← Back to homepage

Privacy & Cookie Policy

In force from 1 January 2026.

This Privacy Policy describes how personal data is processed and how cookies are used within the SalonCRM.pl website (the "Service"), in accordance with Regulation (EU) 2016/679 of 27 April 2016 (the "GDPR"). This is an English translation provided for convenience; the Polish version prevails in case of any discrepancy.

§ 1. Data controller

The controller of personal data of Service users is EuroTrade Jan Walczak, registered office at ul. Stanisławowska 47, 54-611 Wrocław, Poland, VAT ID (NIP/VAT-EU): 6671048534, REGON: 527800600 (the "Controller").

Contact for data protection matters: info@saloncrm.pl.

§ 2. Scope and purposes of processing

• creating and maintaining the Account and providing services (name, e-mail, company data, login data);
• performing the agreement and billing (invoice data, payment history);
• handling enquiries and complaints (contact data, correspondence);
• marketing of our own services, including a newsletter — only with consent;
• analytics, statistics and Service security (technical data, IP address, logs).

§ 3. Legal bases for processing

• Article 6(1)(b) GDPR — necessity for performance of the agreement;
• Article 6(1)(c) GDPR — legal obligation (e.g. tax and accounting rules);
• Article 6(1)(f) GDPR — the Controller's legitimate interest (security, direct marketing, pursuing claims);
• Article 6(1)(a) GDPR — consent (e.g. newsletter, optional cookies).

§ 4. Data retention period

Data is retained for the term of the agreement and, thereafter, for the period required by law (including the limitation period for claims and the period for keeping accounting records). Data processed on the basis of consent is kept until the consent is withdrawn.

§ 5. Data recipients and processors

Data may be shared with processors cooperating with the Controller, in particular: infrastructure and hosting providers, SMS and e-mail gateway operators, payment providers and the accounting office — solely under data processing agreements (Article 28 GDPR).

§ 6. Transfers outside the EEA

Where providers outside the European Economic Area are used, data is transferred on the basis of appropriate safeguards, in particular the Standard Contractual Clauses approved by the European Commission.

§ 7. Rights of data subjects

• access to data and obtaining a copy;
• rectification of data;
• erasure ("right to be forgotten");
• restriction of processing;
• data portability;
• objection to processing based on legitimate interest;
• withdrawal of consent at any time (without affecting prior lawful processing);
• lodging a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

§ 8. The Provider's role as a processor

For personal data of salon clients entered into the Application by the User, the User is the controller and SalonCRM.pl acts as a processor, processing such data solely in accordance with the User's documented instructions and the data processing agreement.

§ 9. Data security

The Controller applies technical and organisational measures to protect data, including encrypted connections (SSL/TLS), access control, backups and logging of system operations.

§ 10. Cookies

The Service uses cookies, i.e. small text files stored on the user's device. We use:

• necessary cookies — required for the Service to operate and for login (legitimate interest);
• functional cookies — remembering preferences (e.g. language, light/dark mode);
• analytics and marketing cookies — used only after consent.

You can change your cookie settings in your browser or in the consent panel at any time. Restricting cookies may affect some Service features.

§ 11. Changes to this Policy

The Controller reserves the right to update this Policy. The current version is always published in the Service with its effective date.

§ 12. Contact

For any matters related to the processing of personal data, please contact: info@saloncrm.pl.