Privacy Policy

Last updated: 27 October 2026.

Below we explain what personal data we process when you use this website or contact the salon, why, and what rights you have. This document is based on Regulation (EU) 2016/679 (GDPR).

1. Data controller

The controller of your personal data is Ocean Beauty — Nail World, ul. Jana Kazimierza 32 B, 01-248 Warsaw, Poland (the “Salon”).

For data protection matters, contact us by phone at +48 577 418 424 or by message on the Salon’s Instagram profile @ocean.beauty.wola.

2. What data we process and why

• Visiting the website — when you visit, the hosting server automatically records in its logs, among other things, your IP address, date and time, the requested page and browser data. Purpose: operating and securing the website. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
• Contact and booking — if you call, write to us or book an appointment (phone, Booksy, Instagram, WhatsApp, Telegram), we process the data you give us, such as your name, phone number, message content and the information needed to arrange and carry out the appointment. Legal basis: Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract, and performance of it) and (f) (answering enquiries).
• Course sign-ups — if you sign up for a course through our Telegram bot, we process the data you provide in the chat (e.g. your name and the chosen course) to handle the sign-up. Legal basis: Art. 6(1)(b) GDPR.
• Google Maps — we load the map showing the Salon’s location only after you consent (the “Load map” button). Your browser then connects to Google servers, which may, among other things, store cookies and process your IP address. Legal basis: Art. 6(1)(a) GDPR and Art. 173 of the Polish Telecommunications Law (consent). You can withdraw consent at any time.
• Fonts — the website loads fonts from Google Fonts servers, so Google receives your IP address. Legal basis: Art. 6(1)(f) GDPR (consistent look and readability of the site).

3. Recipients of data

Data may be entrusted or disclosed to providers who help us run the website and serve clients:

• the website hosting provider — Netlify, Inc.;
• Google Ireland Limited / Google LLC — fonts and (with your consent) the map;
• Booksy — the appointment booking system;
• Meta Platforms (Instagram, WhatsApp) and Telegram — messengers you can use to contact us.

When using these services you are also subject to their own privacy policies. We do not sell your data.

4. Transfers outside the EEA

Some of these providers are located or process data outside the European Economic Area (e.g. in the USA). This takes place on the basis of the mechanisms provided for in the GDPR, such as a European Commission adequacy decision (including the EU-US Data Privacy Framework) or standard contractual clauses.

5. How long we keep data

• Server logs — for the period set by the hosting provider, usually short.
• Contact and appointment data — for as long as needed to provide the service, and then until the limitation period for possible claims expires.
• Data processed on the basis of consent — until you withdraw it.

6. Your rights

You have the right to access your data, to rectify it, to erase it, to restrict processing, to data portability, and to object to processing based on legitimate interest. Where we process data on the basis of consent, you can withdraw it at any time; this does not affect the lawfulness of processing carried out before withdrawal.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

To exercise your rights, contact us as described in section 1.

7. Voluntary provision and automated decisions

Providing data is voluntary but necessary to book an appointment or sign up for a course. We do not make decisions about you by automated means, including profiling.

8. Cookies

Information about cookies and browser storage is in our Cookie Policy.

9. Changes

We may update this policy, for example when the website or the law changes. The current version is always available on this page.