This privacy policy explains how we process information about you, including personal data and cookies.
1. General information
This policy applies to the website at orientmassagekatowice.pl.
The website operator and personal data controller is Orient Massage, a massage salon at Rynek 7, 40-003 Katowice, email: katowice@orientmassage.pl, telephone: 534 722 721,
operated by Parvo S.P. Z.O.O, ul. Pocztowa 16, 40-012 Katowice, NIP (tax identification number): 6342973743, REGON: 385582452, KRS: 0000829607.
The operator's contact email address is katowice@orientmassage.pl.
The operator is the controller of personal data that you provide voluntarily through the website.
The website uses personal data for the following purposes:
Responding to enquiries submitted through a form
Presenting services or information
Fulfilling online voucher orders and processing payments
The website collects information about users and their behaviour in the following ways:
Through information voluntarily entered into forms and recorded in the operator's systems.
By storing cookies on users' devices.
2. Selected data protection measures used by the operator
Login, ordering and personal data entry pages are protected during transmission by an SSL certificate. This encrypts personal data and login details entered on the website on the user's computer, so that they can be read only by the destination server.
An important part of data protection is regularly updating all software used by the operator to process personal data, including regular updates to software components.
3. Hosting
The website is hosted and technically maintained on servers provided by OVH SAS.
To ensure technical reliability, the hosting company keeps server logs. These may record:
resources identified by a URL, such as the addresses of requested pages and files,
the time a request is received and the time a response is sent,
the client's computer name, as identified through the HTTP protocol,
errors encountered while processing HTTP transactions,
the URL of the page previously visited by the user (the referrer),
information about the user's browser,
IP address information,
diagnostic information associated with users independently ordering services through the website's registration tools,
information relating to email sent to and by the operator.
4. Your rights and further information about how data is used
In certain circumstances, the controller may share your personal data with other recipients where this is necessary to perform a contract with you or fulfil the controller's obligations. This applies to the following categories of recipients:
the hosting company acting as a data processor,
authorised employees and associates who use the data to fulfil the purposes of the website,
the online payment provider, PayPro S.A. (Przelewy24), ul. Kanclerska 15, 60-327 Poznań, KRS: 0000347935, NIP: 7792369887, for the purpose of processing voucher payments,
accounting and legal service providers where necessary to fulfil legal obligations.
Your personal data is processed for no longer than is necessary to carry out the relevant activities under applicable regulations, such as accounting requirements. Marketing data will not be processed for longer than 3 years.
You have the right to request access to your personal data, its rectification or erasure, restriction of processing and data portability.
You have the right to object to the processing of personal data for the controller's legitimate interests, including profiling. This right may not apply where there are compelling legitimate grounds for processing that override your interests, rights and freedoms, in particular for establishing, pursuing or defending legal claims.
You may lodge a complaint about the controller's activities with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.
Providing personal data is voluntary, but necessary to use the website's services and fulfil online orders.
You may be subject to automated decision-making, including profiling, for the purpose of providing services under a contract and for the controller's direct marketing activities.
Personal data is not transferred to third countries within the meaning of data protection regulations. This means we do not send it outside the European Union.
5. Information submitted through forms
The website collects information voluntarily provided by the user, including personal data where supplied.
The website may record connection details, such as a timestamp and IP address.
In some cases, the website may record information that helps link form data to the email address of the user completing the form. In such cases, the user's email address appears within the URL of the page containing the form.
Information submitted through a form is processed for the purpose of that particular form, for example handling a service enquiry, business contact, service registration or online voucher purchase.
The context and description of each form clearly explain its purpose.
6. Controller's logs
Information about users' behaviour on the website may be logged. This data is used to administer the website.
7. Key marketing techniques
The operator uses Google Analytics (Google Inc., based in the USA) to analyse website traffic statistics. The operator does not provide personal data to the service provider, only anonymised information. The service uses cookies stored on the user's device.
Users can view and edit cookie-based information about their preferences collected by Google's advertising network using this tool: https://www.google.com/ads/preferences/
8. Information about cookies
The website uses cookies.
Cookies are data files, usually text files, stored on the website user's device to support use of the website. They usually contain the name of the website they come from, the length of time they are stored on the device and a unique number.
The website operator places cookies on the user's device and accesses them.
Cookies are used for the following purposes:
maintaining the user's session after login, so that the user does not need to enter their username and password again on every page,
carrying out the activities described above under ‘Key marketing techniques’.
The website uses two main types of cookies: session cookies and persistent cookies. Session cookies are temporary files stored on the user's device until they log out, leave the website or close their browser. Persistent cookies remain on the user's device for the period specified in the cookie settings or until the user deletes them.
Web browsers usually allow cookies to be stored on a user's device by default. Users can change these settings. Browsers allow cookies to be deleted and can also block them automatically. Further details are available in the browser's help or documentation.
Restricting cookies may affect some features of the website.
Cookies stored on the user's device may also be used by organisations working with the website operator, in particular Google (Google Inc., based in the USA), Facebook (Facebook Inc., based in the USA) and Twitter (Twitter Inc., based in the USA).
9. Managing cookies — how to give and withdraw consent
If you do not wish to receive cookies, you can change your browser settings. Disabling cookies that are necessary for authentication, security or maintaining user preferences may make websites difficult to use or, in some cases, prevent their use entirely.