Legal

Privacy policy

How I process the data of people who contact the salon, and which cookies the website uses.

1. Data controller

The controller of your personal data is Edyta Didyk, a sole trader operating as „EDYTA” – Salon Urody, tax ID (NIP) 598-104-64-28, REGON 080250246. Salon: ul. Chabrowa 7, 69-220 Ośno Lubuskie, Poland.

Data protection contact: phone/text +48 606 385 160, e-mail edyta6@buziaczek.pl, or in person at the salon.

2. What data I process

  • Contact form details: first name, phone number, optionally e-mail address, chosen treatment, preferred date and your message.
  • Details you give me by phone, text or e-mail when booking.
  • Technical data in server logs (including IP address, date and time, browser type).
  • Only with your consent: usage data collected by Google Analytics (e.g. pages visited, approximate location, device type).

3. Purposes and legal bases

  • Answering your request and booking a visit – Art. 6(1)(b) GDPR and Art. 6(1)(a) (consent ticked in the form).
  • Contact about a booked visit – Art. 6(1)(b) GDPR.
  • Security and proper functioning of the website (server logs) – Art. 6(1)(f) GDPR.
  • Visit statistics (Google Analytics) – Art. 6(1)(a) GDPR, only after consent in the banner.
  • Establishing, exercising or defending legal claims – Art. 6(1)(f) GDPR.

4. How long I keep data

Form messages go to my mailbox, and a copy is stored in the website admin area so that no request gets lost. I keep them as long as needed to handle the request and the visit, and then until any claims are time-barred. Server logs are kept by the hosting provider (LH.pl) under its own rules. Google Analytics data is kept according to the service settings, for no longer than 14 months.

5. Recipients

  • LH.pl – website hosting and the server that sends form messages.
  • Onet Poczta – provider of the edyta6@buziaczek.pl mailbox.
  • Google Ireland Limited – Google Analytics (only with consent) and the embedded Google map.
  • The person providing technical support for the website – under a data processing agreement.

I do not sell data or share it for marketing purposes.

6. Transfers outside the EEA

Google may also process data in the United States. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has found an adequate level of protection.

7. Cookies

Necessary cookies remember your choice in the banner (cookie salon_zgoda, 180 days) and keep the form working. They do not require consent.

Analytics cookies – Google Analytics 4 (_ga, _ga_*) – are only used after you click “Accept” in the banner. Without consent, Google Analytics is not loaded at all.

You can change or withdraw your consent at any time: open cookie settings. You can also delete cookies in your browser.

8. Google Maps and social media links

A Google map is embedded on the home and contact pages. Displaying it connects your browser to Google servers, which may process your IP address under Google’s privacy policy.

Links to Facebook, Instagram and Orły Kosmetyki are plain links – no plugins from these services are embedded.

9. Your rights

  • access to your data and a copy of it,
  • rectification,
  • erasure,
  • restriction of processing,
  • data portability,
  • objection to processing based on legitimate interests,
  • withdrawal of consent at any time, without affecting earlier processing,
  • complaint to the President of the Polish Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw) or the supervisory authority where you live.

10. Providing data

Providing data is voluntary, but without a phone number or e-mail address I cannot confirm an appointment. There is no automated decision-making or profiling.

11. Changes

This policy may change, for example when new tools are introduced. Last updated: 22.10.2026. In case of discrepancies, the Polish version prevails.