We respect your privacy. Below we explain what personal data we collect, why, how long we keep it and what rights you have. This policy covers the massageheavenwarsaw.com website and contact with the Massage Heaven studio.
1. Who is the data controller
The controller of your personal data is Anastasiia Zhelezniak, running a sole proprietorship (the Massage Heaven studio), Krucza 16/22, 00-526 Warszawa, Poland, NIP 5253039331, REGON 541191343 (“Massage Heaven”, “we”). For any questions about personal data, write to us at [email protected] or call +48 731 711 509.
2. What data we collect
- Gift voucher form: name, phone number, chosen massage or amount, duration and the content of your message.
- Bookings: if you book a visit through Booksy or Fresha, we receive the data needed to handle it — first and last name, phone, e-mail, date and type of treatment.
- Contact: the data you share when you message us on Instagram or WhatsApp, by e-mail or by phone.
- Health information: before a massage you may tell us about pain, injuries, pregnancy or illnesses. We use it only to make the massage safe for you.
3. Why and on what legal basis
- Answering your enquiry, preparing a voucher and handling your visit — steps before entering into a contract and its performance (Art. 6(1)(b) GDPR).
- Health information — your explicit consent (Art. 9(2)(a) GDPR).
- Accounting and tax — a legal obligation (Art. 6(1)(c) GDPR).
- Replying to other messages, and establishing, pursuing or defending claims — our legitimate interest (Art. 6(1)(f) GDPR).
4. Who we share data with
Your data may be shared with companies that help us run the studio: the Booksy and Fresha booking systems, website hosting and e-mail providers, our accounting office and — if you message us on Instagram or WhatsApp — Meta Platforms. Booksy, Fresha, Meta and Google (the map on the website) also process data under their own rules, described in their privacy policies. We do not sell your data.
5. Transfers outside the EEA
Some providers, such as Meta and Google, may process data outside the European Economic Area. This happens on the basis of a European Commission decision (the EU–US Data Privacy Framework) or standard contractual clauses, which ensure an adequate level of protection.
6. How long we keep data
- Voucher enquiries that did not lead to an order — up to 12 months from the last contact.
- Data related to a voucher or a visit — for as long as the service is provided, and then until claims become time-barred.
- Accounting documents — 5 years from the end of the year in which the tax obligation arose.
- Health information — until you withdraw consent or our cooperation ends.
7. Your rights
You have the right to access your data, to have it corrected, deleted or its processing restricted, to data portability, and to object to processing based on our legitimate interest. You can withdraw your consent at any time — this does not affect the lawfulness of processing before the withdrawal. To exercise your rights, write to [email protected]. You can also lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa).
8. Do you have to provide your data
Providing your data is voluntary, but without it we cannot answer your enquiry, prepare a voucher or book your visit. We do not make automated decisions or use profiling.
9. Cookies
We use three kinds of cookies:
- Essential — needed for the website to work, e.g. to remember your chosen language and your cookie choice. They don’t require consent.
- Functional — display a Google map with directions to the studio. Google may set its own cookies when doing so.
- Analytics — aggregated visit statistics that help us improve the website ([tool name]).
We turn on functional and analytics cookies only with your consent (Art. 6(1)(a) GDPR), given in the cookie banner. You can change or withdraw your choice at any time in “Cookie settings” in the website footer or in your browser settings.
10. Changes to this policy
We may update this policy, e.g. when the law or our services change. The current version is always available on this page.
Last updated: [publication date]