The administrator of the website and of personal data is LUNA CLINIC PROSTA SPÓŁKA AKCYJNA with its registered office at Władysława Syrokomli 46, 51-141 Wrocław, Poland
phone: +48 666 850 666
e-mail: info@lunaclinic.pl
Regarding your personal data, you can contact us by:
- e-mail: info@lunaclinic.pl
- phone: +48 666 850 666
Legal act governing personal data
Your personal data is collected and processed by us in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119, p. 1), commonly known as the GDPR. To the extent not regulated by the GDPR, the processing of personal data is governed by the Personal Data Protection Act of 10 May 2018.
How data is processed
List of processed data and retention periods
On our website we offer you many different services, for the purposes of which we process various personal data, based on various legal grounds.
| Purpose | Personal data |
| conclusion and performance of a contract | first name, surname, correspondence address, e-mail address, phone number |
| creating and maintaining an account | first name, surname, e-mail address, phone number, correspondence address |
| newsletter | e-mail address, first name |
| contact form | first name, e-mail address, phone |
| website traffic analysis | first name, address of stay, IP address |
| direct marketing | first name, address of stay, address |
| of own goods and services, including remarketing | IP |
| establishing, pursuing and enforcing claims and defending against claims in proceedings before courts and other state authorities | first name, surname, home address, PESEL, NIP, REGON, e-mail address, phone number, IP number, bank account number, payment card number |
| fulfilling legal obligations arising from legal provisions, in particular tax and accounting regulations | first name, surname, company, PESEL, NIP or REGON, e-mail address, phone number, correspondence address, payment card number |
Voluntary provision of personal data
Providing the required personal data is voluntary, but it is a condition of our providing services to you (e.g. sending the newsletter or creating an account).
Recipients of personal data
You can find the current list of entities to which we disclose your personal data here.
Automated decision-making (including profiling)
We do not make decisions about you in an automated manner and we do not use profiling.
Your rights related to data processing
Under the GDPR you have the right to:
- request access to your personal data,
- request rectification of your personal data,
- request erasure of your personal data,
- request restriction of the processing of your personal data,
- object to the processing of your personal data,
- request the transfer of your personal data.
If you submit any of the above requests to us, we will inform you - without undue delay, and in any case within one month of receiving the request - of the actions taken in connection with your request.
If necessary, we may extend the one-month period by a further two months due to the complexity of the request or the number of requests.
In any case, we will inform you within one month of receiving the request about the extension and give you the reasons for the delay.
Right of access to personal data (Art. 15 GDPR)
You have the right to be informed whether we process your personal data. If we process your personal data, you have the right to:
- access your personal data,
- obtain information about the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of the data, the planned retention period of your data or the criteria for determining that period, the rights you have under the GDPR and the right to lodge a complaint with the President of the Personal Data Protection Office, and the source of the data,
about automated decision-making, including profiling, and about the safeguards applied in connection with the transfer of the data outside the European Union;
- obtain a copy of your personal data.
If you wish to request access to your personal data, send your request to: info@lunaclinic.pl.
Right to rectification of personal data (Art. 16 GDPR)
If your personal data is inaccurate, you have the right to request that we rectify it without delay. You also have the right to request that we complete your personal data. If you wish to request rectification or completion of your personal data, send your request to: info@lunaclinic.pl.
Right to erasure of personal data, the so-called “right to be forgotten” (Art. 17 GDPR)
You have the right to request the erasure of your personal data when:
- your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
- you have withdrawn a specific consent, to the extent that the personal data was processed on the basis of your consent;
- your personal data was processed unlawfully;
- you have objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent that the processing is related to direct marketing;
- you have objected to the processing of your personal data in connection with processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of legitimate interests pursued by us or a third party.
Despite a request for erasure of personal data, we may continue to process your data in order to establish, pursue or defend claims, of which you will be informed.
If you wish to request the erasure of your personal data, send your request to: info@lunaclinic.pl.
Right to request restriction of the processing of personal data (Art. 18 GDPR)
You have the right to request restriction of the processing of your personal data when:
- you contest the accuracy of your personal data - in that case we will restrict the processing of your data for a period allowing us to verify its accuracy;
- the processing of your data is unlawful and, instead of erasure, you request restriction of the processing of your personal data;
- your personal data is no longer needed for the purposes of processing, but it is needed to establish, pursue or defend your claims;
- you have objected to the processing of your personal data - until it is determined whether our legitimate interests override the grounds indicated in your objection.
If you wish to request restriction of the processing of your personal data, send your request to: info@lunaclinic.pl.
Right to object to the processing of personal data (Art. 21 GDPR)
You have the right to object at any time to the processing of your personal data, including profiling, in connection with:
- processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of legitimate interests pursued by the data controller or a third party;
- processing for direct marketing purposes.
If you wish to object to the processing of your personal data, send your request to: info@lunaclinic.pl.
Right to request the transfer of personal data (Art. 20 GDPR)
You have the right to receive your personal data from us in a structured, commonly used, machine-readable format and to transmit it to another data controller.
By default, we will provide your personal data in CSV format. If you prefer the data to be provided in another format, indicate the preferred format in your request. Where possible, we will try to provide the data in your preferred format.
You can also request that we transmit your personal data directly to another controller (where technically feasible).
If you wish to request the transfer of your personal data, send your request to: info@lunaclinic.pl.
Withdrawal of the required consent to data processing.
You can withdraw your consent to the processing of your personal data at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out by us on the basis of your consent before its withdrawal.
If you wish to withdraw your consent to the processing of your personal data, send your request to: info@lunaclinic.pl.
If you wish to withdraw your consent to the processing of personal data for the purposes of the “Newsletter” service, you can unsubscribe here.
Complaint to the supervisory authority
If you believe that the processing of your personal data violates data protection regulations, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.
In Poland, the supervisory authority within the meaning of the GDPR is the President of the Personal Data Protection Office (UODO).
You can find more information here.
“Cookies”
When browsing the pages of the website, “cookies” are used (hereinafter: Cookies) - small text files that are saved on your end device in connection with your use of the website. Their purpose is to ensure the correct operation of the website’s pages.
These files make it possible to identify the software you use and to adapt the website individually to your needs.
Cookies usually contain the name of the domain they come from, their storage time on the device and an assigned value.
Security
The Cookies we use are safe for your devices. In particular, it is not possible for viruses or other unwanted or malicious software to enter your devices via Cookies.
Types of Cookies
We use two types of Cookies:
- Session cookies: they are stored on your device and remain there until the end of the given browser session. The saved information is then permanently deleted from your device’s memory. The session cookies mechanism does not allow the collection of any personal data or any confidential information from your device.
- Persistent cookies: they are stored on your device and remain there until deleted. Ending a browser session or switching off the device does not delete them from your device. The persistent cookies mechanism does not allow the collection of any personal data or any confidential information from your device.
Purposes
We also use third-party Cookies for the purposes of configuring the website.
To learn the rules of Cookie use, we recommend reading the privacy policies of the indicated companies. Cookies may be used by advertising networks, in particular the Google network, to display advertisements matched to your preferences. For this purpose, information about how you navigate the web or the time of using the website may be stored.
To view and edit information about your preferences collected by the Google advertising network, you can use the tool available at Google Preferences.
Using your web browser settings or the service configuration, you can change your Cookie settings yourself at any time, specifying the conditions for their storage and for Cookies’ access to your device. You can change these settings to block the automatic handling of Cookies in your browser settings or to be informed each time they are placed on your device. Detailed information about the possibilities and ways of handling Cookies is available in the settings of your software (web browser).