1. General Information

The controller of personal data processed via the website https://lesnyszept.com is Leśny Szept Tattoo & Piercing Spółka z Ograniczoną Odpowiedzialnością, with its registered office at ul. Wacława Tokarza 5 / 168, 03-379 Warsaw, Poland, registered in the National Court Register (KRS), NIP: 5242948165, REGON: 522862016, hereinafter referred to as the "Controller".

Contact with the Controller is possible via e-mail: kontakt@lesnyszept.com.

2. Scope of Processed Data

The Controller may process the following categories of personal data:

• full name,
• email address (for sending the agreement and for contact)
• phone number (for sending the SMS confirmation code and for organizational contact)
• Instagram profile name,
• residential address,
• PESEL number,
• ID card number and series,
• date of birth,
• medical information (e.g. allergies, infectious diseases),
• IP address, browser data, location and behavior on the site (via analytics tools).

3. Purposes and Legal Bases for Data Processing

Personal data is processed for the following purposes:

• to handle contact inquiries (Art. 6(1)(f) GDPR),
• to present offers and conduct correspondence (Art. 6(1)(b) or (f) GDPR),
• to perform a contract for the provision of a tattoo or other service (Art. 6(1)(b) GDPR and Art. 9(2)(a) GDPR for sensitive data),
• to sign and perform a contract concluded electronically, including sending the agreement via email and the SMS confirmation code,
• to contact the client regarding organizational matters, such as appointment confirmation, rescheduling, delays, or no-shows,
• to fulfill legal obligations imposed on the Controller (e.g. tax obligations) (Art. 6(1)(c) GDPR),
• for marketing purposes (based on voluntary consent, Art. 6(1)(a) GDPR),
• for analytical and statistical purposes (Art. 6(1)(f) GDPR),
• Processing of data such as email address or phone number for the purpose of sending the agreement and the confirmation code is based on Art. 6(1)(b) GDPR – i.e. necessity for the performance of a contract.

4. Data Recipients

Personal data may be shared with:

• data processors acting on behalf of the Controller (e.g. hosting provider OVH),
• providers of analytics tools (e.g. Google LLC),
• entities providing accounting, legal, or IT services.

5. Data Transfers Outside the EEA

Due to the use of tools such as Google Analytics and Google Ads, personal data may be transferred to third countries (including the USA). These service providers ensure adequate protection of personal data under the standard contractual clauses approved by the European Commission.

6. Data Retention Period

Personal data will be stored for the time necessary to fulfill the purposes of processing, and in the case of data processed based on consent – until the consent is withdrawn.

Data processed in connection with the performance of a contract is retained for the time necessary to carry out the contract, and thereafter for the period required by law – usually up to 5 years (e.g. for tax or complaint purposes).

7. Rights of the Data Subject

Due to the nature and scope of the processing, the Controller informs that data subjects may contact the Controller at kontakt@lesnyszept.com regarding all matters related to data processing. While the website does not provide a dedicated interface for reviewing or editing personal data, data subjects may submit requests for access, rectification, restriction, or erasure of personal data via email.

8. Cookies and External Tools

The website uses cookies for the following purposes:

• ensuring proper functioning of the website (technical cookies),
• analyzing traffic and user behavior (Google Analytics),
• conducting marketing activities (Google Ads).

Analytical and marketing cookies are used only after obtaining the user's consent via the cookie banner. Consent information is stored in a local browser cookie.

9. Data Security

The Controller implements appropriate technical and organizational measures to ensure the protection of personal data, especially against loss, unauthorized access, or disclosure.

10. Changes to the Privacy Policy

This privacy policy may be updated periodically. The current version will always be available at: https://lesnyszept.com/polityka-prywatnosci

Last updated:23.06.2025