Privacy Policy

I. General Provisions

1. The privacy policy defines how Users' personal data necessary for the provision of services via electronic means through the website [website address] (hereinafter: the Service) is collected, processed, and stored.
2. The Service collects only personal data necessary for the provision and development of services offered therein.
3. Personal data collected via the Service is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter GDPR), and the Personal Data Protection Act of 10 May 2018.

II. Data Controller

The controller of personal data collected via the Service is Bunpan Family Company Limited Liability Company, ul. Koszykowa, nr. 60/62, loc. 10, 00-673 Warsaw, KRS: 0001047658, REGON: 525873227, email: bunpanthaimassage23@gmail.com (hereinafter: the Controller).

III. Purpose of Collecting Personal Data

1. Personal data is used for the purpose of:
   
   • Communicating with the User (live chat, contact form, etc.)
   • Providing community services
   • Promoting the Controller's offer
   • Marketing, remarketing, affiliation
   • Analytical and statistical activities
   • Establishing and pursuing claims or defending against them.
2. Providing data is voluntary but necessary for concluding an agreement or using other functionalities of the Service.

IV. Types of Personal Data Processed

The Controller may process the User's personal data: name and surname, date of birth, residential address, email address, phone number, Tax identification number.

V. Duration of Personal Data Processing

Users' personal data will be processed for the period:

• When the basis for processing data is the performance of a contract - until the expiration of claims after its execution,
• When the basis for processing data is consent - until it is withdrawn, and after withdrawal until the expiration of claims.

In both cases, the limitation period is 6 years, and for periodic performance claims and claims related to business activities - 3 years (unless a special provision states otherwise).

VI. Sharing Personal Data

1. Users' personal data may be transferred to: entities affiliated with the Controller, its subcontractors, entities cooperating with the Controller, e.g., companies handling e-payments, courier/postal service companies, law firms.
2. Users' personal data will not/will be transferred outside the European Economic Area (EEA).

VII. Users' Rights

1. The User of the Service has the right to: access the content of their personal data, rectify it, delete it, restrict its processing, transfer it, object to its processing, withdraw consent at any time (which does not affect the lawfulness of processing based on consent before its withdrawal).
2. The request to exercise the User's rights resulting from the aforementioned rights should be sent to bunpanthaimassage23@gmail.com..
3. The Controller complies with or refuses to comply with the request promptly - within a maximum of one month from its receipt.
4. The User has the right to lodge a complaint with the President of the Office for Personal Data Protection if they believe that the processing violates their rights and freedoms (GDPR).

VIII. Cookies

1. The Service collects information through cookies - session, persistent, and third-party cookies.
2. Collecting cookies supports the proper provision of services in the Service and serves statistical purposes.
3. The User can define the scope of access to cookies on their device in their browser settings.

IX. Automated Decision-Making and Profiling

1. Users' data cannot be processed in an automated way that could result in any decisions being made about them.
2. Users' data may be profiled to adjust content and personalize offers after their consent is given.

X. Final Provisions

1. The Controller has the right to introduce changes to the Privacy Policy, ensuring that Users' rights are not limited.
2. Information about changes will be available in the form of a notice on the Service.
3. In matters not regulated by this Privacy Policy, the provisions of the GDPR and Polish law apply.