Privacy Policy

PRIVACY POLICY AND COOKIES

November 14, 2025

General Provisions
This Privacy Policy outlines the principles for processing and protecting personal data provided by Users in connection with the use of the website operating at the address https://harmoniapieknaenso.pl (hereinafter referred to as the “Website”). Personal data is processed in accordance with the provisions of the Regulation (EU) 2016/679 of the European Parliament and the Council of April 27, 2016, on the protection of individuals with regard to the processing of personal data (GDPR), the Polish Personal Data Protection Act of May 10, 2018, and the Telecommunications Law of July 16, 2004.

Data Controller
The data controller of the personal data of Users collected through the Website is Agnieszka Pypeć, email address: agnieszka.pypec@harmoniapieknaenso.pl (hereinafter referred to as the “Controller”).

Categories of Personal Data Collected
The Controller processes the following categories of personal data:

  • Data voluntarily provided by Users: Name and surname, email address.

  • Data collected automatically during visits to the Website: IP address, domain name, browser type, operating system type.

Purposes and Legal Grounds for Data Processing
User personal data is processed for the following purposes and on the following legal grounds:

  • Handling inquiries through the contact form – based on the legitimate interest of the Controller.

  • Conducting statistical analyses and improving the functionality of the Website – based on the legitimate interest of the Controller.

  • Providing data is voluntary, but necessary to fulfill the above purposes.

  • Conducting statistical analyses and improving the functionality of the Website – based on the User’s consent, as referred to in Article 6(1)(a) of the GDPR, expressed via the consent management mechanism (cookie banner).

Data Retention Period
Personal data will be processed for the following periods:

  • When processing is based on consent – until the consent is withdrawn, and then for a period of potential claims limitation, up to 3 years.

User Rights
Each User, in relation to the processing of their personal data, has the right to:

  • Access their data

  • Rectify their data

  • Erase their data (“right to be forgotten”)

  • Restrict processing

  • Transfer data

  • Object to processing

  • Not to be subject to automated decision-making, including profiling.
    The Controller is obliged to respond to the User’s request without undue delay, and in any case, within one month of receiving the request. If the User believes that the processing of personal data violates the provisions of the GDPR, they have the right to lodge a complaint with the President of the Office for Personal Data Protection (PUODO).

Recipients of Personal Data
User personal data may be shared with the following categories of recipients:

  • Data processors acting on behalf of the Controller: based on a data processing agreement: IT PERSPECTIVE SPÓŁKA Z O.O. As part of the hosting services provided by the Processor, data is processed exclusively on IT PERSPECTIVE Sp. z o.o.’s servers. The Processor does not transfer data to other data processors (sub-processors) other than providers of infrastructure services necessary to maintain servers, such as Hetzner.

Data Transfers Outside the EEA
User personal data is not transferred outside the European Economic Area (EEA).

Cookies and Other Tracking Technologies
The Controller uses first-party cookies for purposes such as analysis, research, and audience auditing, in particular for creating anonymous statistics that help understand how Users interact with the Website, which helps improve its structure and content. Users can set the conditions for storing or accessing cookies in their web browser settings. A cookie consent management mechanism is applied on the Website, allowing Users to choose which categories of cookies they consent to. A banner notifying Users about the use of cookies and allowing them to configure their preferences is displayed on the Website during the first visit. Users can change their cookie preferences at any time using the provided tools or browser settings.

Automated Decision-Making and Profiling
User personal data is processed in an automated manner, including operations such as collecting, storing, and analyzing data in IT systems.
However, this data is not subject to profiling, meaning it is not used to make decisions based solely on automated processing that would produce legal effects or similarly significantly affect the User.

Security Measures
The Controller ensures the security of User personal data by implementing appropriate technical and organizational measures.
Data is stored in secure databases; only authorized administrators have access to it.
Connections to the website are encrypted with an SSL certificate.
Regular backups of data are performed and stored on isolated servers for 30 days.

Changes to the Privacy Policy
The Controller reserves the right to make changes to this Privacy Policy. Users will be notified of any changes in a clear and understandable manner.

Contact Details
For any questions regarding this Privacy Policy, please contact via email at: agnieszka.pypec@harmoniapieknaenso.pl