This Privacy Policy describes the rules for processing personal data of users of the website www.nemezinkrecovery.pl, operated by Michał Popiół conducting business activity under the name Michał Popiół Nemezink.
By using the website, contacting us, submitting a contact form or proceeding to the Booksy booking system, you may provide us with your personal data. We care about its security and process it in accordance with applicable regulations, in particular the GDPR.
1. Personal data controller
The controller of your personal data is:
Michał Popiół Nemezink
ul. 1 Brygady 16/33
33-300 Nowy SÄ…cz
Poland
NIP: 7343585506
REGON: 386825885
Place where Nemezink Recovery services are provided:
Sandomierska 3/LU4, KrakĂłw, Poland
Contact regarding personal data protection:
Email: nemezinkrecovery@gmail.com
Phone: +48 530 971 531
2. What data may we process?
Depending on how you use the website or contact Nemezink Recovery, we may process the following data:
- name,
- email address,
- phone number, if provided,
- message content or description of a tattoo / permanent makeup,
- photo of a tattoo or permanent makeup submitted through the form or message,
- appointment booking data, if you use the Booksy system,
- technical data related to website use, such as IP address, device type, browser, operating system, approximate location, cookie identifiers or similar technologies.
3. For what purposes do we process data?
We may process your personal data for the following purposes:
- responding to your inquiry,
- initial assessment of a tattoo or permanent makeup based on the description and photo you provide,
- booking a consultation or appointment,
- handling contact by email, phone or Instagram,
- keeping documentation related to an inquiry or visit,
- establishing, pursuing or defending potential claims,
- ensuring proper operation of the website,
- creating statistics, analytics and improving the website, if we use analytical tools,
- conducting marketing, remarketing or advertising activities, if we use appropriate tools and obtain the required consent.
4. Legal bases for data processing
We process personal data on the basis of:
- Article 6(1)(b) GDPR — when processing is necessary to take steps at your request before entering into a contract or to perform a contract, for example in connection with booking an appointment;
- Article 6(1)(f) GDPR — when processing is necessary for the purposes of our legitimate interest, for example responding to inquiries, handling communication, pursuing or defending claims, ensuring website security;
- Article 6(1)(a) GDPR — when you give consent, for example to submit a tattoo photo through the form, use certain cookies, analytics or marketing;
- Article 6(1)(c) GDPR — when processing is necessary to comply with legal obligations imposed on the controller, for example accounting, tax or documentation obligations.
If the submitted photo or description contains information that may indicate health condition, skin condition, scars, skin reactions or other special category data, such data may be processed only to the extent necessary to handle the inquiry, initially assess treatment possibilities or qualify for the treatment, based on your explicit consent or another appropriate legal basis provided by the GDPR.
5. Contact form and tattoo photo submission
The website may include a form allowing you to submit your name, email address, tattoo description and a photo of a tattoo or permanent makeup.
We use data from the form only to respond to your inquiry, initially assess the submitted case and suggest possible next steps, such as a consultation, approximate quote or treatment plan.
An initial assessment based on a photo is indicative only and does not replace an in-studio consultation. Final qualification for treatment takes place after direct assessment of the skin, tattoo or permanent makeup and after discussing contraindications.
6. Bookings through Booksy
Appointments may be booked through the external Booksy system, available at: nemezinkrecovery.booksy.com.
After clicking the Booksy link, you leave the Nemezink Recovery website and move to an external service. Data provided in the Booksy system is processed in accordance with the privacy rules and terms of the operator of that platform.
Nemezink Recovery may have access to booking data provided through Booksy to the extent necessary to handle the appointment, contact the client and provide the service.
7. Contact by email, phone and Instagram
If you contact us by email, phone or Instagram, we process the data you voluntarily provide within such contact, in particular your name, contact details, message content and any photos.
This data is processed to handle your inquiry, provide a response, book an appointment or continue communication.
If you contact us through Instagram, the data controller for data processed within that platform is also the operator of Instagram / Meta. Use of Instagram is subject to the rules of that platform.
8. Recipients of data
Your personal data may be shared with entities that support us in operating the website, handling inquiries, bookings and services. These may include in particular:
- hosting and IT service providers,
- email and communication tool providers,
- contact form or file upload tool providers,
- the operator of the Booksy booking system,
- providers of analytical and marketing tools, if used,
- accounting offices, law firms or advisors, if necessary,
- public authorities, if the obligation to provide data results from legal provisions.
We share data only to the extent necessary to achieve specific purposes and on the basis of appropriate agreements or legal provisions.
9. Transfer of data outside the European Economic Area
Some tools used on the website or in communication, such as analytical, marketing, hosting or form tools, Booksy, Google or Meta, may involve transferring data outside the European Economic Area.
In such cases, data transfer is carried out on the basis of appropriate legal mechanisms provided by the GDPR, such as an adequacy decision, standard contractual clauses or other safeguards required by law.
10. How long do we store data?
We store personal data for the period necessary to achieve the purpose for which it was collected, and then for the period required by law or needed to secure potential claims.
- contact form data — for the time needed to handle the inquiry and further communication, and then for a maximum period necessary to secure potential claims;
- data related to booking or provided service — for the period required by law, in particular tax, accounting or documentation regulations;
- data processed on the basis of consent — until consent is withdrawn, unless there is another basis for further processing;
- technical data and cookies — for the period resulting from the settings of a given cookie file or analytical tool.
11. Your rights
In connection with the processing of personal data, you have the right to:
- access your data,
- rectify your data,
- delete your data,
- restrict processing,
- data portability,
- object to data processing,
- withdraw consent at any time, if data is processed on the basis of consent,
- lodge a complaint with the President of the Personal Data Protection Office in Poland.
To exercise your rights, you can contact us at: nemezinkrecovery@gmail.com.
You may lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your data violates personal data protection regulations.
12. Voluntary provision of data
Providing data is voluntary, but it may be necessary to handle an inquiry, submit a form, perform an initial tattoo assessment, book an appointment or provide the service.
Failure to provide required data may prevent us from contacting you back, booking an appointment or responding to your inquiry.
13. Cookies and similar technologies
The website may use cookies and similar technologies. Cookies are small files stored on the user’s device that help the website function properly, analyze traffic, remember settings or conduct marketing activities.
We may use the following types of cookies:
- necessary cookies — required for the proper functioning of the website;
- analytical cookies — helping us analyze how the website is used;
- marketing cookies — used for advertising or remarketing activities;
- third-party cookies — provided by third parties, such as Google, Meta, Booksy or other tool providers.
Technical cookies necessary for the operation of the website generally do not require consent. Analytical and marketing cookies should be used after obtaining appropriate user consent, if required by law.
You can manage cookies through your browser settings. Limiting the use of cookies may affect some website functions.
14. Analytical and marketing tools
The website may use analytical or marketing tools such as Google Analytics, Google Tag Manager, Meta Pixel or similar solutions. These tools may help us analyze website traffic, measure the effectiveness of advertising campaigns and reach people interested in Nemezink Recovery services.
If such tools are used, they may collect information about your activity on the website, device, browser, approximate location or interactions with content. The scope and rules of operation of these tools are also determined by their providers.
15. Data security
We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, unauthorized modification or disclosure.
Access to data is granted only to persons and entities that need it to achieve specific purposes, such as handling inquiries, bookings, services or legal obligations.
16. Changes to the Privacy Policy
We may update this Privacy Policy, in particular in the event of changes in law, website functionality, implementation of new tools, changes in contact details or organizational changes.
The current version of the Privacy Policy is always available on the website.
17. Effective date
This Privacy Policy applies from the date of publication on the website.