Personal Data Protection

Administrator of Personal Data

The administrator of your personal data is ELEKTROEPILACJA.PL SP. Z O.O., with its registered office in Warsaw, at ul. Grzybowska 87, 00-844 Warsaw, entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court for the capital city of Warsaw, XIII Commercial Division of the National Court Register under number KRS 0001064299, REGON 526700960, NIP 5273080710 (the "Administrator").

You can contact the Administrator via e-mail: contact@elektroepilacja.pl or by traditional mail at: ELEKTROEPILACJA.PL SP. Z O.O., ul. Grzybowska 87, 00-844 Warsaw. The Administrator has appointed a data protection officer, who can also be contacted by the same email or postal address.

Purpose and Legal Basis of Data Processing

We process your personal data (such as name, surname, date of birth, contact phone number, email; and if requesting an invoice – company name, address, NIP, and REGON) solely for the purpose of providing electroepilation services, cosmetic consultations, issuing invoices, maintaining client files, potential claims, analysis, archiving, bookkeeping, and direct marketing (including profiling, which does not produce legal effects or significantly impact your situation). Data is processed under Article 6(1)(b), (c), and (f) of GDPR (Regulation EU 2016/679).

In the case of special category data (e.g., health data), processing is based on your consent in accordance with Article 9(2)(a) of GDPR.

Providing data and consenting to health data processing is voluntary but necessary to receive electroepilation services.

Recipients of Data

Data may be accessed by:

Authorized employees and collaborators of the Administrator,

Service providers supporting technical and organizational solutions (e.g., courier and postal services, IT, legal, and marketing providers).

Data may be transferred outside the EEA to certified entities such as Google LLC and MailChimp under the EU-U.S. Privacy Shield. In other cases, data will not be transferred outside the EEA unless adequate safeguards are implemented.

Your Rights

You have the right to:

Access and receive a copy of your data,

Rectify or delete your data,

Restrict or object to processing,

Transfer data,

File a complaint with a supervisory authority,

Withdraw consent at any time without affecting prior processing.

Data Retention

Data will be stored for the period necessary to achieve the processing purposes. After contract termination, data is retained up to 6 years based on legal and tax obligations. Data processed based on consent will be stored until consent is withdrawn.