As of 25th May 2018, the new EU General Data Protection Regulation has come into force. We would like to explain to you how your personal data are processed and what your rights are with regards to that.
1. Who administers your data?
The processor of your data is the legal entity which decides how to process your personal data. It is Bleuet sp. z o.o. ul. Morelowa 6/2, 30-222 Kraków, entered into the Register of Entrepreneurs kept by the DISTRICT COURT FOR KRAKÓW-ŚRÓDMIEŚCIE IN KRAKÓW, 9TH COMMERCIAL DEPARTMENT OF THE NATIONAL COURT REGISTER; KRS (National Court Register) number 000574997, NIP (Tax Identification Number) 6772392440.
2. How to contact us?
When you would like to exercise your rights related to your personal data, you can contact us calling the following landline number: +48 12 422 57 57 or sending an email on the following email address: firstname.lastname@example.org.
3. Which types of your personal data do we process and how do we collect these data?
We process the data provided during filling in patient’s personal survey. These are data such as identification data, address and contact data. You may update or complete them when you contact us. We also process the data related to contacting you when setting up treatments or details related to visits such as phone number or email address.
4. Why do we process your personal data and what is the legal basis for that?
We process your personal data first and foremost because it is essential for identification of treatments received by a patient in our beauty salon. Furthermore, we process the personal data with the purpose to contact you about your visits or for advertising purposes — providing information about new treatments or promotions as well as loyalty schemes organised by us, contests and promotional actions that you can take part in.
5. Is it obligatory to provide my personal data?
Yes, providing your personal data is essential to have those registered in the medical report. If you don’t provide us with your personal data, we will not be able to perform the treatment.
We do not and we shall not share your personal data with any third parties with the exception of:
- public authorities, such as police or public persecutor’s office, should they ask us for your data within the framework of specific proceedings on the basis of legal regulations;
- entities that act on our request and to our benefit and they process your personal data on our behalf and for our needs. These are e.g. companies helping us with archiving and data management, IT services, direct marketing of our products or other services. We shall not pass your data to “third countries” understood within the framework of the regulations related to the protection of personal data i.e. outside of the European Economic Area.
6. What are your rights related to the fact that we process your personal data?
According to the law, you are granted to exercise any of the rights related to your personal data: accessing them, their rectification, erasure or limitation of processing, transferring your data to another administrator, raising objection against processing the data and filing a complaint to the supervisory organ. You may exercise your right every time you notice that your data are incorrect or incomplete. You might raise objection against processing your personal data for the purpose of direct marketing of our products and services. You can also raise objection (because of your specific situation) against processing your data for purposes of our other legally entitled needs. In the last case, we shall stop processing your data if there is no superior, legally justified basis for processing on our side. You may request the erasure of your data if they are not needed anymore for the purposes that they served before and because of which we collected them or processed them in any way. You may raise an effective objection against processing your data if your data has been processed against the law and then the data should be erased so as to comply with the regulation of the law in force. When it comes to the request of limitation in processing your data, you may exercise this right when you notice that your data is incorrect (you may request the limitation of processing your data for the period that allows us to check this data), when your data are processed against the effective regulations but you do not want to have them erased, when your data is not necessary for us anymore but you might need it with the aim of defence or assertion of claim and when you raise objection against processing your data — until the moment of clarification if legal basis from our side is superior to the basis of the objection. The complaint against processing your data by us may be filed to the supervisory organ. At the moment this is the Inspector General for Personal Data Protection (address: Inspector General for Personal Data Protection, ul. Stawki 2, 00-193 Warszawa) and soon this organ might be changed into the President of the Personal Data Protection Office.
7. How long shall we keep your personal data?
Your personal data shall be kept for a period of 2 years