This is a courtesy translation of the Polish original. In case of any discrepancy, the Polish version prevails.
1Data controller
The controller of your personal data, including sensitive data (for example health information) that you provide during your visit to our salon and in any other way, in any form, is J’ADORE INSTYTUT Agnieszka Jaworska — a sole proprietorship registered in the Polish CEIDG register, VAT ID (NIP) 6722001443, statistical number (REGON) 321021657, ul. Karmelicka 45, 31-128 Kraków, Poland.
Contact for all matters relating to the processing of personal data: kontakt@jadoreinstytut.com, tel. +48 519 516 528.
Pursuant to Article 13(1) and (2) of the General Data Protection Regulation (GDPR) of 27 April 2016, we inform you of the rules set out below.
2How we protect your data
Your personal data, and in particular sensitive data, is protected with the utmost care. To this end we have implemented, among other things, adequate processes, procedures and measures.
3What data we process
Our salon processes personal data such as: first name, surname, e-mail address, telephone number, home address, information about treatments received, and similar. You are asked for this data during registration or when completing the Client Card.
Whenever you provide us with personal data, you will be informed of the legal basis and the purpose of collecting it.
4Data necessary to perform the service
Personal data provided before a treatment, in particular health-related data entered in the Client Card, is processed solely in order to perform the contract for the service you have chosen. The legal basis is Article 6(1)(b) GDPR.
Providing this data is voluntary but necessary to conclude the contract and to perform the service offered in our salon. If it is not provided, the service you have requested cannot be performed.
5Data processed on the basis of consent
Personal data provided for marketing purposes, for sending the newsletter, for sending information about promotions and discounts in our salon, or for any other purpose not directly related to performing a service for you, is collected only on the basis of your explicit consent. The legal basis is Article 6(1)(a) GDPR.
Providing this data is voluntary but necessary to deliver the remaining services offered by our salon and expressly covered by the wording of the consent you are given to sign. If it is not provided, the requested service will not be delivered — for example, no newsletter will be sent to you and you will not receive information about discounts.
6How long we keep your data
Your personal data is processed for the period necessary to perform the service and, after its completion, in order to pursue the legitimate interests of the controller, i.e.:
marketing of our own products or services — until you withdraw the consent previously given;
pursuing possible claims in connection with the performance of the service — in accordance with the applicable statutory limitation periods, Article 117 et seq. of the Polish Civil Code.
The legal basis is Article 6(1)(f) GDPR and Article 9(2)(f) GDPR.
7Recipients of the data
Your personal data may be shared with other recipients, such as providers of IT system maintenance and hosting services, the e-mail service provider and the salon management system provider.
Your data is not transferred to third countries.
8Your rights
You have the right to access your data, to correct and rectify it, to erase it or restrict its processing, the right to object to processing, the right to data portability, the right to request access to the data, and the right to lodge a complaint with the supervisory authority (the President of the Personal Data Protection Office, UODO) if you consider that the processing of your data infringes the data protection law in force. You also have the right to be forgotten, unless further processing is required by the law in force.
You also have the right to withdraw your consent at any time; withdrawal does not affect the lawfulness of processing carried out on the basis of that consent before its withdrawal.
9Automated processing
Your data may be processed by automated means, including in the form of profiling.