This Privacy Policy concerns the processing and protection of users’ personal data in connection with the use of the online store www.StylishDoctor.com
Our primary goal is to ensure users of the online store have privacy protection at least corresponding to the standards defined in applicable legal regulations, especially in the Act of July 18, 2002, on the provision of electronic services, the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) – GDPR, and the Act of July 16, 2004, Telecommunications Law.
Every user of the online store remains anonymous until they decide to disclose their identity. The data administrator processes personal data, among other things, based on consent, where consent includes marking the appropriate checkbox or any other behavior that clearly indicates acceptance of the proposed processing.
The online store and the services of the administrator are not intended for children under 18 years of age, nor are they directed towards them.
If you do not accept the content of this policy, please refrain from using the online store immediately.
§1 Definitions
- Online Store – an online store in the domain www.StylishDoctor.com, whose rights belong to the Seller;
- Administrator – PB Company limited liability company based in Kędzierzyn-Koźle at Bolesława Śmiałego 2, 47-232 KĘDZIERZYN-KOŹLE, entered into the National Court Register by the DISTRICT COURT IN OPOLE, VIII Economic Department of the National Court Register under the number KRS: 0001017884 NIP: 7492115941 REGON: 524405926;
- User -an individual who uses the services of the Online Store;
- Account – a part of the Online Store assigned to the User, allowing them to perform specific actions within the Online Store;
- GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC;
- Personal Data (or “data”) – any information relating to an identified or identifiable natural person;
- President of the Office for Personal Data Protection (“PUODO”) – the authority responsible for personal data protection;
- Identifiable Natural Person – a person whose identity can be determined directly or indirectly, especially by reference to an identification number or one or more specific factors determining their physical, physiological, mental, economic, cultural, or social identity; information is not considered as enabling the identification of a person if it would require excessive costs, time, or actions;
- Data Processing – any operations performed on personal data, such as: collection, recording, storage, processing, alteration, disclosure, and deletion, especially those operations carried out in information systems.
§2 Who is the Administrator of my personal data?
The administrator of your personal data is PB Company, a limited liability company based in Kędzierzyn-Koźle at Bolesława Śmiałego 2, 47-232 KĘDZIERZYN-KOŹLE, entered into the National Court Register by the DISTRICT COURT IN OPOLE, VIII Economic Department of the National Court Register under the number KRS: 0001017884 NIP: 7492115941 REGON: 524405926.
For inquiries about your personal data, you can contact us via email: store@stylishdoctor.com, or by phone: 600449988.
§3 Legal bases and purposes of processing data depend on the type of services you use:
| Service | Legal Basis | Purpose of Processing | Data Storage Period |
| Customer Account Registration | Art. 6(1)(b) GDPR (performance of a contract) | Execution of the contract for the provision of electronic services consisting of creating and maintaining an account in the Online Store and enabling the use of the training platform. Providing personal data is voluntary but necessary to create an account. | User data will be processed until the permanent deletion of the User’s account. |
| Product Sales | Art. 6(1)(b) GDPR (processing is necessary for the performance of a contract) and Art. 6(1)(c) GDPR (legal obligation) in relation to the provisions of the Act of 18 July 2002 on the provision of electronic services and the Civil Code. Providing personal data is necessary to conclude and perform the contract. | Execution of the sales contract, including order acceptance, order fulfillment, and handling complaints. | Data will be processed for the period resulting from the expiration of claims arising from the sales contract, i.e., six years from the date of contract conclusion. |
| Complaints and Withdrawal Procedure | Art. 6(1)(c) GDPR (legal obligation) arising from the provisions of the Act of 30 May 2014 on consumer rights. Providing personal data is necessary to process complaints or withdrawals from the contract. | Handling Consumer complaints and conducting the withdrawal procedure. | After processing the inquiry or complaint, we store data for a period not exceeding three years, unless the nature of the inquiry requires a longer data storage period. |
| Issuing Invoices | Art. 6(1)(c) GDPR (compliance with legal obligations) arising from tax law provisions, including the storage of accounting documentation. | Fulfillment of obligations arising from tax law provisions. | After issuing the invoice, we will process this data for six years (accounting documentation). |
| Email Contact | Art. 6(1)(f) GDPR (legitimate interest) consisting of maintaining contact with potential customers and providing answers to questions. Providing personal data is voluntary but necessary to establish contact. | Processing inquiries and providing answers. | Data will be processed for a period of two years. |
| Direct Marketing and Sending Commercial Information (Newsletter) | Art. 6(1)(f) GDPR (legitimate interest) in sending commercial information and direct marketing with the prior consent of the User. Providing personal data is voluntary but necessary to provide the Newsletter service. | Sending information about current products and offers via email. | We will send commercial information until you unsubscribe from receiving it. Each commercial message contains a link that allows you to unsubscribe from receiving commercial information. |
The periods specified in the table above are counted from the end of the year in which the Administrator commenced the data processing process to facilitate technical control of these periods. After this time, personal data is permanently destroyed or deleted unless the obligation to continue storing the data arises from applicable regulations.
§4 To whom do we disclose your personal data?
The Administrator may disclose your personal data to the following categories of recipients:
- Accounting service provider: Mustaszar Sp. z o.o.
- Payment service providers: PayU (PayU S.A.), Google Pay (Google LLC), Apple Pay (Apple Inc), Twisto (Twist sp. z o.o.), BLIK (Polski Standard Płatności sp. z o.o.), PayPal (PayPal (Europe) S.à l. et Cie, S.C.A.), banks processing your payment – depending on the chosen payment method;
- Courier companies delivering shipments: InPost (InPost sp. z o.o.), DHL (DHL Parcel Polska Sp. z o.o.), DPD (DPD Polska sp. z o.o.), UPS (UPS Polska sp. z o.o.), DHL Express Poland Sp. z o. o. – depending on the chosen delivery method;
- Technical and IT support company, including website hosting and data storage on the server (home.pl);
- Companies providing access to the Facebook and Instagram platforms, where the Online Store’s official fan page is located (Meta Platforms Inc.);
- Company providing Google Analytics statistical analysis tool (Google LLC);
- Company providing an analytical tool tracking traffic in the Online Store (Hotjar Ltd, New Relic Inc).
All external entities may use your data only to perform a specific service. All individuals with access to your data must process it carefully and comply with applicable laws and regulations. We do not disclose your data to third parties for commercial purposes, and we do not sell your data to other companies. The Online Store may provide personal data to authorized authorities, tax authorities, and/or law enforcement authorities if required by law.
Sklep Internetowy może przekazać dane osobowe uprawnionym władzom, organom podatkowym i/lub organom ścigania, jeśli wymagają tego przepisy prawa.
§5 Transfer of data to third countries
§6 User Right
§7 Cookies
§8 Social media plugins
The Administrator places buttons linked to the Facebook service on the pages of their Online Store. For this purpose, buttons referring to the Facebook service are placed in appropriate sections and pages. By using the button, the User logs into the Facebook service, where Facebook’s privacy policy applies. You can familiarize yourself with this policy at the following link:
| https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0 | |
| The Administrator places plugins on their website that refer to the Instagram service. By using this plugin, the User logs into the Instagram service, where Instagram’s privacy policy applies. You can familiarize yourself with this policy at the following link: | https://www.facebook.com/help/instagram/155833707900388 |
§9 How do we secure your personal data?
The administrator takes all necessary measures to ensure the security of your data. To achieve this, appropriate technical and organizational measures are implemented to ensure that processing is carried out in accordance with the law and in a manner that ensures security. This includes, among other things, the use of encrypted HTTPS connections, password authentication, and a firewall on the server. The IT systems used by the administrator have appropriate security measures in place to guarantee the confidentiality and integrity of the processed personal data
§10 Where can I report objections / comments regarding the processing of personal data?
- You can report objections/comments regarding the processing of personal data via e-mail: store@StylisDoctor.com
§11 Final provisions
The Administrator implements technical and organizational measures to ensure the protection of processed personal data appropriate to the threats and categories of data covered by the protection, in particular securing the data against unauthorized access, acquisition by an unauthorized person, processing in violation of applicable laws, as well as alteration, loss, damage, or destruction. The Administrator reserves the right to change the Privacy Policy for important reasons (such as changes in universally applicable laws, the introduction of new functionalities, modification of IT systems). In the event of any changes to the Privacy Policy, the Administrator will inform Users by posting information about the change on the homepage. Users with User Accounts will additionally be notified by the Administrator by sending information about the change in the Privacy Policy to the email address provided by them in the registration form. The change in the Privacy Policy shall enter into force within 14 days from the date of publication on the Website. Archived versions of the Privacy Policy are published on the Website in the “Privacy Policy” tab. In the case of agreements concluded before the change in the Privacy Policy, the Privacy Policy in force on the day of conclusion of the Agreement shall apply.
