it.
9. Reporting a violation
In the event of a breach of the protection of your personal data, we will immediately notify the competent supervisory authority and you, but not later than within 72 hours.
In order to exercise your rights, please contact us using:
Tel: 539 338 836
Registered office address: Salon Maha Punye Ayurveda Ul. Ruczaj 43 U2B 30-409 Kraków.