1. Data controller
The controller of the personal data of Klik Laser clients is MODESTIC Krystyna Zaitseva, registered at MODESTIC Krystyna Zaitseva, ul. Głębocka 5/U10, 03-287 Warszawa, NIP: 8133873866, REGON: 521112715. For data-protection matters contact: info@modestic.pl, tel. +48 733 640 892.
Klik Laser is a brand operating within Modestic. The full privacy policy of the umbrella brand is available at modestic.pl — this policy describes the data processed in connection with visits and the service of clients at the Klik Laser studio.
2. What data we process
In connection with booking and carrying out studio visits we process:
- identification data: first name, surname
- contact data: phone number, e-mail address (optional)
- visit data: date, time, service, interview notes, photographic documentation (with consent)
- technical data: IP address, browser information, session identifiers (cookies)
3. Basis and purpose of processing
Data is processed on the basis of:
- Art. 6(1)(b) GDPR — performance of a contract (booking, provision of treatment services)
- Art. 6(1)(c) GDPR — legal obligations (e.g. accounting records, health & safety requirements)
- Art. 6(1)(f) GDPR — the controller's legitimate interest (security, pursuit of claims)
- Art. 9(2)(a) GDPR — the client's explicit consent to processing health data necessary for the safe performance of the treatment
4. SMS communication
To the phone number provided we send SMS messages related to managing the booking: one-time login codes (OTP), booking confirmations, appointment reminders (24 hours before), and notifications of cancellations and rescheduling. Marketing SMS are sent only after separate consent has been given.
5. Retention period
We retain data for the period required to provide the service and meet legal obligations — in particular:
- treatment documentation: 5 years from the last visit
- accounting documentation: 5 years from the end of the financial year
- marketing data: until consent is withdrawn, up to a maximum of 3 years
6. Your rights
You have the following rights:
- access to your data and to receive a copy of it
- rectification (correction) of inaccurate data
- erasure of data (where legal obligations do not prevent it)
- restriction of processing
- data portability
- objection to processing
- withdrawal of consent at any time
- lodging a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw)
To exercise any of these rights, write to info@modestic.pl or visit the studio.
7. Data recipients
Data may be transferred to entities supporting the operation of the service: the hosting provider (Supabase, Vercel), the SMS provider (Twilio), the e-mail provider (Resend), the online payment provider (PayU S.A., ul. Grunwaldzka 186, 60-166 Poznań, KRS 0000274399, NIP 7792308495, REGON 300523444 — a national payment institution supervised by the KNF; for processing payments for products ordered online, PayU acts as an independent controller under its own privacy policy), and the accounting office — to the extent necessary to provide the services and solely on the basis of data-processing agreements. Data is not transferred outside the European Economic Area without standard contractual clauses in place.
8. Cookies
The site uses cookies necessary for operation (login session, language preference). Analytics and remarketing are not currently enabled. Details of cookie use by the umbrella brand are set out in the Modestic privacy policy.
9. Changes to the policy
This policy may be updated periodically. We will inform clients of any material changes via the kliklaser.pl website.