I. PRIVACY POLICY

The Privacy Policy defines the principles of confidentiality and processing of personal data of users of the website https://laserVille.com, operating on the Internet.

1. Who is the controller of your personal data?
   The personal data provided to us is controlled by Chart Communications Company, which is the administrator of your personal data.
2. Where is your data stored?
   The administrator operates in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data, and which repeals Directive 95/46/EC (hereinafter: GDPR), in particular: it properly secures users’ personal data from unauthorized access by third parties, including by encrypting, archiving, and evaluating security measures of personal data; it ensures the confidentiality, integrity, availability, and resilience of processing systems and services.
3. Who has access to your data?
   Your data is accessible within LaserVille and by external organizations supporting LaserVille or providing business support services, including IT, accounting, legal, or auditing services. We never share, sell, or exchange your data for marketing purposes with organizations outside of LaserVille. The User’s data will be processed solely for using the functionalities of LaserVille, providing comprehensive laser hair removal services, offering cosmetic consultations and other services, handling payments for purchased services, contacting and maintaining personal files, and potentially determining, investigating, or defending against claims, for evidentiary, analytical, and archiving purposes, as well as for accounting. The Administrator may also use the data to directly offer products and services (direct marketing), including selecting them based on the User’s needs through profiling, which will not significantly affect the User’s situation nor have legal consequences. The data will be processed for these purposes in accordance with Article 6(1)(b), (c), and (f) of the GDPR, namely when:
   1. 1. processing is necessary to perform a contract to which the data subject is party, or to take steps at the request of the data subject before entering into a contract,
      2. processing is necessary for compliance with a legal obligation to which the Administrator is subject,
      3. processing is necessary for the purposes of the legitimate interests pursued by the Administrator or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
   2. What are the legal bases for data processing?
   3. Since 25 May 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 applies to the protection of natural persons with regard to the processing of personal data and the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation – GDPR).
   4. To the extent that the processed data may include special category data – health data – the Administrator processes the data solely to provide comprehensive laser hair removal services, cosmetic advice and consultations, and to manage personal files. The legal basis for processing such data is the User’s consent in accordance with Article 9(2)(a) GDPR. Providing such data and consent is voluntary; however, failure to provide it or refusal will result in the inability to undergo treatment. This consent may be withdrawn at any time.
4. How do we collect your personal data? Your data is collected:
   1. Automatically – data is automatically collected regarding your visit to our website, such as your IP address, domain name, browser type, operating system type, etc.
   2. When you contact us – when you contact us via the website, phone, email, etc., you provide us with your personal data such as name, surname, email address, etc.
5. How do we use your data? The Administrator may conduct direct marketing via end-user devices (including mobile and stationary phones, tablets, computers) and automatic calling systems to the phone number or email address provided by the User. This includes sending marketing messages about the Administrator’s products and services and promotional campaigns, as well as commercial information regarding goods or services offered by the Administrator to the User’s email address under the Act of 18 July 2002 on Providing Services by Electronic Means (Journal of Laws 2017.1219, consolidated text 2017.06.24) or telephone under the Telecommunications Act of 16 July 2004 (Journal of Laws 2017/1907, as of 2017/10/12). Such processing requires the User’s separate consent under Art. 6(1)(a) GDPR. Providing the data and consent is voluntary. Consent may be withdrawn at any time – the User may opt out of receiving further commercial information by calling the hotline number listed on the website or by contacting the company at: pl@laserville.com
6. What are your rights?
   1. Right to access data – You have the right to request information at any time regarding the personal data we hold about you. Contact LaserVille for this.
   2. Right to data portability – When LaserVille processes your data in an automated manner based on your consent or agreement, you have the right to receive a copy of your data in a readable format. This applies only to data you provided.
   3. Right to rectify data – You have the right to request the correction of your personal data if it is incorrect or to complete incomplete data by contacting LaserVille.
   4. Right to erase data – You have the right to delete any data processed by LaserVille at any time, except in the following cases:
      1. You have ongoing matters with LaserVille,
      2. You have an open order that has not been processed or is only partially fulfilled,
      3. You have an outstanding debt with LaserVille, regardless of the payment method,
      4. Your debt has been sold to a third party within the last three years,
      5. You have purchased any services – we will retain your transaction data for accounting purposes.
   5. Right to object to processing based on the legitimate interest of LaserVille:
      1. You have the right to object to the processing of your data. LaserVille will cease processing your personal data unless we find a legal basis that overrides your interests, rights, or for legal claims.
   6. Right to restriction – You have the right to request that LaserVille restricts the processing of your data under the following conditions:
      1. If you object to processing based on LaserVille’s legitimate interest, LaserVille will restrict all processing of the data until that interest is verified,
      2. If you report that your data is incorrect, LaserVille will limit processing until the accuracy is verified,
      3. If the processing is unlawful, you may opt not to delete your data but instead request restriction,
      4. If LaserVille no longer needs your personal data but needs it to assert or defend a claim.
7. How can you exercise your rights?
   We have appointed a staff member to answer questions related to the above matters. To contact them, write to: pl@laserville.com
8. Is it necessary to provide your data?
   Providing your personal data is entirely voluntary, but without it, you will not be able to receive the LaserVille newsletter or use/order our services.
9. Data processing period
   We will process your data as long as the service is being provided and afterward for a period that allows LaserVille to pursue or defend against any claims related to our services, until the limitation period expires and legal obligations arising from tax and accounting regulations are fulfilled.
10. How will we contact you?
    If you have used our services, you may receive emails from us about your visit and our services. We may also contact you by phone if we have important information regarding your appointment.
11. How do we protect your personal data?
    The connection between your computer and our server when collecting your data is not encrypted. However, our databases are protected from third-party access.
12. Data Protection Officer:
    To ensure your data is always processed fairly, transparently, and lawfully, we have appointed a Data Protection Officer. To contact the DPO, write to pl@laserville.com and enter “DPO” in the subject line.
13. Right to lodge a complaint with a supervisory authority:
    If you believe that LaserVille is processing your personal data improperly, you may contact us. You also have the right to file a complaint with the supervisory authority, which is the President of the Personal Data Protection Office.
14. Updates to our Privacy Policy:
    In the future, we may need to update this Privacy Policy. The latest version will always be available on our website. We will notify you of any significant changes, such as the purposes for which we use your data, the identity of the Data Protection Officer, or your rights.

Cookie Policy

1. 1. The website does not automatically collect any information except for information contained in cookies.
   2. Cookies are IT data, especially text files, stored on the User’s end device for use by the website. Cookies usually contain the name of the website from which they originate, their storage duration, and a unique number.
   3. The entity placing cookies on the User’s device and accessing them is the website operator.
   4. Cookies are used for the following purposes:
      1. Adapting the content of website pages to the User’s preferences and optimizing website use. In particular, these files recognize the User’s device and appropriately display the website tailored to their individual needs.
      2. Creating statistics that help understand how Users use websites, which allows improving their structure and content.
      3. Maintaining the User’s session on the website (after logging in), so the User does not have to re-enter login and password on each subpage.
   5. The website uses two main types of cookies: “session cookies” and “persistent cookies.” “Session” cookies are temporary files stored on the User’s device until logging out, leaving the website, or turning off the web browser. “Persistent” cookies are stored on the User’s device for the time specified in the cookie parameters or until deleted by the User.
   6. The website uses the following types of cookies:
      1. “Necessary” cookies that enable the use of services available on the website, e.g. authentication cookies used for services that require authentication;
      2. Cookies used for security purposes, such as detecting authentication abuses;
      3. “Performance” cookies that collect information about how the website is used;
      4. “Functional” cookies that allow the website to remember User settings and personalize the interface, such as selected language, region, font size, or website appearance;
      5. “Advertising” cookies that provide Users with ads better tailored to their interests.
   7. In many cases, web browsing software (web browser) by default allows cookies to be stored on the User’s device. Website Users can change cookie settings at any time. These settings can be modified in particular to block automatic cookie handling or to notify the User each time a cookie is placed. Detailed information on cookie management is available in the settings of your web browser.
   8. The website operator informs that restricting the use of cookies may affect the functionality of some features on the website.
   9. Cookies placed on the User’s device may also be used by advertisers and partners cooperating with the website operator.
   10. More information about cookies is available in the “Help” section of your web browser menu.

How do we protect your personal data?
The connection between your computer and our server when collecting your personal data is not encrypted. However, our databases are protected from third-party access.

Changes to our Privacy Policy
We reserve the right to amend the above Privacy Policy by publishing a new version on this website.