On this page, you will find information regarding what personal data may be processed during your use of the website, for what purposes, on what legal grounds, and what rights you are entitled to under the GDPR.
The controller of personal data processed through the website is the entity operating under the brand SkinCareWithMargo, located at al. 29 Listopada 39F, 31-425 Krakow.
Contact for personal data matters: glushukmargo@gmail.com, tel. +48 503-392-675.
In connection with your use of the website, data provided voluntarily via the form may be processed, in particular your name, telephone number, and information regarding the selected treatment.
The data is processed primarily for the purpose of:
Legal basis: Art. 6(1)(b) GDPR - taking steps at the request of the data subject prior to entering into a contract.
Legal basis: Art. 6(1)(f) GDPR - the legitimate interest of the data controller, consisting of the organization of communication, archiving of correspondence, and protection against potential claims.
This applies, for example, to server logs and basic technical data processed when using the website. Legal basis: Art. 6(1)(f) GDPR.
Data may be transferred to entities supporting the operation of the website and user communication, in particular:
The website is hosted on the infrastructure of home.pl. The hosting provider may process technical data and server logs in connection with maintaining the website.
The form operates using the FormSubmit service, which forwards submissions to the data controller's email address.
A Google Map is embedded on the contact page. Using it may involve data processing by Google, including the use of cookies or similar technologies.
The website also contains external links to Booksy, Google Maps, Facebook, Instagram, and TikTok. By clicking on such a link, the user is redirected to an external service that operates according to its own privacy rules.
In connection with the use of external services such as Google or FormSubmit, data may be transferred outside the European Economic Area (EEA), particularly to the United States.
Such transfers may take place on the basis of mechanisms used by the providers, including standard contractual clauses or an adequacy decision, if applicable.
Data from the contact and booking form is stored for the period necessary to handle the inquiry, maintain contact, and organize the visit, and subsequently for the time required to defend against potential claims or demonstrate the course of communication.
Technical data and server logs may be stored for a period justified by reasons of security and website administration.
Within the limits provided by the GDPR, you have the right to: access your data, rectify it, erase it, restrict its processing, object to processing, and, where applicable, the right to data portability.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych - PUODO) if you believe that your data is being processed unlawfully.
The website may use necessary technical mechanisms related to the operation, security, and proper display of the website's content.
In addition, embedded external content, particularly the Google Map, may store its own cookies or use similar technologies in accordance with the privacy policies of those service providers.
You can manage your cookie settings directly within your web browser.
Providing data in the form is voluntary, but necessary if you wish to receive a response, return contact, or book an appointment. Without providing basic contact details, handling your request may be impossible.
The privacy policy may be updated if there are changes to how the website, form, or external tools operate, or due to changes in legal requirements.
The current version of the document is always published on this page.
