PRIVACY POLICY OF ABWELLNESS

Information provided in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 2016, p. 1), hereinafter referred to as GDPR:

Data Controller and Contact Information

The data controller of your personal data is ABWellness, with its registered office at Jana Ostroroga Street 24 E, 01-163, Warsaw. You can contact us by email at kontakt.abwellness@gmail.com or in writing at the above address of our office.

Categories and Sources of Personal Data

Depending on your relationship with us, we may process the following categories of your personal data:

• Personal data (e.g., name and surname),
• Contact details, including business information (e.g., company address, phone number, email address, position, employer's name),
• Identification data (e.g., tax number, REGON),
• Information about our cooperation with you (e.g., details of contracts or transactions with you).

Personal data is primarily obtained directly from you, and in other cases from your employer, contractors, or publicly available databases.

Data Processing

Your personal data is or may be processed by us:

1. To conclude and perform a contract with you (e.g., a contract for sauna services, rental, etc.) or to take action at your request before entering into a contract. The legal basis is Article 6(1)(b) of the GDPR;
2. To comply with our legal obligations, such as tax obligations. The legal basis is Article 6(1)(c) of the GDPR;
3. To pursue our legitimate interests, such as:
   • direct marketing of our services,
   • providing information related to our services,
   • verifying the credibility of customers,
   • ensuring the efficient performance of contracts,
   • asserting claims or defending against claims. The legal basis for processing is Article 6(1)(f) of the GDPR;
4. In situations where you have given your consent – for the purposes specified in your consent. The legal basis is Article 6(1)(a) of the GDPR.

Providing your personal data is voluntary but necessary for concluding and performing the contract and for taking steps aimed at entering into the contract. Providing data for marketing purposes is voluntary.

Data Retention Period

Your personal data will be retained only for as long as it is necessary for the purposes outlined in this Privacy Policy (e.g., for the duration of the contract) and/or to fulfill legal requirements (e.g., until the expiration of the mandatory data retention period under tax laws) and/or until claims expire.

Data Recipients

Your personal data may be disclosed to authorized employees and partners, as well as entities involved in the execution of the contract (e.g., companies providing technical, organizational, or accounting services). If necessary, the data may also be transferred to supervisory authorities, courts, and other public institutions.

Your Rights

You have the right to access your data, rectify it, delete it, restrict its processing, as well as the right to object to its processing and the right to data portability. You can also withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

The scope of each of these rights is determined by law. You also have the right to lodge a complaint with the supervisory authority.