(1) The Portal uses cookies during the User's use of the Portal.
(2) Cookies are IT data, in particular text files which a web browser can send to a server each time the Portal is visited, and which are stored on the User's terminal equipment (computer, tablet, smartphone).
(3) The Administrator is the entity placing cookies on the Portal User's terminal equipment and accessing them.
(4) Cookies are used, among other things, for the purposes of:
a) creating statistics which help to understand how Portal Users use the websites;
b) User session handling,
c) profiling the user in order to display tailored material to the user via advertising networks, in particular Google.
(5) The Portal uses two main types of cookies: ‘session’ cookies and ‘permanent’ cookies (persistent cookies). ‘Session’ cookies are temporary files that are stored on the User's terminal equipment until they log out, leave the website or switch off the software (web browser). ‘Permanent’ cookies are stored on the User's terminal equipment for the time specified in the parameters of the cookies or until they are deleted by the User.
(6) Deactivating the default permission to store cookies, enabling the blocking of the use of cookies and other specific options can be done in the settings of your Internet browser.
(7) Restrictions on the use of cookies may affect some of the functionalities available on the Website of the Portal.
This Privacy Policy describes the rules for the processing of personal data in connection with the use of the website available at: www.spavitao.pl.
I. DEFINITIONS:
- Administrator - Day Spa Vita'O Bartosz Bernat 14 Wincentego Pola Street , 81-433 Gdynia NIP 958 152 38 32- User - any natural person whose personal data is processed by the Administrator in connection with the use of the Portal;
- Personal data - all information about the User that allows him/her to be identified, including device IP, location data, Internet ID and information collected through cookies and other similar technology;
- RODO - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation);
- Portal - the website accessible at www.spavitao.pl;
- Processing of personal data - any operation performed on personal data, such as collection, recording, storage, processing, alteration, disclosure and deletion, and in particular those performed on computer systems.
II. PURPOSE OF THE PRIVACY POLICY
The provision of the Privacy Policy constitutes the Administrator's fulfilment of its information obligation towards the User (Article 13(1) of the RODO).
III. CONTACTING THE ADMINISTRATOR
(1) In all matters relating to the use of the Portal with regard to the processing of personal data, as well as in the case of exercising the User's rights referred to in Section VIII of the Privacy Policy, the User may contact the Administrator electronically at: [...] or in writing to the Administrator's address. Requests will be responded to within 30 days of receipt. If it is necessary to extend this deadline, the Administrator will inform the applicant of the reasons for such extension.
(2) The response will be provided to the e-mail address from which the application was sent and, in the case of applications sent by letter, by registered mail to the address indicated by the applicant, unless the content of the letter indicates a wish to receive feedback to the e-mail address (in which case the e-mail address must be provided).
IV. WAYS OF PROCESSING PERSONAL DATA
The Administrator processes the User's personal data through the following processes:
a) the collection of the data provided in the forms available on the Portal and their further use; the forms available on the Portal are:
- contact form,
- newsletter subscription form,
b) the collection of ‘cookies’ in connection with the use of the Portal.
V. LEGAL BASIS AND PURPOSES OF PERSONAL DATA PROCESSING
(1) Personal data of Portal Users may be processed by the Data Controller in the case:
(a) when the Portal User gives their consent in the forms posted on the Portal, in order to take the actions to which the forms relate (Article 6(1)(a) RODO);
b) when the processing is necessary for the performance of a contract to which the Portal User is a party (Article 6(l)(b) RODO);
c) in order to comply with a legal obligation incumbent on the Administrator (Article 6(1)(c));
d) in order to possibly establish, assert or defend against claims - the legal basis for the processing is the Administrator's legitimate interest in protecting your rights (Article 6(1)(f) RODO).
(2) The Administrator processes the personal data of the Portal Users to the extent necessary for the purposes specified above.
(3) The provision of personal data by the User is voluntary, however, failure to provide personal data will make it impossible for the Administrator to perform the process of providing the electronic service offered on the Portal.
(4) The User's consent is expressed by ticking the appropriate box in the form.
(5) Whenever the processing of personal data is carried out on the basis of consent, the User has the right to withdraw consent at any time, which, however, does not affect the lawfulness of the processing carried out before the withdrawal of that consent.
(6) The processing of personal data shall be carried out for the period necessary for the fulfilment of these processing purposes or until the withdrawal of the consent by the User of the Portal.
(7) The Administrator keeps a register of persons authorised to process the data. Persons who have been authorised to process the data are obliged to keep the personal data and the ways of securing them strictly confidential.
(8) The Administrator and persons authorised to process the data shall apply technical and organisational measures to ensure the protection of the processed personal data.
VI. TYPES OF PERSONAL DATA
(1) The Administrator processes the following personal data of the Portal's User: name, surname, address, e-mail address, telephone number - depending on the form used by the User.
(2) The data provided in the forms placed in the Portal are processed for the purposes resulting from the function of a particular form; moreover, they may be used by the Administrator also for archiving and statistical purposes.
VII. DATA RECIPIENTS
1) The data contained in the forms, provided to the Administrator by the Portal User, may be transferred by the Administrator to third parties, cooperating with the Administrator in relation to the purposes specified in point V.1 above.
(2) The Portal may contain links redirecting the User to other websites. Such websites operate independently of the Portal and are not supervised by the Portal in any way. These websites may have their own privacy policies and regulations.
VIII. USERS' RIGHTS
In accordance with Articles 15 - 22 of the RODO, each User of the Portal has the following rights:
(a) the right to be informed about the processing of personal data,
b) the right to obtain a copy of the data,
c) the right to rectification,
d) the right to erasure of the data,
e) the right to restrict processing,
(f) the right to data portability,
(g) the right to object to the processing,h) the right to lodge a complaint to the supervisory authority - the President of the Office for Personal Data Protection (ul. Stawki 2, 00-193 Warsaw).
IX. COOKIES
(1) During the use by the User, the Portal uses cookies.
(2) Cookies are computer data, in particular text files which can be sent to a server by a web browser each time the Portal is visited and which are stored on the User's final device (computer, tablet, smartphone).
(3) The Administrator is the entity placing cookies on the Portal User's terminal equipment and accessing them.
(4) Cookies are used, among other things, for the purposes of:
a) creating statistics which help to understand how Portal Users use the websites;
b) User session handling,
c) profiling the user in order to display tailored material to the user via advertising networks, in particular Google.
(5) The Portal uses two main types of cookies: ‘session’ cookies and ‘permanent’ cookies (persistent cookies). ‘Session’ cookies are temporary files that are stored on the User's terminal equipment until they log out, leave the website or switch off the software (web browser). ‘Permanent’ cookies are stored on the User's terminal equipment for the time specified in the parameters of the cookies or until they are deleted by the User.
(6) Deactivation of the default storage of cookies, activation of the blocking of the use of cookies and other specific options may be carried out in the settings of the Internet browser.
(7) Restrictions on the use of cookies may affect some of the functionalities available on the Website of the Portal.
X. FINAL PROVISIONS
(1) The Privacy Policy is continuously reviewed and updated as necessary.
(2) the Privacy Policy is effective as of 9.12.2024.
