Privacy policy
Last updated: 2026-10-23
This policy explains what personal data we process when you use edelweissmassage.com, write to us, book a visit or order a voucher — and what rights you have under the GDPR.
1. Data controller
The controller is Masaż Edelweiss Oleksii Barmak, tax ID (NIP) 7543339901. Studio address (for correspondence): ul. Śrutowa 6, 50-256 Wrocław. Registered business address (CEIDG): to be completed.
Contact for data protection matters: edelweiss.ua.pl@gmail.com, phone +48 511 645 247.
2. Contact form and voucher orders
When you send the form, we process the data you enter: your name, phone number and/or email, your message and, for a voucher, the voucher you chose, the delivery format and (optionally) the recipient’s name. We do this to reply and to prepare the voucher (Art. 6(1)(b) GDPR — steps taken at your request before a contract; Art. 6(1)(f) GDPR — our legitimate interest in answering enquiries).
The form is passed by our server as a message to a private group in the Telegram messenger used by the studio. Telegram is the provider of that messenger; data may be processed outside the European Economic Area. Transfer basis: to be verified.
The form contains a hidden anti-spam field. Your IP address is used only to briefly limit the number of submissions and is not stored by us.
3. Bookings via Booksy
You book visits through Booksy (Booksy International sp. z o.o.). Booksy processes booking data (such as your name, phone, email, time and service) on our behalf as a processor to be verified against the Booksy agreement. Using a Booksy account is also governed by Booksy’s own terms and privacy policy.
The Booksy booking window loads on our site only after you click a booking button.
4. Phone, email and Instagram
If you call us or write by email or on Instagram, we process the data you share in order to reply and handle your visit (Art. 6(1)(b) and (f) GDPR). Our mailbox runs on Google (Gmail), and Instagram messages on Meta’s service.
5. Cookieless visit statistics
We keep our own anonymous visit statistics to learn which parts of the site are useful. We record: the page visited, the site language, the referring site’s domain, campaign parameters (utm), the browser window size, the general device type, operating system and browser (without storing the full browser identifier), the browser language, the country derived from the connection, and on-page events (e.g. a click on “Book a visit” or opening an FAQ question). Each page view gets a random identifier kept only in the tab’s memory.
We do not store your IP address or the full browser identifier, we do not use cookies or browser storage for this, and we do not link this data to your identity. Legal basis: Art. 6(1)(f) GDPR (analysing and improving the site).
6. Cookies and third-party tools
Third-party analytics and marketing tools (e.g. Google Analytics, Microsoft Clarity, Meta Pixel) are only switched on after you consent in the cookie banner (Art. 6(1)(a) GDPR). None of these tools is currently switched on.
We remember your choice in your browser’s storage (localStorage). You can change or withdraw your consent at any time with the “Cookie settings” button in the footer.
7. Hosting
The site, forms, statistics and email for the edelweissmassage.com domain run on Cloudflare infrastructure, which processes technical connection data (e.g. IP address) to deliver the site and protect it from abuse, as our processor.
8. Recipients and transfers outside the EEA
Data may be received only by companies that help us run the studio: Cloudflare (hosting), Telegram (form notifications), Booksy (bookings), Google (email), Meta (Instagram) and — with your consent — analytics and marketing tool providers. Some of them process data outside the EEA; transfers rely on a European Commission decision (EU-US Data Privacy Framework) or standard contractual clauses to be verified for each provider.
9. How long we keep data
Form messages: to be decided. Voucher data: for the voucher’s validity and any accounting period required by law to be decided. Visit statistics: to be decided.
10. Your rights
You have the right to access your data, to rectify or erase it, to restrict processing, to data portability, to object to processing based on legitimate interest, and to withdraw consent at any time (without affecting the lawfulness of earlier processing). Write to us: edelweiss.ua.pl@gmail.com.
You can also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warszawa).
11. Voluntary provision and automated decisions
Providing data is voluntary, but without contact details we cannot reply to your message or prepare a voucher. We do not make automated decisions or carry out profiling.