Privacy & Cookie Policy for masazsopot.pl

1) Data controller — who is responsible for your data

The controller of your personal data is:

• Time to Recharge & Relax — Valentyna Klimuk
• Address: Independence Avenue 677A, 81-854 Sopot
• Phone: +48 733 340 826

Privacy contact: by phone or via the forms available on the website.

2) Legal basis

We process data in accordance with:

• GDPR — Regulation (EU) 2016/679,
• Polish Personal Data Protection Act of 10 May 2018,
• ePrivacy Directive 2002/58/EC (cookies and electronic communications privacy),
• Polish Electronic Communications Law — in particular rules on marketing consent and the use of technologies such as cookies.

3) What data we may process

Depending on how you use the website, we may process:

• contact details: name and phone number (e.g., after the quiz and in the booking form),
• quiz data: your answers (e.g., areas of tension, your goal for the visit),
• communication data: messages you send to us (e.g., via WhatsApp),
• technical data: IP address, cookie identifiers, device/browser data and on‑site events — if you consent to analytics or advertising cookies.

4) Where we get your data

• directly from you (forms, quiz, phone contact, WhatsApp),
• automatically from your device (cookies and server logs) — depending on your cookie consent settings.

5) Purposes and legal grounds (Art. 6 GDPR)

We process data for the following purposes:

• Contact and answering enquiries — legal basis: our legitimate interest (Art. 6(1)(f)) or steps taken at your request prior to entering into a contract (Art. 6(1)(b)).
• Booking and providing services — legal basis: contract / pre‑contractual steps (Art. 6(1)(b)).
• Accounting and tax obligations (if documents are issued) — legal basis: legal obligation (Art. 6(1)(c)).
• Establishing, pursuing or defending claims — legal basis: legitimate interest (Art. 6(1)(f)).
• Analytics and website improvement — legal basis: your consent to analytics cookies (Art. 6(1)(a)) and ePrivacy / Polish electronic communications rules.
• Direct marketing (e.g., promotional contact by phone/message) — only when required by law, based on your consent and in line with applicable regulations.

6) Data recipients — who we may share data with

Your data may be shared with:

• hosting providers and website maintenance tools (including CMS/landing platforms),
• communication providers (e.g., WhatsApp — if you choose this channel),
• booking service providers — if booking is made through an external system (e.g., a widget),
• IT/security/analytics/advertising providers — only after you consent to the relevant cookies.

7) Booking via Booksy and external services

If you book via Booksy on this website (widget or redirect), your data may also be processed by Booksy in accordance with their privacy policy.

8) Transfers outside the EEA

Some providers (e.g., messengers, analytics tools, booking platforms) may process data outside the European Economic Area. In such cases, transfers are based on GDPR‑compliant mechanisms (e.g., Standard Contractual Clauses). Details are described in the privacy policies of those providers.

9) How long we keep data

Retention depends on the purpose:

• enquiries via forms/quiz — until the contact is completed and for as long as needed to defend claims,
• visit‑related data — as long as necessary to provide the service, settle accounts and handle potential claims,
• marketing data — until you withdraw consent or object,
• cookie data — according to cookie lifetimes and your consent settings.

10) Your rights (GDPR)

You have the right to:

• access your data and obtain a copy,
• rectify, erase, or restrict processing,
• data portability,
• object to processing (when based on legitimate interest),
• withdraw consent at any time (without affecting lawfulness before withdrawal).

11) Complaint to a supervisory authority

If you believe your data is processed unlawfully, you may lodge a complaint with the Polish supervisory authority:

President of the Personal Data Protection Office (UODO)
ul. Stanislawa Moniuszki 1A, 00-014 Warsaw, Poland

12) Is providing data mandatory

Providing data is voluntary, but it may be necessary in order to:

• call you back,
• book your appointment,
• respond to your enquiry.

13) Profiling and automated decisions

We do not make decisions about you that have legal effects solely by automated means. If you consent to advertising cookies, they may support ad personalization — only with your consent.

14) Cookies and “Manage cookies”

The website uses cookies and similar technologies. A consent management panel (“Manage cookies”) is available, where you can:

• accept all cookies,
• reject/disable analytics and advertising cookies,
• keep only essential cookies enabled (always active).

Cookie categories used on this website:

• Essential — required for the website and forms to work.
• Analytics — help measure traffic and improve the website (enabled after consent).
• Advertising — support ad personalization (enabled after consent).

Additional ways to control cookies:

• you can change your preferences at any time in the “Manage cookies” panel,
• you can also delete or block cookies in your browser settings (note that blocking essential cookies may limit functionality).

15) Security

We apply organizational and technical measures appropriate to the risks to protect data against unauthorized access, loss, or alteration.

16) Changes to this Policy

This Policy may be updated (for example, when tools used on the website or regulations change). The current version is published on this page.