PIED-DE-POULE beauty salon privacy policy

1. GENERAL PROVISIONS

1.1. This Privacy Policy sets out the rules for the processing and protection of personal data of users of the website https://p-de-p.pl, persons using the service booking system and clients of the PIED-DE-POULE salons in Warsaw.

1.2. The PIED-DE-POULE website is used to present the salons’ offer, enable contact, redirect to booking systems and carry out information and marketing activities.

1.3. Three salons operate in Warsaw under the PIED-DE-POULE brand, each run by a separate business entity.

1.4. Personal data are processed in accordance with Regulation (EU) 2016/679 (GDPR), the provisions of Polish law, in particular the Electronic Communications Law, and this Privacy Policy.

1.5. This Policy describes the processing of data in connection with the use of the Website and the cooperation of the three Warsaw salons. Data related to the services of other entities operating under the PIED-DE-POULE brand, including in Wrocław and outside Poland, may be subject to separate personal data protection notices.

2. PERSONAL DATA CONTROLLERS

2.1. In connection with the operation of the PIED-DE-POULE salons in Warsaw, the following entities are the controllers of personal data:

A. PIED-DE-POULE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ

Salon: PIED-DE-POULE Grzybowska

Address: ul. Grzybowska 4, lok. U3C, 00-131 Warszawa, Poland
KRS: 0001048126
NIP: 5252964705
REGON: 525889524
E-mail: pieddepoulegrzybowska@gmail.com

B. PDP WARSZAWA SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ

Salon: PIED-DE-POULE Piękna

Address: ul. Piękna 49, 00-672 Warszawa, Poland
KRS: 0001009749
NIP: 7011121805
REGON: 523985809
E-mail: pieddepoulepiekna@gmail.com

C. PDP WILANOW SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ

Salon: PIED-DE-POULE Wilanów

Address: Oś Królewska 18, lok. U4, 02-972 Warszawa, Poland
KRS: 0001016476
NIP: 9512560356
REGON: 524325647
E-mail: pdpwilanow@gmail.com

2.2. Each of the above entities is the controller of personal data with respect to bookings, the provision of services and other processes whose purposes and means it determines independently.

2.3. PDP WARSZAWA SP. Z O.O., as the operator of the Website, is responsible for the processing of data related to the technical operation of the p-de-p.pl Website, its maintenance, the handling of general enquiries and the management of analytical tools.

2.4. In the case of processes for which more than one entity jointly determines the purposes and means of data processing, those entities act as joint controllers within the meaning of Article 26 GDPR. Their responsibilities for compliance with GDPR obligations should be set out in the relevant arrangements, the essence of which is made available to data subjects.

2.5. Questions regarding data related to a specific visit or service should be addressed to the entity operating the selected salon. In matters related to the operation of the Website, you may contact us at pieddepoulepiekna@gmail.com.

3. SCOPE OF DATA COLLECTED

3.1. Depending on the purpose of processing, the following categories of data may be collected:

first name and surname;
telephone number;
e-mail address;
information about bookings and selected services;
visit history and information related to customer service;
information about payments and settlements;
correspondence and requests;
preferences regarding services and communication;
information provided during consultations;
photographs and video recordings, where there is an appropriate legal basis;
technical data related to the use of the Website, including the IP address, information about the device, browser and user activity.

3.2. Data may be obtained via the Website, online forms, the booking system, telephone, e-mail, instant messengers or directly during a visit.

3.3. Data concerning health, allergies and contraindications to treatments are processed only where this is justified by a specific purpose and the requirements of Articles 6 and 9 GDPR are met.

3.4. Where data are obtained from other sources, the competent controller fulfils the information obligations arising from Article 14 GDPR.

4. PURPOSES AND LEGAL BASES OF PROCESSING

4.1. Personal data may be processed for the following purposes:

a) Operation of the Website

Ensuring the proper functioning of the website, handling requests and ensuring technical security.

Legal basis: Article 6(1)(f) GDPR and, in the case of activities requiring consent, Article 6(1)(a) GDPR.

b) Booking and provision of services

Handling bookings, contact regarding visits and the provision of selected services.

Legal basis: Article 6(1)(b) GDPR.

c) Customer service

Responding to enquiries, handling requests and ensuring the quality of services.

Legal basis: Article 6(1)(b) or (f) GDPR.

d) Compliance with legal obligations

Keeping accounting and tax records and performing other activities required by law.

Legal basis: Article 6(1)(c) GDPR.

e) Complaints and claims

Handling complaints, establishing and pursuing claims or defending against them.

Legal basis: Article 6(1)(b), (c) or (f) GDPR.

f) Marketing activities

Providing information about offers, promotions, services and events related to the PIED-DE-POULE brand.

Legal basis: Article 6(1)(a) or (f) GDPR, depending on the purpose and manner of processing. Marketing contact via means of communication covered by Article 398 of the Electronic Communications Law requires appropriate prior consent.

g) Statistical analysis and development of the Website

Analysing website traffic and the effectiveness of information and marketing activities, and improving the functionality of the website.

Legal basis: Article 6(1)(a) or (f) GDPR, depending on the technology used and the specific process.

h) Photo and video documentation

Recording the results of services, documenting certain treatments and creating promotional materials.

Legal basis: the relevant condition under Article 6 GDPR and, in the case of special categories of data, also under Article 9 GDPR. The promotional use of a person’s image is based on separate consent.

5. COOPERATION BETWEEN SALONS AND EXCHANGE OF PERSONAL DATA

5.1. The three PIED-DE-POULE salons in Warsaw cooperate in organising bookings, customer service, communication and carrying out agreed marketing activities.

5.2. Such cooperation may involve the sharing of personal data between the entities indicated in section 2, to the extent necessary to achieve specific purposes.

5.3. Data may be exchanged in particular in the case of:

booking or transferring a visit between salons;
changing the location where a service is provided at the client’s request;
handling enquiries regarding services offered at several locations;
ensuring continuity of customer service;
handling requests or complaints concerning several locations;
carrying out joint marketing activities, where an appropriate legal basis exists.

5.4. The scope of shared data should be limited to the information needed to achieve a specific purpose. It may include identification data, contact details, booking data, selected services and necessary information about previous service.

5.5. The exchange of data as part of the cooperation does not mean that a client’s entire visit history is automatically made available to all salons.

5.6. Data concerning health, contraindications and other special categories of data may not be freely shared between salons. Their transfer requires an appropriate legal basis and fulfilment of the conditions of Article 9 GDPR.

5.7. The basis for the exchange of data may be Article 6(1)(b) GDPR, where the transfer is necessary for the performance of a contract or for steps taken at the client’s request, or Article 6(1)(f) GDPR, where there is a duly assessed legitimate interest.

5.8. In the case of processes covered by the joint determination of the purposes and means of processing, the provisions of Article 26 GDPR concerning joint controllers apply.

6. SHARED CLIENT DATABASE AND MARKETING COMMUNICATION

6.1. As part of the cooperation between the Warsaw salons, shared IT solutions may be used to manage bookings, service history and communication with clients.

6.2. Access to data in such systems is restricted to authorised persons and to the extent necessary to perform specific duties.

6.3. Joint marketing activities may include information about services, promotions and events organised by the salons at ul. Piękna 49, ul. Grzybowska 4 and Oś Królewska 18.

6.4. The processing of data for marketing purposes and sharing it with other companies requires an appropriate legal basis. The use of e-mail, SMS, telephone or other channels covered by Article 398 of the Electronic Communications Law requires prior consent.

6.5. Consent to marketing communication should clearly indicate the companies whose offers the communication concerns and the relevant contact channels.

6.6. Giving marketing consent is voluntary. Not giving consent does not affect the ability to book and use the salons’ basic services.

6.7. The client may withdraw consent or object to the processing of data for direct marketing purposes at any time by contacting the relevant controller.

6.8. The controllers should ensure that information about the withdrawal of consent or the lodging of an objection is properly handled across all marketing systems and processes covered by the given request.

7. ONLINE BOOKINGS AND THIRD PARTIES

7.1. Services of the Warsaw salons may be booked via the booking.warsaw.p-de-p.com system and other channels made available.

7.2. When booking, the client selects the salon in which they intend to use the service.

7.3. The controller of data related to the booking and provision of the service is the entity operating the selected salon, subject to any separate joint control processes.

7.4. Providers of booking, hosting, payment, communication and other services may process data on the basis of appropriate agreements or as separate controllers, depending on the nature of the service provided.

7.5. Data may be disclosed to competent public authorities where required by law.

7.6. Any transfer of personal data outside the European Economic Area, where it occurs, takes place in accordance with the requirements of Chapter V GDPR.

8. PHOTOGRAPHS, VIDEO RECORDINGS AND USE OF IMAGE

8.1. PIED-DE-POULE salons may invite clients to take part in photo sessions and video recordings documenting the results of services, the course of treatments and promotional materials.

8.2. Recording and using a client’s identifiable image for marketing purposes requires separate, voluntary consent, taking into account Article 81 of the Act on Copyright and Related Rights and the relevant provisions of the GDPR.

8.3. The consent specifies the purposes for which the materials will be used, the channels in which they will be published and the entities entitled to use the image.

8.4. Materials may be published in the communication channels of specific salons, on the website and in the central channels of the PIED-DE-POULE brand only to the extent covered by the consent given or another appropriate legal basis.

8.5. The client has the right to refuse to take part in a photo session or promotional recording without affecting their ability to use the basic services.

8.6. Photographs and recordings made solely for the purpose of documenting a treatment are subject to separate processing rules, in particular where they may reveal data concerning health.

8.7. The withdrawal of consent to the processing of data based on consent does not affect the lawfulness of processing carried out before its withdrawal. Further use of the materials is subject to the applicable provisions and the scope of the permission granted.

9. COOKIES AND ANALYTICAL TECHNOLOGIES

9.1. The Website may use cookies and similar technologies to ensure the proper functioning of the website, conduct statistical analyses and carry out marketing activities.

9.2. Depending on the solutions used, these technologies may include:

cookies necessary for the operation of the Website;
functional cookies;
analytical and statistical cookies;
advertising and marketing cookies.

9.3. Cookies and similar technologies requiring consent are used only after such consent has been obtained, in accordance with Article 399 of the Electronic Communications Law.

9.4. The user should be given the option to accept or reject optional categories of cookies and to change their preferences later.

9.5. Detailed information about the tools, providers, purposes, lifetimes and types of cookies used should be made available in the appropriate consent management panel.

9.6. Using the Website does not in itself constitute consent to the use of optional tracking technologies.

10. DATA RETENTION PERIOD

10.1. Personal data are processed only for the period necessary to achieve a specific purpose or as required by law.

10.2. Data relating to bookings and the provision of services are stored for the duration of the provision of services and, to a justified extent, until the expiry of the relevant limitation periods for pursuing or defending against claims.

10.3. Accounting and tax records are kept in accordance with the applicable statutory periods.

10.4. Data related to correspondence are stored for the period needed to handle the matter and to protect any claims.

10.5. Data processed on the basis of consent are used until such consent is withdrawn or the purpose ceases to exist earlier, subject to the possibility of retaining data necessary to demonstrate the lawfulness of prior processing.

10.6. Data processed for direct marketing purposes on the basis of a legitimate interest are processed no longer than until an objection is effectively lodged or that purpose ceases to exist.

10.7. Technical data and information related to cookies are stored in accordance with the applicable retention periods for the individual systems and technologies.

11. RIGHTS OF DATA SUBJECTS

11.1. Persons whose data are processed have, in the cases provided for in the GDPR, the following rights:

the right of access to personal data;
the right to rectification of data;
the right to request erasure of data;
the right to restriction of processing;
the right to data portability;
the right to object;
the right to withdraw consent at any time.

11.2. In matters concerning data related to a specific service, please contact the controller operating the relevant salon.

11.3. In matters related to the processing of data by the Website operator, you may contact us at pieddepoulepiekna@gmail.com.

11.4. Requests are handled within the time limits set out in Article 12 GDPR.

11.5. The data subject has the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stanisława Moniuszki 1A, 00-014 Warszawa.

12. DATA SECURITY AND PROTECTION

12.1. The controllers apply appropriate technical and organisational measures designed to protect personal data.

12.2. Access to data is restricted to authorised persons and in line with the scope of their duties.

12.3. The controllers take measures to prevent unauthorised access to, disclosure, loss or destruction of data.

12.4. In the event of a personal data breach, the appropriate procedures arising from the provisions of the GDPR are applied.

13. VOLUNTARY PROVISION OF DATA AND AUTOMATED DECISIONS

13.1. Providing the data needed for booking and the provision of services is voluntary; however, failure to provide such data may make it impossible to perform the given service.

13.2. Providing data required by law is mandatory to the extent arising from those provisions.

13.3. Marketing consents and consents to the promotional use of image are voluntary.

13.4. If profiling or automated decision-making is used within the Website, in particular decisions producing legal effects or similarly significantly affecting data subjects, the competent controller will provide the required information in accordance with the GDPR, including information about the existence and rules of such processes, where required by law.

14. FINAL PROVISIONS

14.1. This Privacy Policy constitutes information on the processing of personal data in connection with the use of the PIED-DE-POULE Website and the activities of the three Warsaw salons.

14.2. Each salon may additionally make available its own Privacy Policy setting out detailed rules for the processing of data related to its activities.

14.3. The controllers reserve the right to update the Policy in the event of changes in legislation, the organisation of their activities or the methods of data processing.

14.4. The current version of the Policy is available at: https://p-de-p.pl/polityka-prywatnosci/

Last updated: 4 November 2026