Privacy Policy
PRIVACY POLICY
www.ariahair.pl
Valid from: 26/05/2026.
§ 1. PERSONAL DATA CONTROLLER
1. The administrator of personal data of Customers of the ariahair.pl Online Store is:
- Aria Hair Daria Anna Karczewska
- ul. Księżnej Zofii 14, 78-200 Białogard
- NIP: 6722114294, REGON: 544510406
- e-mail: concierge@ariahair.pl, tel.: +97 155 1141 435
hereinafter referred to as the "Administrator".
2. The Administrator processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), the Act of 10 May 2018 on the Protection of Personal Data and the Act of 18 July 2002 on the provision of electronic services.
3. Contact with the Administrator in matters relating to personal data protection is possible at the following e-mail address: concierge@ariahair.pl.
§ 2. SCOPE AND PURPOSE OF DATA PROCESSING
1. The Administrator processes personal data provided by the Customer when registering an Account, placing an order and using the Store, including: name and surname, delivery and billing address, e-mail address, telephone number, and in the case of entrepreneurs also the company name and Tax Identification Number.
2. Personal data are processed for the following purposes:
- conclusion and performance of the Sales Agreement, execution of the order and its delivery – basis: Article 6, paragraph 1, letter b of the GDPR,
- fulfillment of legal obligations incumbent on the Controller, in particular tax and accounting obligations (issuing and storing invoices) – basis: Article 6, paragraph 1, letter c of the GDPR,
- consideration of complaints and the pursuit and defense against claims – basis: Article 6(1)(f) of the GDPR,
- maintaining the Customer Account – basis: Article 6, paragraph 1, letter b of the GDPR,
- direct marketing, including sending a newsletter – basis: Article 6(1)(a) of the GDPR (consent) and Article 6(1)(f) of the GDPR (legitimate interest),
- analysis of traffic in the Store and statistics (cookies) – basis: Article 6 paragraph 1 letter a and letter f of the GDPR.
3. Providing personal data is voluntary, but necessary for the conclusion and execution of the Sales Agreement. Failure to provide data will prevent the order from being placed and fulfilled.
§ 3. DATA STORAGE PERIOD
1. Personal data are stored for the period of:
- necessary for the performance of the Sales Agreement and for the limitation period for claims (as a rule, 6 years, and for claims related to business activities, 3 years),
- required by tax and accounting law – 5 years from the end of the calendar year in which the tax payment deadline expired,
- until consent is withdrawn – in the scope of data processed on the basis of consent (e.g. newsletter),
- until an effective objection is raised – in the scope of data processed on the basis of the legitimate interest of the Controller.
§ 4. DATA RECIPIENTS
1. Customers' personal data may be transferred to the following categories of recipients, only to the extent necessary to achieve the purposes of processing:
- carriers and logistics operators (courier companies, Poczta Polska, parcel locker operators),
- electronic payment operators handling transactions in the Store,
- providers of IT services, hosting and the store platform,
- the accounting office serving the Administrator,
- public authorities entitled to receive data under the law.
2. Entities entrusted with the processing of personal data operate on the basis of entrustment agreements and are obliged to maintain confidentiality and apply appropriate security measures.
§ 5. DATA TRANSFER OUTSIDE THE EEA
1. The Administrator does not, as a rule, transfer personal data outside the European Economic Area (EEA).
2. In the event of using tools from providers outside the EEA (e.g. analytical or marketing tools), data transfers shall only take place on the basis of appropriate safeguards referred to in Article 46 of the GDPR, in particular standard contractual clauses approved by the European Commission.
§ 6. RIGHTS OF DATA SUBJECTS
1. Every data subject is entitled to:
- the right to access your data (Article 15 of the GDPR),
- the right to rectification of data (Article 16 of the GDPR),
- the right to erasure of data (Article 17 of the GDPR),
- the right to restrict processing (Article 18 of the GDPR),
- the right to data portability (Article 20 of the GDPR),
- the right to object to processing (Article 21 of the GDPR),
- the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal,
- the right to lodge a complaint with the supervisory authority: President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
2. To exercise the above rights, please contact the Administrator at the following email address: concierge@ariahair.pl. The Administrator will respond without undue delay, no later than one month from receipt of the request.
§ 7. PROFILING
1. Customers' personal data may be processed in an automated manner, including through profiling, to tailor marketing content. However, profiling does not have any legal effects on the Customer or significantly affect their situation.
§ 8. DATA SECURITY
1. The Controller uses appropriate technical and organizational measures to ensure the protection of processed personal data, including connection encryption (SSL certificate), securing access to data and regular backups.
2. In the event of a personal data breach that may result in a high risk to the rights or freedoms of individuals, the Controller shall, without undue delay, notify the data subjects and the competent supervisory authority of the breach, in accordance with Articles 33–34 of the GDPR.
§ 9. COOKIES
1. The Store uses cookies. Detailed rules for their use are set out in the Cookie Policy available in the Store.
§ 10. FINAL PROVISIONS
1. The Administrator reserves the right to change this Privacy Policy. Customers will be informed of any changes by publishing a new version on the Store's website.
2. In matters not covered by this Privacy Policy, the provisions of the GDPR and generally applicable Polish law shall apply.