Privacy Policy

1. Data Controller

The controller of your personal data is Golden Hour KAROLINA KOZOK based in Chorzów, ul. Katowicka 56, 41-500 Chorzów, NIP: 6351850052. Contact regarding personal data and the exercise of your rights: gh.karolinakozok@gmail.com, tel. +48 794 170 192.

2. What data do we process?

We process only the data provided in contact forms and minimal technical data necessary for the operation of the website:

• Form data: name, email address, phone number, message content, and the subpage from which the form was sent
• Technical data: IP address processed temporarily during request handling (server logs, anti-spam protection)

We do not collect surnames, payment data, or visit history. Bookings take place on the external Booksy service, which is a separate controller of your data.

3. Purposes and legal bases

• Responding to your inquiry about services or training — Art. 6(1)(b) GDPR
• Protecting forms against spam and anonymous visit statistics — Art. 6(1)(f) GDPR (legitimate interest: security and development of the website)
• Establishing, asserting, or defending claims — Art. 6(1)(f) GDPR

Providing data in the form is voluntary, but necessary to receive a response. We do not use the data for marketing and do not send a newsletter.

4. Retention period

• Form submissions (including email copies): until the end of correspondence, no longer than 12 months from sending
• Server logs: up to 90 days; backups: daily copy stored for 7 days and a maximum of 10 pre-deployment copies

5. Data recipients

We store data on servers in the European Union and entrust it only to entities necessary for the operation of the website:

• Hetzner Online GmbH (Germany) — website and database hosting
• Cloudflare, Inc. — form protection (Turnstile), statistics, files and backups; possible transfers outside the EEA take place on the basis of standard contractual clauses and the EU-US Data Privacy Framework
• Email provider — delivery of submission notifications; OpenFreeMap — map tiles for directions downloaded by your browser

We do not sell data and do not share it for marketing purposes.

6. Cookies

The website does not use tracking, advertising, or analytical cookies — which is why we do not display a cookie banner. Statistics (Cloudflare Web Analytics) work without cookies and do not identify users, Turnstile is necessary to protect forms, and theme preference (light/dark) is saved exclusively in your browser.

7. Customer reviews

Reviews on the website come from our public profiles on Booksy and Google services and are published solely with the author's first name. If you are the author of a review and want us to remove it from the website, write to us.

8. Your rights

You have the right to:

• Access your data and receive a copy of it
• Rectification, erasure, or restriction of processing
• Data portability
• Object to processing based on legitimate interest

We do not make decisions based solely on automated processing. You can lodge a complaint with the President of the Personal Data Protection Office (uodo.gov.pl).

Last updated: August 21, 2026