Privacy Policy

Based on the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (OJ EU L No. 119, p. 1), hereinafter "GDPR", we inform you that the Controller of your personal data is Szymon Bujok, conducting business under the name FLOATING Szymon Bujok, ul. Chałupiańska 6, 43-460 Wisła, NIP: 5482651217 REGON: 367715677. Contact details: floatingcieszyn@gmail.com and ul. Chałupiańska 6, 43-460 Wisła, as well as the Motivation and Development Foundation with its registered office at ul. Chałupiańska 6, 43-460 Wisła, NIP: 5482755425 REGON: 526901701 entered into the National Court Register under the KRS number 0001068287. Contact details: mentalfundacja@gmail.com

Categories of your Personal Data:

The personal data controller will process the following data: name, surname, telephone number, e-mail address, billing address, company name, form of business activity, number of the relevant register of entrepreneurs, NIP number, REGON number.

Purposes and basis of processing:

We hereby inform you that your personal data will be processed in the Controller's IT systems in order to prepare offers for establishing legal relationships and legal actions related thereto, in order to conduct correspondence with you and process your order, in order to create a customer account on the website, in order to implement any claims under the warranty for sales and for their archiving, as well as to pursue legally justified interests of the Controller, which is in particular the possible establishment and pursuit of claims or defense against claims.

Personal data of all persons using the Store (including IP address or other identifiers and information collected via cookies or other similar technologies) are processed by the Administrator:

1. in order to provide services electronically in the scope of making the content collected in the Store available to Users, providing contact forms – then the legal basis for processing is the necessity of processing for the performance of the contract (Article 6, paragraph 1, letter b of the GDPR);
2. in order to process purchases made without registration in the Store – then the legal basis for processing is the necessity of processing for the performance of the contract (Article 6, paragraph 1, letter b of the GDPR);
3. for the purpose of handling complaints – then the legal basis for processing is the necessity of processing for the performance of the contract (Article 6, paragraph 1, letter b of the GDPR);
4. for analytical and statistical purposes – then the legal basis for processing is the legitimate interest of the Controller (Article 6, paragraph 1, letter f of the GDPR) consisting in conducting analyses of Users’ activities and their preferences in order to improve the functionalities used and the services provided;
5. in order to possibly establish and pursue claims or defend against them – the legal basis for processing is the legitimate interest of the Controller (Article 6 paragraph 1 letter f of the GDPR) consisting in the protection of its rights;
6. for the Administrator's marketing purposes,

Placing an order (purchase of goods offered in the Store by the Administrator) by a Store User involves the processing of their personal data. Providing data marked as mandatory is required to accept and process the order, and failure to provide it will result in the order not being processed. Providing other data is optional. Personal data is processed:

1. in order to fulfil the placed order – the legal basis for processing is the necessity of processing for the performance of the contract (Article 6 paragraph 1 letter b of the GDPR); in the scope of data provided optionally, the legal basis for processing is consent (Article 6 paragraph 1 letter a of the GDPR);
2. in order to fulfil the statutory obligations incumbent on the Controller, resulting in particular from tax and accounting regulations – the legal basis for processing is the legal obligation (Article 6, paragraph 1, letter c of the GDPR);
3. for analytical and statistical purposes – the legal basis for processing is the legitimate interest of the Controller (Article 6, paragraph 1, letter f of the GDPR) consisting in conducting analyses of Users’ activity in the Store, as well as their shopping preferences in order to improve the functionalities used;
4. in order to possibly establish and pursue claims or defend against them – the legal basis for processing is the legitimate interest of the Controller (Article 6 paragraph 1 letter f of the GDPR) consisting in the protection of its rights.

The Administrator provides the ability to contact the Administrator using electronic contact forms, as well as via email or other forms of communication provided on the Store's website. Using the form or contacting the User via email or other forms of communication provided on the Store's website requires the provision of personal data necessary to contact the User and respond to the inquiry. The User may also provide other data to facilitate contact or processing the inquiry. Providing data marked as mandatory is required to accept and process the inquiry, while failure to provide such data will result in the inability to process the inquiry. Providing the remaining data is voluntary. Personal data is processed:

1. in order to identify the sender and process their inquiry sent via the provided form – the legal basis for processing is the necessity of processing for the performance of the service provision contract (Article 6, paragraph 1, letter b of the GDPR);
2. for analytical and statistical purposes – the legal basis for processing is the legitimate interest of the Controller (Article 6, paragraph 1, letter f of the GDPR) consisting in keeping statistics of inquiries submitted by Users via the Store in order to improve its functionality.

Data recipients:

The Personal Data Controller makes your personal data available to the supplier of IT systems and IT services; entities providing services to the Controller on the basis of civil law contracts; entities cooperating with the Controller in processing the order (banks, entities enabling online payments), and bodies authorized to receive your data under the law.

In connection with the provision of services, personal data will be disclosed to external entities, including in particular suppliers responsible for the operation of IT systems, entities such as payment operators, entities providing accounting, legal, auditing and consulting services, and couriers (in connection with the execution of the order).

In particular, personal data will be disclosed to the following external entities:

1. Polski Standard Płatności a limited liability company with its registered office in Warsaw, address: ul. Cypryjska 72, 02-781 Warsaw, registered in the District Court for the capital city of Warsaw in Warsaw, 13th Commercial Division of the National Court Register, under number 0000493783, NIP: 5213664494, REGON: 147055889, share capital (paid-up capital) PLN 12,626,000 – as an entity operating the BLIK online transfer system, through which it is possible to make payments for goods or services purchased on the Store’s website;
2. ING Bank Śląski SA, with its registered office at: ul. Sokolska 34, 40-086 Katowice, entered into the Register of Entrepreneurs kept by the District Court Katowice-Wschód in Katowice under the KRS number 0000005459, NIP: 634-013-54-75, REGON: 271514909 as the entity providing the service vhttps://www.imoje.pl/;

The Administrator reserves the right to disclose selected information concerning the User to competent authorities or third parties who submit a request for such information, based on an appropriate legal basis and in accordance with applicable law.

On the Website, Users can book a visit by phone, email or electronically using the Booksy application.

Persons who register a visit to the Administrator's Website via the Booksy application are asked to create an account, and if an account has already been created, to log in. During registration, you must provide the data necessary to create and manage your account, including your name, email address, and phone number. Providing the data marked as mandatory is required to create and manage your account, and failure to provide it will result in the inability to create an account. Providing the remaining data is voluntary.

When registering a User account on the Website and arranging visits with the Controller takes place via the Booksy application, User data are processed by the Booksy application. Booksy is operated by Booksy International sp. z o. o. with its registered office in Warsaw, ul. Łużycka 2/4/6, unit U4, 00-845 Warsaw, entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court for the capital city of Warsaw in Warsaw, 13th Commercial Division of the National Court Register under the number: 0000551914, Tax Identification Number (NIP): 9512381607. By registering an account on the Website and arranging a visit, Booksy has access to Users' personal data. To familiarize yourself with Booksy's personal data protection principles, we encourage you to read the Booksy terms and conditions and privacy policy, available at: https://booksy.com/pl-pl/p/terms i https://booksy.com/pl-pl/p/privacy.

Personal data are processed:

1. in order to provide services related to maintaining and servicing an account on the Website – the legal basis for processing is the necessity of processing for the performance of the contract (Article 6, paragraph 1, letter b of the GDPR), and in the scope of data provided optionally – the legal basis for processing is consent (Article 6, paragraph 1, letter a of the GDPR);
2. for analytical and statistical purposes – the legal basis for processing is the legitimate interest of the Controller (Article 6, paragraph 1, letter f of the GDPR) consisting in conducting analyses of Users’ activity on the Website and the manner of using the account, as well as their preferences in order to improve the functionalities used;
3. in order to possibly establish and pursue claims or defend against them – the legal basis for processing is the legitimate interest of the Controller (Article 6 paragraph 1 letter f of the GDPR) consisting in the protection of its rights.
4. for the Controller's marketing purposes – the principles of personal data processing for marketing purposes are described in the section entitled MARKETING.
5. If the User places any personal data of other people on the Website (including their name, address, telephone number or e-mail address), they may do so only if they do not violate applicable law and the personal rights of such people and with their consent.

The Controller allows you to create an account and log in to the Booksy application via third parties, i.e., social networks such as Facebook. We enable you to log in to our services using Facebook Connect. This service is offered by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, and Meta Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. No additional registration is required. To log in, you will be redirected to the Facebook page, where you can log in by entering your user details. This connects your Facebook profile with our service. Through this link, we automatically receive information from Facebook. The following data is transferred to us: email address. This information is required to conclude a contract for the identification of the user. Further information about Facebook and its privacy settings can be found in the data protection guidelines at https://plpl.facebook.com/about/privacy/update.

Data storage period:

Your personal data will be processed for the duration of the order execution, correspondence, negotiations, negotiations, arrangements, legal relations, including the validity of contracts, and also afterwards, i.e. until the expiry of the limitation period for any claims arising from legal relations, including contracts and other legal acts, in connection with the implementation of the archiving obligation.

The data controller does not transfer data outside of Poland/EU/European Economic Area.

User Rights:

1. Data subjects have the following rights:

1. The right to information about data processing personal – The Administrator provides information on the processing of personal data, including in particular the purposes and legal basis of processing, the scope of data held, entities to which personal data are disclosed and the planned date of their deletion;
2. The right to obtain a copy of your data – The Administrator provides a copy of the processed data relating to the person submitting the request;
3. Right to rectification – The Administrator removes any inconsistencies or errors regarding the personal data being processed, and supplements or updates them if they are incomplete or have changed;
4. The right to delete data (the so-called right to be forgotten) – is the basis for requesting the deletion of data whose processing is no longer necessary to achieve any of the purposes for which they were collected;
5. The right to restrict processing – The Administrator ceases to perform operations on personal data, except for operations to which the data subject has given consent and their storage, in accordance with the adopted retention principles, or until the reasons for limiting data processing cease to exist (e.g. a decision of the supervisory authority is issued permitting further data processing);
6. The right to data portability – To the extent that data is processed in connection with a concluded contract or expressed consent, the Controller releases the data provided by the data subject in a machine-readable format. It is also possible to request that this data be transferred to another entity – provided that both the Controller and the other entity to which the data is transferred have the appropriate technical conditions to enable such transfer;
7. The right to object to the processing of data for marketing purposes – the data subject may object to the processing of personal data for marketing purposes at any time, without having to justify such objection;
8. The right to object to other data processing purposes – the data subject may at any time object to the processing of personal data based on the Controller's legitimate interest (e.g., for analytical or statistical purposes or for reasons related to property protection). Any objection in this regard must include justification and is subject to assessment by the Controller;
9. The right to withdraw consent – if data are processed on the basis of consent, the data subject has the right to withdraw it at any time, which, however, does not affect the lawfulness of the processing carried out before the withdrawal of that consent;
10. Right to complain – if it is found that the processing of personal data violates the provisions of the GDPR or other provisions on personal data protection, the data subject may file a complaint with the President of the Personal Data Protection Office.
11. A request regarding the exercise of the rights of data subjects, together with an indication of the type of request we are making, may be submitted:

1. in writing to the address of the Administrator's registered office indicated above;
2. by e-mail to the Administrator's e-mail address: floatingcieszyn@gmail.com or mentalfundacja@gmail.com

1. If the Controller is unable to determine the content of the request or identify the person submitting the request based on the submitted application, it will ask the applicant for additional information.
2. A response to applications will be provided within one month of receipt. If an extension of this deadline is necessary, the Administrator will inform the applicant of the reasons for such extension.
3. The response will be provided to the e-mail address from which the application was sent, and in the case of applications sent by post, by regular mail to the address indicated by the applicant, unless the content of the letter indicates a wish to receive feedback by e-mail (in which case the e-mail address should be provided).

Social networking sites 

1. The Administrator processes the personal data of Users visiting the Administrator's social media profiles (Facebook, YouTube). This data is processed solely for the purpose of maintaining the profile, including to inform Users about the Administrator's activities and to promote various events, services, and products, as well as to communicate with users through social media functionalities. The legal basis for the processing of personal data by the Administrator for this purpose is its legitimate interest (Article 6, paragraph 1, letter f of the GDPR) in promoting its own brand and building and maintaining a brand-related community.
2. The Store's website includes integrated social media plugins. This means that if the User clicks on one of these buttons, certain information will be shared with the providers of those social media channels. If the User is logged into a given social media account at the same time, the social media provider can link this information to the User's social media account and publicize the User's profile activity, making it available to other network users.
3. Plug-ins from social media platforms, including Facebook, YouTube, and others, may be available on the Store's website. Related services are provided by:
   1. Facebook is operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 and Meta Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA
   2. YouTube is operated by: Google, 1600 Amphitheater Parkway Mountain View, CA 94043 United States;
4. The plug-in only provides its provider with information about the time the User accessed the Store. If the User is logged in to their account, such as Facebook, while viewing or navigating the Store's website, the provider can combine the User's interests, information preferences, and other data obtained, for example, by clicking the "Like" button, leaving a comment, or entering their profile name in search results. This information will also be transmitted directly to the provider by the browser. To avoid recording a visit to a selected User account with a given social media provider on the Store's website, log out of your account before browsing the Store.
5. The Store's website also contains links to websites administered by entities independent of the Administrator, such as Facebook or YouTube. These may have separate privacy policies or clauses. The Administrator encourages you to familiarize yourself with their content, as the Administrator has no control over the data collected and its processing, nor does it have knowledge of the full scope of its collection, the purpose of its processing, or its storage duration. The Administrator also has no information on the deletion of data collected by plug-in providers.
6. Addresses of plug-in providers and URLs to their privacy policies:
   1. Finish: http://www.facebook.com/policy.php; further information on data acquisition: http://www.facebook.com/help/186325668085084 ; http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has joined the EU-US Privacy Shield agreement, https://www.privacyshield.gov/EU-US-Framework.
   2. Google: www.google.de/intl/de/policies/privacy i https://www.youtube.com/howyoutubeworks/policies/community-guidelines/. Google also processes your personal data in the USA and is subject to the EU-US Privacy Shield agreement, www.privacyshield.gov/EU-US-Framework;
7. The Store website publishes videos hosted on YouTube. All of these videos use "enhanced data protection," meaning no data about you as a user is transferred to YouTube unless you play the videos. Only when a video is played is personal data transferred. We have no influence over this type of data transfer. 
8. If you visit the Shop's website and play a video embedded on YouTube, YouTube receives information that you have opened the relevant video on the Shop's website, which involves transferring personal data to YouTube. This occurs regardless of whether YouTube provides a user account through which you are logged in, or whether you do not have a user account. If you are logged in to Google (and therefore also to YouTube), your data is assigned directly to your account. If you do not wish to be assigned to your YouTube profile, log out before playing the video. YouTube stores your data as user profiles and uses them for advertising, market research, and to design its website according to needs. This analysis is primarily carried out (even for users who are not logged in) to present tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of such user profiles; however, to exercise this right, please contact YouTube.
9. For more information about the purpose and scope of data collection and processing by YouTube, please refer to the privacy policy. There you will also find further information about your rights and settings options to protect your privacy: www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and is subject to the EU-US Privacy Shield agreement, www.privacyshield.gov/EU-US-Framework.
10. The Store website uses the Google Ads program.
11. Google Ads is a program of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States ("Google"). Google Ads uses conversion tracking. When you click on an ad displayed by Google, a conversion tracking cookie is generated. Cookies are small text files that are saved in the web browser on your computer. These cookies expire after 30 days and are not used to personally identify the user. If the user visits certain pages of this website and the cookie has not yet expired, Google and the Shop website are informed that the user was redirected to this page after clicking on an ad.
12. Each Google Ads customer receives a different cookie. Cookies cannot be tracked across Ads customer websites. The information collected through the conversion cookie is used to generate conversion statistics for Ads customers who have opted for conversion tracking. Customers are informed of the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any personally identifiable information. If you do not wish to participate in conversion tracking, you can opt out of this feature. To do this, simply deactivate the Google conversion tracking cookie in your browser. You will then not be included in the conversion tracking statistics.
13. Conversion cookies are stored on the basis of Article 6, sentence 1, letter f of the GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its online offering and its advertising.
14. For more information about Google Ads and Google Conversion Tracking, please see Google's privacy policy at: https://www.google.plpolicies/privacy/.
15. You can configure your browser to notify you when cookies are being used and to allow them only on a case-by-case basis, to reject cookies in individual cases or generally, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.
16. In order to conduct effective marketing campaigns and promotions sold by the Controller through the Online Store of Goods, the Controller uses the "Facebook Pixel" option, provided by the Facebook social networking site operated by Meta Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA or, for users who are EU residents, Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbor, Dublin 2 ("Facebook"). Facebook Pixel is a snippet of code placed on the Online Store website. It allows Facebook to identify visitors to the Controller's online content as a target group for displaying Facebook advertisements on their social media profiles (e.g., as part of sponsored advertisements), which we understand as our legitimate interest (Article 6(1)(f) of the GDPR). The Facebook Pixel feature therefore allows the Controller to display the Controller's published Facebook ads only to Facebook users who have shown an interest in our services or who share certain common characteristics (such as interests in certain topics or products based on visited tabs on our website, or viewed products), which we transmit to Facebook (this is due to the pixel installed on our website). The Facebook Pixel feature also helps the Controller understand the effectiveness of Facebook ads for statistical and market research purposes by showing whether users were redirected to our services after clicking on a Facebook ad (so-called conversion, which allows us to determine which devices a user performs an action on), to create lookalike audiences or statistical twins (i.e., to display ads to target groups similar to existing customers), and to obtain comprehensive website usage statistics. When a user visits our website, the Facebook Pixel feature establishes a direct connection to Facebook servers. This notifies the Facebook server that the user has visited our website, and Facebook assigns this information to the user's personal Facebook account.
17. Further information about the collection and use of data by Facebook and your rights and options regarding privacy protection can be found in Facebook's data protection policy at https://www.facebook.com/about/privacy/update. Specific information and details about Facebook Pixel and how it works are available in the Facebook Help section at https://www.facebook.com/business/help/651294705016616. This feature can be disabled as shown on the page. https://de-de.facebook.com/business/help/1415256572060999?helpref=uf_permalink or on the website https://www.facebook.com/settings?tab=ads. To do this, you must log in to Facebook.
18. You can object to our use of the Facebook Pixel using your personal data as follows: Users with a Facebook account can do so by clicking on the link below: https://www.facebook.com/ads/preferences.
19. Anyone can opt out of seeing interest-based advertising displayed by Facebook or its affiliates through the European Interactive Digital Advertising Alliance (opt-out) by clicking on the link below: http://www.youronlinechoices.com/pl/twojewybory.
20. Please note that when the cookie blocking is removed, data will be collected again by the Facebook Pixel.

Policy COOKIES

Cookies are computer data, specifically text files, stored on the Website User's end device and intended for use with the Website's websites. Cookies typically contain the name of the website they originate from, the duration of their storage on the end device, and a unique number.

The website does not automatically collect any information, except for information contained in cookies.

Cookies are used for the following purposes:

• securing the website against the operation of robots (computer programs used to automatically examine the content of a website);
• adapting the content of websites to the preferences of the Website User and optimising the use of websites; in particular, these files enable the recognition of the Website User's device and proper display of the website, tailored to their individual needs;
• protection against displaying the same content to the user again;
• creating statistics, including using Google Analytics, to determine how many users use the Website and how Website Users use websites, which enables the improvement of their structure and content;

Cookies placed on the Website User's end device may also be used by advertisers and partners cooperating with the Website Operator.

The Website uses two basic types of cookies: "session cookies" and "persistent cookies." "Session" cookies are temporary files that are stored on the User's end device until logging out, leaving the website, or disabling the software (web browser). "Persistent" cookies are stored on the User's end device for the time specified in the cookie parameters or until they are deleted by the User.

The following types of cookies are used within the Website:

• „essential” cookies, enabling the use of services available on the Website, e.g. authentication cookies used for services that require authentication on the Website;
• cookies used to ensure security, e.g. used to detect abuse of authentication on the Website;
• „performance” cookies, enabling the collection of information on how the Website pages are used;
• „functional” cookies, which enable „remembering” the settings selected by the User and personalizing the User interface, e.g. in terms of the selected language or region the User comes from, font size, website appearance, etc.;
• „advertising” cookies, enabling the provision of advertising content to Users that is more tailored to their interests.

In many cases, web browsing software (web browser) allows cookies to be stored on the user's end device by default. Website users can change their cookie settings at any time. These settings can be changed, in particular, to block the automatic handling of cookies in the web browser settings or to notify the user each time they are placed on the device. Detailed information about the possibilities and methods of handling cookies is available in the software (web browser) settings.

The Website Operator informs that restrictions on the use of cookies may affect some functionalities available on the Website.