AUREA SKIN · HOLISTIC COSMETOLOGY

Privacy Policy

English translation of the Polish document. The original Polish version is also available. Read the Polish version

This Privacy Policy describes how personal data are processed in connection with the AUREA SKIN website, contact with the studio and appointments booked through the channels made available by the studio.

1. Data controller

The controller of personal data is Michał Dobosz, operating AUREA SKIN Kosmetologia Holistyczna at ul. Bolesława Prusa 41, 40-619 Katowice, Poland, tax identification number (NIP) 6342308129. For matters relating to personal data, please contact info@aureaskin.pl.

2. What data may be processed

Depending on how you contact us, this may include your name, telephone number, email address, booking information and the content of correspondence. When you use the website, technical data may also be processed, including your IP address, device and browser type, the date and time of your request, and information recorded in server logs.

3. Purposes and legal bases for processing

Handling enquiries, contact and bookings, and taking steps before providing a service or performing that service.

Meeting legal obligations, including tax and accounting obligations.

Maintaining website security and technical operation, preventing misuse, and establishing, pursuing or defending legal claims where this is in the controller’s legitimate interests.

Activities requiring consent, where consent has been freely given in the particular case.

Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

4. Bookings via Booksy

This website contains links to Booksy. Once you visit Booksy, data are also processed under that service’s privacy policy. Data provided to AUREA SKIN in connection with a booking are used to the extent necessary to manage your visit and our relationship with you.

5. Google Maps and external links

The website embeds a Google map and links to Google Maps, Instagram, Facebook, TikTok and Booksy. Loading the embedded map may result in Google receiving users’ technical data, including IP addresses, and using storage technologies on the device under Google’s policies. When you visit an external service, its own privacy policy also applies.

6. Hosting and technical logs

The website uses a hosting provider’s infrastructure. When the site is displayed, the infrastructure provider may process technical data required to deliver its content, provide security and diagnose service operation, in particular IP addresses and network-request data.

7. Cookies and similar technologies

The current AUREA SKIN website does not use its own analytics or advertising tools. Elements provided by third parties, particularly the embedded Google map, may use cookies or similar technologies in accordance with those parties’ policies. You can manage cookies in your browser settings.

8. Recipients of data

Data may be disclosed, to the extent necessary to provide services, to parties supporting the controller, particularly IT and hosting providers, booking-system providers, and accounting or legal service providers, as well as to competent authorities where disclosure is required by law.

9. Data retention

Data are retained no longer than needed for the purpose for which they were collected. The period may depend on the time required to manage bookings or correspondence, statutory tax and accounting obligations, and limitation periods for possible claims. Data processed solely on the basis of consent are retained until that consent is withdrawn or the purpose ends earlier, unless there is another legal basis for continued retention.

10. Rights of data subjects

In the cases provided for under the GDPR, you have the right to access, rectify or erase your personal data, restrict processing, receive your data in a portable format and object to processing. Where processing is based on consent, you also have the right to withdraw that consent.

If you believe your data are being processed unlawfully, you have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

11. Voluntary provision of data

Providing personal data is generally voluntary, but some data may be necessary to respond to an enquiry, make a booking, provide a service or meet legal obligations.

12. Data security

The controller applies appropriate organisational and technical measures to protect data against unauthorised access, loss, alteration or disclosure, taking into account the nature and scope of the data processed.

13. Changes to this Privacy Policy

This policy may be updated if the website’s operation, the services used or applicable legal requirements change. The current version is published on this page.

Last updated: 19 September 2026.