Privacy Policy

What are your rights?You have the right to access your data, to correct them, and to request their deletion. In addition, you have the right to object to the processing of your personal data or to request the restriction of its processing. Your provision of the required personal data is voluntary, but is a condition for us to provide certain services to you. We do not make individual decisions towards you based solely on automated processing (profiling), which would produce legal effects or similarly significantly affect your situation. Our domain has an SSL certificate, so your data is encrypted. Below you will find all the most important issues related to the processing of personal data on our website.Who is the administrator of the website and personal data?The administrator of the website and personal data is SUNDAY SPA ARKADIUSZ NIEDZIELA, NIP: 9141470296. Contact at email: biuro.sundayspa@gmail.com and phone number: +48 880 911 922.What is the legal basis for processing personal data?Personal data is collected and processed in accordance with the provisions of the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), known as RODO. The processing of personal data is also governed by the national law of May 10, 2018 on the protection of personal data (i.e. Journal of Laws of 2019, item 1781).For what purposes do we process your data?We process data only to the extent relevant to the operation of our store and store it for the period allowed by law.

• In order to conclude and perform a contract such as: name, surname, address of residence, Tax Identification Number, telephone number, e-mail address, bank account number, payment card number – on the basis of Article 6(1)(b) of the RODO, i.e. when the processing is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject prior to entering into a contract.
• In the case of email correspondence, we process data such as name, email address, phone number – on the basis of Article 6(1)(f) RODO, i.e. when the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, and on the basis of Article 6(1)(b) RODO, i.e. when the processing is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject prior to entering into a contract.
• For the purpose of direct marketing (on the basis of: Article 6(1)(a) RODO – i.e. when the data subject has consented to the processing of his/her personal data for one or more specified purposes), we process such data as: name, surname, e-mail address, telephone number, address.
• For purposes related to fulfilling legal obligations and establishing and asserting claims: first and last name, residential address, PESEL no., NIP no., e-mail address, telephone no., IP, payment card no., bank account no. – on the basis of Article 6(1)(c) RODO, i.e. when processing is necessary to fulfill a legal obligation incumbent on the controller.

To whom do we transfer personal data?We transfer personal data to other entities only to the extent that the data subject has consented to the processing of data, to the extent that it is necessary for the performance of a contract, or to the extent that it results from the legitimate interests pursued by the administrator. These are the following who cooperate with the store: online payment operators, banks, providers of marketing tools. In the case of marketing tool providers used commonly, anonymized cookies may be transferred to the United States (companies: Google LLC, Meta Platforms Inc.).What exactly are your rights in connection with the processing of your personal data?You have the right to:

• request access to your personal data,
• request rectification of your personal data,
• to object to the processing of your personal data,
• request deletion of your personal data,
• demand restriction of processing of your personal data,
• request the portability of your personal data,
• obtain information about automated decision-making, including profiling, and the safeguards applied in connection with the transfer of such data outside the EU,
• obtain information about the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of such data,
• obtain information about your rights under the RODO, the right to lodge a complaint with the PUODO, the planned period of data storage or the criteria for determining this period, the source of this data,
• obtain a copy of your personal data.

If you wish to exercise any of the rights mentioned above, please let us know. We will promptly provide you with any information about the action taken on your request. You may withdraw the consent you have given us to process your personal data at any time. To do so, please contact us. CookiePolicyCookies Cookies are commonly occurring short textual information that allow us to identify the software you use, customize content for you and ensure proper operation of websites. They are stored on the device you use and have a domain name, storage time and a specific value. Cookies used in our store are secure and are divided into session cookies and persistent cookies. Session cookies are stored only until the session of a particular browser ends. Persistent cookies are stored on the device until they are deleted. Using your web browser, you can change your cookie preferences at any time or delete them (permanent cookies).For what purposes do we use cookies?We use cookies to ensure the best possible functioning of the online store and to promote it. This includes the creation of analysis and statistics that help us understand customer needs and analysis of user activity through analytical tools belonging to companies such as Google LLC (https://policies.google.com/privacy) or Meta Platforms Inc. (https://www.facebook.com/privacy/policy/) These tools are used widely, and information on the privacy policies of the above companies can be found at the links above. The Administrator may use Google Analytics, Universal Analytics, Google Tag Manager, Google AdWords, or Google AdSense provided by Google LLC and the Meta Pixel service provided by Meta Platforms Inc. These services help the Administrator to analyze traffic on the Online Store based on the collected data processed in an anonymized manner. Details about the Google Analytics service can be found at the following link: https://support.google.com/analytics/answer/6004245.