GDPR Notice

Your rights

• Access: request a copy of your personal data.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion where legally possible.
• Restriction: limit processing in certain situations.
• Portability: receive your data in a usable format.
• Objection: object to processing based on legitimate interests.
• Withdraw consent at any time where consent is the legal basis.

Lawful bases

We process data to provide your booking (contract), comply with legal obligations, support customer service (legitimate interests), and for marketing where you have consented.

Marketing and photography

We may use photos or short videos from sessions where you have consented. For online marketing and measurement, we use Google Tag Manager to manage analytics and advertising tags, and they are activated only after you consent. You can withdraw consent at any time via Cookie Preferences in the footer or by contacting us.

How to exercise your rights

Email Brushandbubbles.krk@gmail.com with your request. We may need to verify your identity before completing the request.

Complaints

You can lodge a complaint with the Polish Data Protection Authority (PUODO).