Mango Spa privacy policy

1. Personal data controller

The controller of your personal data is Mango Spa, located at 59 Krochmalna Street, 00-864 Warsaw. You can contact us at the following e-mail address: contact mangospawork@gmail.com or by phone: +48 789 669 774.

2 Scope of personal data collected

As part of the operation of our salon, we may collect the following personal data:
Name,
Phone number,
E-mail address,
Address of residence (if necessary)
Health information (if necessary for treatment),
Payment details (in case of online payment).
Data is collected when you book services, make inquiries on our website or when you visit the salon.

3 Purposes of data processing

Your personal data is processed for the following purposes:
Processing of service orders and their fulfillment,
Sending you communications regarding your appointments (e.g. reminders of upcoming appointments),
Processing payments, sending you information about promotions and news (if you have given your explicit consent).

4 Legal basis for processing

The processing of your personal data is based on:
Your consent (Article 6(1)(a) GDPR) - e.g. consent to receive marketing information,
Necessity for the performance of a contract (Article 6(1)(b) GDPR) - in order to provide the requested services, legal obligations, e.g. for accounting purposes (Article 6(1)(c) GDPR).

5. Transfer of personal data

Your data may be transferred to the following entities:
Online payment processing companies, IT service providers and hosting providers,
Accountants and auditors (if necessary).
We do not share your personal data with any other entities without your consent, except as required by law.

6 Your rights

You have the right to
Access to your personal data,
Correct your data if it is inaccurate,
erasure of your data (“right to be forgotten”),
Restriction of data processing,
Transfer your data to another controller,
Withdraw your consent to the processing of your data at any time (this does not affect the lawfulness of the processing prior to the withdrawal of consent).
To exercise these rights, please contact us at kontakt@mangospa.pl.

7 Data retention period
‍
Personal data is stored for the period necessary to fulfill the purposes for which it was collected:
Booking data - for 5 years after the completion of the service,
Accounting data - in accordance with the law, for 5 years.

8 Data security

We use appropriate technical and organizational measures to ensure the security of your personal data, including, but not limited to, data encryption, password protection of systems and control of access to data.

9 Cookies

Our website uses cookies to improve its functionality and to tailor the content to your needs. You can control cookies in your browser settings.

10 Changes to the privacy policy

We reserve the right to make changes to this privacy policy. We will notify users of any changes by posting a new version of the policy on our website.