Privacy Policy

Last updated: 11 October 2026.

This is an English translation provided for convenience. In case of any discrepancy, the Polish version prevails.

§1. Data controller

The controller of personal data processed in connection with the use of swiatmasazuirelaksu.pl is Dorota Banaszek, running a sole proprietorship under the name FHU Relax Dorota Banaszek, NIP (tax ID): 7621207971, REGON: 551197510, registered office at ul. 11 Listopada 52 lok. 57, 07-200 Wyszków, Poland. The salon this website relates to is located at ul. Kacza 9, lokal H, 01-013 Warsaw. Contact: +48 884 087 999, e-mail: swiatmasazuirelaksu@wp.pl.

§2. What data we process and why

Appointment enquiry form. When you send an enquiry via the booking form, we process the data you provide: name, phone number, selected treatment, preferred date and time, and any notes. We use them to answer your enquiry and confirm the appointment. The enquiry is stored on the website server and a copy is sent to the salon’s e-mail inbox.

Client card. After your first enquiry we create a client card linked to your phone number. It stores your name, phone number, card code and the number of stamps and rewards collected. The card is used to run the loyalty programme. Taking part in the programme is voluntary and is not a condition of using the salon’s services.

Health information. You do not have to give us any information about your health. If you choose to share it, e.g. in the booking notes or in conversation (pregnancy, injuries, contraindications), we will use it solely to perform the treatment safely.

Chat widget. Messages typed into the chat window are sent to our server and to OpenAI (the company behind ChatGPT), whose artificial intelligence model prepares an automatic reply. If you give a phone number or ask about an appointment, the message may be forwarded to the salon’s e-mail inbox so that we can contact you. Please do not enter health information or any other data not needed to arrange a visit. The chat does not make decisions about you based solely on automated processing that would produce legal effects or similarly significantly affect you (Article 22 GDPR) – its answers are for information only, and appointments are decided by the salon staff.

WhatsApp. When you click the WhatsApp button or the chat moves the conversation to WhatsApp, the content of the message and your phone number are transferred to WhatsApp (owned by Meta Platforms, Inc.) in order to arrange or handle your visit.

E-mail and phone contact. If you e-mail or call us, we process the data needed to reply: your e-mail address or phone number, name and the content of your message.

Basic technical data. Like most websites, the hosting server may automatically record your IP address, browser type and date of visit in its logs for security and maintenance purposes.

Fonts. The website’s fonts are stored on our own server, so loading them does not transfer your IP address to Google. The exception is the Hebrew, Arabic and Chinese versions of the website: characters of these scripts are loaded from Google Fonts servers (fonts.googleapis.com, fonts.gstatic.com), which involves transferring your IP address to Google when the page loads.

Source of data. We collect all data directly from you – through the form, chat, messages, phone calls or in the salon. We do not use external booking platforms or obtain data from other sources.

§3. Legal basis

We process data on the basis of: Article 6(1)(b) GDPR – to the extent necessary to take steps before entering into a contract (e.g. arranging a visit) and to perform it; Article 6(1)(f) GDPR – our legitimate interest in keeping in touch with clients, ensuring the proper and secure operation of the website and running the loyalty programme (client card); Article 9(2)(a) GDPR – your explicit consent when you choose to share information about your health. You may withdraw consent at any time, e.g. by asking us to delete that information; this does not affect the lawfulness of earlier processing.

Providing data is voluntary, but without contact details we cannot answer your enquiry or confirm your appointment.

§4. Recipients of data

Data may be shared with providers of services used by the website: Meta Platforms, Inc. (WhatsApp) – for messages sent via the chat widget; Google LLC – for Google Maps and for fonts in the Hebrew, Arabic and Chinese versions; the hosting provider – for the technical maintenance of the website and storage of enquiries and client cards; Wirtualna Polska Media S.A. (wp.pl e-mail) – for the salon’s e-mail inbox; OpenAI – for messages typed into the chat widget.

Some of these providers (Meta Platforms, Google, OpenAI) may process data outside the European Economic Area, in particular in the USA. This is based on the European Commission’s adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses approved by the European Commission.

§5. Retention period

Data provided via WhatsApp is stored in accordance with that platform’s rules and arrangements between you and the salon. Basic server logs and technical data are kept for 3 months from collection.

Data from the enquiry form is kept until the enquiry has been handled and the visit has taken place. Client card data is kept while you use the loyalty programme, but no longer than 24 months after your last visit – after that the card is deleted. E-mails and chat conversations are kept for no longer than 12 months from the last contact, unless longer storage is needed to handle a visit or to defend against claims. Health information is deleted at your request or when it is no longer needed.

§6. Your rights

You have the right to access your data, rectify it, erase it, restrict processing, data portability, object to processing, withdraw consent at any time and lodge a complaint with the President of the Personal Data Protection Office (PUODO) in Poland. In particular, you may object at any time to processing based on our legitimate interest (Article 21 GDPR).

§6a. Minors

The website is not directed at children. Persons under 16 should not provide us with their data via the form or chat without the consent of a parent or legal guardian.

§7. Cookies

In its current form the website does not use its own cookies to track users. External services (Google Maps after you click the link, and in the Hebrew, Arabic and Chinese versions also Google Fonts) may use their own cookies in accordance with those providers’ privacy policies.

§8. Contact

For matters relating to personal data protection, you can contact the controller by phone at +48 884 087 999, by e-mail at swiatmasazuirelaksu@wp.pl or via WhatsApp.