Privacy Policy

This Privacy Policy contains the information required by Article 13 GDPR and relating to the use of cookies by the Website.

The Data Controller for Users is Holi.Vibe (Nina Król Projektowo). The Controller can be contacted by e-mail: hello@holivibe.com.pl or in writing at: ul. Stanisława Dygata 6/81, 01-748 Warsaw.

Users' personal data will not be used for automated individual decision-making, including profiling.

Holi.Vibe applies the technical and organisational measures required by law to protect personal data from unauthorised disclosure, unlawful access, processing in breach of regulations, and accidental alteration, loss or destruction.

The provision of personal data by a User for the purpose of booking an appointment is voluntary, but necessary to use this feature of the Website.

Users' personal data may be processed by Holi.Vibe for the following purposes:

• handling booking enquiries and scheduling appointments (legal basis: Article 6(1)(b) GDPR — processing necessary for the performance of a contract or pre-contractual steps);
• responding to email or telephone contact (legal basis: Article 6(1)(f) GDPR — legitimate interests of the data controller);
• conducting analytical research and website traffic analysis for statistical purposes (legal basis: Article 6(1)(f) GDPR — legitimate interests of the data controller);
• direct marketing of own services — where the User has given consent (legal basis: Article 6(1)(a) GDPR — consent of the User);
• potential establishment, pursuit or defence of legal claims (legal basis: Article 6(1)(f) GDPR — legitimate interests of the data controller).

Users' data will be retained for the following periods:

• data relating to booking and appointment handling — for 3 years from the date of last contact or last visit, unless further retention is justified by the limitation period for claims or required by applicable law;
• data processed on the basis of User consent — for the period for which consent was given, or until an objection is raised or consent is withdrawn;
• data processed in connection with responding to Users via email or telephone — for one year.

The scope of Users' data that Holi.Vibe may collect, process and store is as follows:

• in connection with booking handling: first name, last name, email address, phone number, chosen therapy, clinic location, preferred appointment times and — optionally — the content of a message sent by the User;
• in connection with the newsletter service: email address;
• in connection with email or telephone contact: email address, first and last name, and phone number.

While using the Website, Holi.Vibe automatically collects information such as: IP address, request URL, device identifier, time spent on individual pages, browser type, browser language, date and time of use, screen resolution, and operating system type and version.

The Website uses small files called cookies, which are stored on Users' end devices. Cookies are data files, in particular text files, stored on a User's device and intended for use with the Website.

Cookies are used for the following purposes:

• recognising the User's device in order to display page content appropriately;
• creating statistics that help us understand how Users interact with the website, enabling improvements to its structure and content;
• adapting the content and functioning of the Website to User preferences.

The Website uses analytical tools from third-party providers who use cookies on the Website. The provider of these tools is Google Ireland Limited (Google Analytics). You can change your cookie settings through your browser settings or through Google's advertising preferences.

Web browsers generally allow cookie storage by default. Users may change these settings. Continued use of the Website without changing cookie settings constitutes acceptance of cookies.

Users' personal data may be passed to entities that provide services to Holi.Vibe and may therefore process Users' data on behalf of the Controller (so-called processors), such as providers of:

• hosting and form processing services — Netlify Inc. (servers in the USA; data transferred on the basis of standard contractual clauses adopted by the European Commission);
• email and analytics services — Google LLC (Google Workspace, Google Analytics).

These entities will not process Users' data for their own purposes or use it for their own ends. Holi.Vibe does not sell Users' personal data to third parties.

Users have the right to access their data and the right to request rectification, erasure or restriction of processing.

Where processing is based on the legitimate interests of the controller, Users have the right to object to the processing of their personal data.

Where processing is based on consent, Users have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

Where data is processed for the performance of a contract or on the basis of consent, Users also have the right to data portability, i.e. to receive their personal data from Holi.Vibe in a structured, commonly used, machine-readable format.

Users also have the right to lodge a complaint with the supervisory authority responsible for data protection — the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.

W sprawach dotyczących ochrony danych osobowych oraz w celu realizacji przysługujących Użytkownikowi uprawnień można skontaktować się z Administratorem:

The Controller will make every effort to respond to enquiries within 30 days of receipt.