Privacy Policy

PRIVACY POLICY

The websites of the online store [www.danucera.pl] (hereinafter: the “Websites”) are intended to provide information concerning DANUCERA sp. z o.o., the products and services offered, enable orders to be placed in the online store, and facilitate contact with Customers and interested persons.

At the same time, DANUCERA sp. z o.o. operates a stationary service business under the name DANUCERA SPA (hereinafter: the “SPA”). In connection with this activity, personal data may also be collected and processed outside the Websites, in particular when appointments are booked (including via Booksy, by telephone or in person), during the provision of services at the salon, in the processing of payments/deposits, and in connection with complaints and the establishment, pursuit or defence of claims.

Information that we collect in connection with the use of the Websites and SPA services may be used by us in connection with conducting our business activities, in particular for sales, organisational and accounting purposes and, where applicable, for marketing our products and services.

This Privacy Policy applies to all data collected through our Websites and provided to us directly or indirectly in connection with our business activities. The Privacy Policy also contains information concerning data security and our rights regarding access to and supervision of the information provided to us.

In order to ensure the highest standards of service in the area of personal data security and protection, we implement all measures required by law, including a Data Protection Impact Assessment (DPIA).

INFORMATION ABOUT THE DATA CONTROLLER

The controller of your personal data is DANUCERA sp. z o.o., with its registered office in Warsaw at ul. Górnośląska 16 lok. 33, 00-432 Warsaw, Poland, entered in the National Court Register (KRS) maintained by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register, under KRS number 0001097617 (hereinafter: the “Data Controller”).

You may contact us directly by sending correspondence to our registered office:

DANUCERA sp. z o.o.
ul. Górnośląska 16 lok. 33
00-432 Warsaw, Poland

or/and by sending an email to kontakt@danucera.pl, provided on the website www.danucera.pl/kontakt.

INFORMATION ABOUT THE DATA PROTECTION OFFICER

Our Data Protection Officer is Ms Anika Karpińska. You may contact the Data Protection Officer regarding this Privacy Policy by email at kontakt@danucera.pl or by sending correspondence to the registered office of our company:

DANUCERA sp. z o.o., Data Protection Officer
Górnośląska 16 lok. 33
00-432 Warsaw, Poland

INFORMATION ABOUT THE PURPOSES OF PROCESSING PERSONAL DATA

Your personal data may be collected and processed by DANUCERA sp. z o.o. both through our Websites and online store and outside them, in particular in connection with the stationary SPA business (e.g. when appointments are booked via Booksy, by telephone or in person, during the provision of services at the salon, when processing payments/deposits, as well as in connection with complaints and the establishment, pursuit or defence of claims).

As part of the activities of DANUCERA sp. z o.o. (online store and SPA), we may process data concerning, among others: store customers, persons booking appointments, employees, senders and recipients of correspondence, contractors, and persons submitting complaints or enquiries. Personal data is most commonly processed in connection with the performance of a contract or taking steps at the request of the data subject prior to entering into a contract (e.g. an order placed in the online store or an appointment booking), compliance with legal obligations (e.g. tax and accounting obligations), and for the establishment, pursuit or defence of claims.

Detailed information concerning the processing of personal data can be found in this Privacy Policy and in documents available on our website, such as the Online Store Information Clause, SPA Salon Information Clause, Online Store Terms and Conditions, SPA Terms and Conditions, and Cookie Policy.

INFORMATION ABOUT THE METHODS OF PROCESSING PERSONAL DATA

Personal data collected through the online store website www.danucera.pl, for which DANUCERA sp. z o.o. is the Data Controller, is obtained directly through forms, email messages or on the basis of connections established between the web browser and our server.

In connection with operating the stationary SPA, personal data may also be collected and processed outside the Websites, in particular when appointments are booked (e.g. via Booksy, by telephone or in person), during the provision of services at the salon, when processing payments and deposits, as well as in connection with complaints and the establishment, pursuit or defence of claims. If, before performing a treatment, we collect information about contraindications or other health-related data (e.g. in a questionnaire), we process such data solely for the purpose of ensuring treatment safety and on the basis of the client's explicit consent.

During the provision of SPA services, we may take photographic documentation “before” and “after” the treatment. Such documentation is used to document the course and effects of the treatment, ensure continuity and quality of services, handle potential complaints, and establish, pursue or defend claims.

Video surveillance may be used at the SPA premises for the purpose of ensuring the safety of persons present at the salon and protecting property. Video surveillance is carried out to the extent necessary to achieve these purposes, and the areas covered by surveillance are appropriately marked.

We process this data mainly using IT systems in an automated manner and, where data is provided to us in written correspondence or documentation maintained at the salon (e.g. forms/questionnaires), also manually.

Third parties also place information in the form of cookies on our Websites and access such information. These third parties are trusted partners with whom we cooperate on an ongoing basis in order to tailor advertisements addressed to you to your needs and interests.

PERSONAL DATA COLLECTED DIRECTLY FROM YOU

We collect personal data for which we are the Data Controller directly from you, including during the process of placing an order in the online store, when booking an appointment at the SPA (via Booksy, by telephone or in person), during email or telephone contact, and in written correspondence. This data primarily includes information provided by the data subject, such as first and last name, email address, telephone number, delivery address (for orders), invoicing details, and other information provided by you when placing an order or booking and receiving a service.

When providing other services (both through our Websites and at the SPA), we may ask you to provide additional data only where this is necessary for the proper performance of the service, compliance with legal obligations, or where you have given your consent.

PERSONAL DATA COLLECTED WHEN USING THE SERVICE

When using our Websites, we also collect data provided by you through your browser or other mobile/IT device used to connect to the Internet. This data primarily concerns how you use our Websites and is used to monitor interest in our products, offers and services, improve the solutions used, and tailor product and service content and offers. Such information may include your IP address, Internet connection details, browser type, operating system type, the amount of time you spend on our Websites, and the offers you select or view.

INFORMATION ABOUT THE LEGAL BASES FOR PROCESSING PERSONAL DATA

The Data Controller processes personal data obtained in connection with its sales and service activities, including servicing online store Customers and operating the stationary SPA. Where we conduct marketing activities concerning our products or services, the processing of personal data for these purposes is carried out only to the extent permitted by law and on the basis of consent.

The legal basis for processing personal data for communication purposes (e.g. responding to enquiries, correspondence, contact concerning an order or appointment) and evidentiary purposes is the legitimate interest of the Data Controller (Article 6(1)(f) GDPR), consisting of maintaining documentation and the need to establish, pursue or defend claims.

Personal data may also be processed by us:

for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract (e.g. placing and fulfilling an order in the online store, booking and performing an SPA service) – Article 6(1)(b) GDPR;
in connection with compliance with legal obligations (e.g. tax and accounting obligations) – Article 6(1)(c) GDPR;
on the basis of consent, to the extent to which consent has been given (Article 6(1)(a) GDPR), and in the case of health-related data (e.g. information about contraindications to a treatment collected in an SPA questionnaire), on the basis of explicit consent (Article 9(2)(a) GDPR), solely for the purpose of ensuring treatment safety;
for the purpose of preparing “before/after” photographic documentation of treatments as part of the provision of SPA services, ensuring continuity and quality of services, and handling potential complaints – Article 6(1)(b) and Article 6(1)(f) GDPR;
for the purpose of disseminating an individual's image for marketing purposes (e.g. publication on the Websites, social media or promotional materials) – on the basis of consent (Article 6(1)(a) GDPR);
for the purpose of ensuring the safety of persons and property (video surveillance) – Article 6(1)(f) GDPR.

More detailed information on this subject can be found in the relevant documents, i.e. the Information Clause and the terms and conditions applicable to the online store and SPA Salon.

INFORMATION ABOUT THE PERIOD OF PERSONAL DATA PROCESSING

Personal data processed on the basis of consent is processed until the consent is withdrawn or an objection to further processing is made.

Personal data collected in connection with correspondence is processed until the expiry of the applicable limitation period for the establishment, pursuit or defence of claims.

Personal data processed in connection with the provision of services is processed for the duration of the Service to the extent necessary for its proper performance and, after that period, only to the extent necessary to comply with legal obligations and in connection with potential claims or the defence against claims.

Personal data processed as part of video surveillance is generally retained for no longer than 30 days, unless the recording constitutes evidence in proceedings or is necessary for the establishment, pursuit or defence of claims – in which case it is retained until the proceedings are finally concluded.

Cookies and data stored using similar technologies are retained for a period corresponding to the function of the relevant file: session cookies are deleted at the end of the browser session, while persistent cookies are retained for the period specified for the relevant file, but no longer than necessary to achieve the purpose. Analytical and marketing cookies are generally retained for no longer than 13 months, unless a shorter period results from the settings of the relevant provider. Detailed retention periods for individual cookies are specified in the consent management panel (cookie banner/panel) on the Websites.

More detailed information on this subject can be found in the relevant documents, i.e. the Information Clause, which we include as part of this Privacy Policy or provide directly each time personal data is collected.

INFORMATION ABOUT RECIPIENTS OF PERSONAL DATA

Personal data will primarily be made available to our employees in accordance with the authorisations and permissions they hold for the purpose of ensuring the proper handling of data processing activities and only for the necessary period and to the necessary extent.

Our employees have been trained in the principles of personal data processing applicable within DANUCERA sp. z o.o. and in the applicable laws concerning the processing and protection of personal data, and they have been obliged to maintain the confidentiality of such information.

In justified cases, personal data may also be disclosed to trusted cooperating entities, solely for purposes related to the provision of a service or ensuring its proper performance.

Where consent has been given to use an individual's image for marketing purposes, recipients of the data may also include operators of social media services on which we publish materials (acting as separate data controllers).

Video surveillance recordings may be disclosed to entities servicing the surveillance system and, where justified, to authorised authorities or entities involved in proceedings concerning the establishment, pursuit or defence of claims.

In connection with the use of certain service providers (e.g. IT, communication or hosting solutions), your data may be transferred outside the European Economic Area. In such cases, we ensure an appropriate level of data protection, in particular by using standard contractual clauses approved by the European Commission or other mechanisms compliant with the GDPR.

Personal data may also be made available to our Data Protection Officer where necessary for the performance of the Officer's duties provided for by law and internal procedures.

RIGHTS OF PERSONS PROVIDING THEIR DATA

We provide all technically and organisationally possible measures to ensure that data subjects can exercise their rights without undue difficulty. Therefore, please send all requests and demands concerning the exercise of data subject rights under applicable law to our email address: kontakt@danucera.pl

Where justified, due to the need to properly identify the person making the request, we may ask you to provide additional information or the necessary documents confirming your identity. All requests relating to the exercise of your rights should be submitted directly to the Data Controller. If we process your personal data as a Processor, i.e. on behalf of another Data Controller, we will promptly provide you with appropriate information in this regard.

1. Right to freely give or withdraw consent to data processing

You have the full right to freely give or withdraw your consent to the processing of personal data. Where your personal data is processed on the basis of consent you have given, we will provide you with the possibility of withdrawing that consent at any time.

Withdrawal of consent will take effect immediately from the moment it is exercised and will not affect the lawfulness of processing carried out before the withdrawal.

Withdrawal of consent will not have any negative consequences for you; however, it may prevent you from continuing to use the Services or our Websites in a manner specified by us.

2. Right of access to personal data

You have the right to access the personal data you have provided to us. We primarily exercise this right by electronic means, providing you upon request with information about what data has been provided by you and what data is currently in our possession.

At your request, we may provide you with copies of the information we hold in a readable format. We do not charge a fee for preparing, processing and providing the first copy of the data.

3. Right to rectification of personal data

You have the right to correct or supplement your personal data. We primarily exercise this right by electronic means, allowing you to provide information about changes to your personal data.

4. Right to erasure of personal data

You have the right to request the deletion of your personal data. We exercise this right on the basis of a clear request to delete the data. A request to delete personal data may result in the discontinuation of the Service or the use of services and tools provided by us or by our trusted Partners. You have the right to request deletion of your data where:

the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
you withdraw consent on which the processing is based and there is no other legal ground for the processing;
the personal data has been unlawfully processed;
the personal data must be erased in order to comply with a legal obligation under EU or Member State law.

The exercise of the right to erasure may, however, be restricted where processing is necessary for us to comply with a legal obligation or to establish, pursue or defend claims.

5. Right to restriction of processing of personal data

You have the right to request restriction of the processing of your personal data. We exercise this right on the basis of a clear request for restriction of processing together with a justification.

You may exercise the right to restriction of processing where:

you contest the accuracy of the personal data – for a period enabling us to verify the accuracy of the contested data;
the processing is unlawful, but you oppose the erasure of your personal data;
we no longer need the personal data for the purposes for which we processed it, but you require it for the establishment, exercise or defence of legal claims;
you object to the processing of your personal data on grounds relating to your particular situation, as provided for in data protection legislation.

6. Right to object to the processing of personal data

You have the right to object to the processing of your personal data. We exercise this right on the basis of a clear objection to the processing of your personal data.

7. Right to data portability

You have the right to request the transfer of your personal data to another service provider. For security reasons and due to the lack of standards concerning data portability, we provide you with a copy of the personal data received.

8. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint concerning the processing of your personal data with the supervisory authority, i.e. the President of the Personal Data Protection Office (UODO), ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland.

Our aim is to ensure the highest standards in the operation of our Privacy Policy and the protection of your personal data. We guarantee your ability to exercise the rights arising from applicable data protection legislation. With your safety in mind and in order to clarify any concerns, we kindly ask you to contact our Data Protection Officer first in order to resolve any dispute: kontakt@danucera.pl

The rights indicated above and the manner in which they are exercised may, in justified cases, be subject to limitations. This may occur where such limitation results from legal obligations to which we are subject. In such a case, we will provide you with appropriate information together with the reasons for our decision.

INFORMATION ABOUT THE OBLIGATION TO PROVIDE DATA

Providing certain personal data is necessary for us to properly provide Services or process a request or submission. In accordance with the principle of data minimisation, we do not collect more data than is necessary for these purposes. Whenever providing additional personal data is necessary to achieve a specific purpose, you will receive appropriate information directly or such information will be provided in the relevant Information Clause.

Failure to provide the required information may result in the limitation or discontinuation of our Services or the inability to process a request or submission.

Persons reporting adverse events concerning the products we offer may additionally be required to provide more information where such data is required by law.

INFORMATION ABOUT BOOKSY BOOKING TOOLS

Where an appointment is booked using external booking tools (Booksy), your data may be processed both by the Data Controller and by the provider of the tool, in accordance with its terms and conditions and privacy policy.

The Data Controller processes the data for the purpose of handling the booking, organisational contact and providing SPA services. The tool provider may also process data as a separate controller within the scope of operation of the platform. Detailed rules concerning the processing of data by the tool provider are available in its relevant documents.

INFORMATION ABOUT AUTOMATED PROCESSING OF DATA

Both our Websites and the IT tools we use to provide our Services are based on IT systems in which personal data is processed in an automated manner.

This processing may be combined with profiling. Profiling of persons visiting our Websites is carried out in a manner that does not produce any legal, financial or other negative effects. The automated processing and profiling activities we conduct are intended to improve the quality of the services and products we offer and to tailor our offer to the expectations of our Customers.

1. Information about profiling

In order to tailor our offer, improve the functionality and increase the functionality of our Websites and the tools we provide, we collect and process information about how Users of our Websites use the website and which products and services they are interested in.

This information is also used for statistical and analytical purposes and may be used for automated processes of tailoring offers, including for purposes related to marketing our products and services.

2. Information about cookies

Cookies are a type of technology that stores data and collects information from the devices you use when visiting our Websites, using our solutions, tools and Services available through a web browser, or reading emails referring to our Websites (containing graphic elements). In addition to cookies, together with the providers of the tools and services we use, we also use other technologies that allow information to be stored in your web browser/system in appropriate data stores (Session Storage, Local Storage, IndexedDB).

We may place fragments of code from analytical tools provided by third parties on our Websites, enabling cookies to be stored in the domains of those services. These solutions are used to monitor the quality of our Websites and Services, their operation, and the activities of Customers and Users.

Cookies and similar technologies other than those necessary for the operation of the Websites are generally activated only after obtaining the User's consent through the cookie banner/consent panel. Consent may be withdrawn or changed at any time in the cookie settings available on the Websites. Restricting the use of cookies may affect the operation of certain Website functions.

Below we describe the types of cookies and similar technologies used on our Websites.

Type of technology and description of use
PERSISTENT COOKIES
Persistent cookies are created in the user's system/browser after the first visit to a given Website or after a specific action has been performed. Unlike session cookies, persistent cookies are not deleted when the user's session ends. Persistent cookies are automatically deleted by the browser after a specified period. They may also be manually deleted by the user.
SESSION STORAGE
Information from the browser's Session Storage is stored and accessed only at the explicit request of the server sent to the user's web browser. Data collected in Session Storage is deleted in a similar manner to session cookies when the browser window is closed.
LOCAL STORAGE
A data storage facility constituting an internal database of the web browser, used to store large amounts of data. This storage allows data to be stored in a structured form and as files. Data is stored as objects, access to which is restricted exclusively to the relevant domain or subdomain from which the data was stored.

We use cookies and similar technologies to improve the efficiency of our Websites and services and to provide our Customers with a more refined product offering tailored to their expectations and preferences.

PURPOSE OF USE	TYPE OF TECHNOLOGY	SCOPE OF USE
Analytics and statistics	Cookies; Local Storage; Session Storage; IndexedDB	Information processed in these data stores is used to conduct analyses, prepare statistics, monitor the behaviour of Users and Customers on the Website and Services, and display our advertisements (on our Website and on other websites operated by the marketing platforms we use), ultimately serving to improve the Website and Services.
User authentication	Cookies	Information processed in these data stores is used to authenticate users in the IT system. This information enables us to correctly recognise the user.
Service configuration	Cookies; Local Storage	Information processed in these data stores is used to store the settings you have selected within the Website and Services. This allows us to remember settings and configurations of the Website and Services and selected elements and page views.
Interface language settings	Cookies; Local Storage	Information processed in these data stores is used to store the language settings of the Website or service that you have selected. This enables us to always display the appropriate language version.
Advertising	Cookies	Information processed in these data stores is used to provide Users and Customers with general and preference-based advertisements.

The analysis of data stored in the analytical systems we use, based on the use of cookies and similar technologies, shows us which content is most interesting to visitors to our Websites.

At the same time, the use of anonymous cookies and similar technologies allows us to provide better content without the need to conduct surveys or use trial-and-error methods or choice tests.

Through the use of cookies and similar technologies, we can determine what we should improve and which elements of our Websites should be avoided, making our Websites more user-friendly.

PURPOSE OF USING COOKIES AND OTHER TECHNOLOGIES

Below we describe in detail the purposes for which individual technologies are used.

Cookies and similar technologies used on our Websites are divided into the following categories depending on their purpose:

Necessary cookies – ensure the proper functioning of the Websites and online store (including maintaining sessions, handling the shopping cart and ordering process, and security). They are used on the basis of the legitimate interest of the Data Controller (Article 6(1)(f) GDPR) and do not require consent.
Functional cookies – enable selected settings to be remembered (e.g. language version, display preferences). They are activated after consent has been given through the cookie banner/consent panel.
Analytical and statistical cookies – enable us to examine how the Websites are used, measure traffic and content effectiveness, and improve our solutions (including Google Analytics). They are activated after consent has been given.
Marketing and advertising cookies – are used to display advertisements tailored to your interests, measure their effectiveness and create advertising audiences on external services (including Meta, Google Ads, TikTok, Pinterest and Snapchat). They are activated only after consent has been given.
Tracking and attribution tools – enable events (e.g. visits, adding products to the cart, purchases) to be linked to advertising activities and their effectiveness to be measured (conversion attribution), including through the use of cookies and server-side event transmission interfaces. They are activated only after consent has been given.

CHANGING COOKIE SETTINGS

If a user of our Websites does not wish information to be processed by us automatically using cookies or similar technologies, they may change the default settings of their browser.

Information on changing cookie settings in the most popular browsers is available at:

Google Chrome: Google Chrome cookie settings

Mozilla Firefox: Mozilla Firefox cookie settings

Opera: Opera cookie settings

Safari: Safari cookie settings

Microsoft Edge: Microsoft Edge cookie settings

Microsoft Internet Explorer: Internet Explorer cookie settings

LIST OF TRUSTED PARTNERS' SERVICES

The current list of services provided by our trusted Partners and Service Providers whose scripts we place on our Websites for the purpose of storing information in cookies and information stores using other technologies, and to whom we may transfer your personal data in connection with the provision of information society services, is as follows:

SERVICE	WEBSITE	PRIVACY POLICY
Shopify	shopify.com	Shopify Privacy Policy
Przelewy24	przelewy24.pl	Przelewy24 Privacy Policy
Stripe	stripe.com	Stripe Privacy Policy
PayPal	paypal.com	PayPal Privacy Policy
Fakturownia	fakturownia.pl	Fakturownia Privacy Policy
Baselinker	baselinker.pl	BaseLinker Privacy Policy
Booksy	booksy.com	Booksy Privacy Policy
Meta Platforms (Facebook, Instagram)	facebook.com	Meta Privacy Policy
Google (Analytics, Ads)	google.com	Google Privacy Policy
Klaviyo	klaviyo.com	Klaviyo Privacy Notice
Snapchat (Snap)	snap.com	Snap Privacy Policy
Pinterest	pinterest.com	Pinterest Privacy Policy
TikTok	tiktok.com	TikTok Privacy Policy

More detailed information about cookies can be found in the Cookie Policy and in cookie notices displayed on our website www.danucera.pl in connection with our Privacy Policy.

THIRD-PARTY MARKETING, ANALYTICAL AND TRACKING/ATTRIBUTION TOOLS

On our Websites and in the online store, we use marketing, analytical and tracking/attribution tools provided by third parties with whom we have entered into appropriate agreements (including Data Processing Agreements – DPAs, or joint-controller arrangements). Except where necessary, these tools are activated only after you have given consent through the cookie banner/consent panel.

Meta Pixel and Conversions API (Meta Platforms Ireland Ltd)

We use Meta tools on the Websites – Meta Pixel and the Conversions API (CAPI). These tools enable us to measure the effectiveness of advertisements, optimise campaigns, and deliver advertisements to you on Facebook and Instagram. As part of advanced matching, Meta may receive hashed data such as your first and last name, email address, telephone number, location and information about your activity in the store (e.g. viewing a product, adding a product to the cart or making a purchase). This data is transmitted only after you have given consent.

Joint controllership of data with Meta

With regard to the collection and transmission of data via the Meta Pixel and social media plugins, the Data Controller and Meta Platforms Ireland Ltd act as joint controllers (Article 26 GDPR), in accordance with the joint-controller arrangements made available by Meta. Meta is solely responsible as a separate controller for further processing of the data after receiving it (including for Meta's own purposes). The essential content of the arrangements between the joint controllers is available in documents provided by Meta.

Google (Google Analytics, Google Ads)

We use Google tools – Google Analytics (traffic analytics) and Google Ads (advertising and conversion measurement), provided by Google Ireland Ltd. These tools use cookies (including _ga and _gcl_au) and are activated after consent has been given.

Other advertising and analytical tools

Other advertising and analytical tools may also operate on the Websites, including Klaviyo, Snapchat, Pinterest and TikTok. The current, detailed list of specific providers and cookies used, together with their retention periods, is available in the consent management panel (cookie banner/consent panel) on the Websites; this list is updated on an ongoing basis.

Building advertising audiences (Custom Audiences / Lookalike Audiences)

For marketing purposes, we may transfer lists of our Customers to Meta (and, as appropriate, other advertising platforms) in encrypted form (hashed email addresses or telephone numbers) in order to create advertising audiences (Custom Audiences) and similar audiences (Lookalike Audiences). For this purpose, we transfer only data of Customers who have given separate, explicit consent covering this purpose. The legal basis is your consent (Article 6(1)(a) GDPR). In the context of creating audiences, Meta acts on the basis of the terms accepted by the Data Controller (including the Customer List Custom Audiences Terms and Data Processing Terms).

Transfers of data to third countries (USA)

In connection with the use of Meta, Google and other providers listed above, your data may be transferred to the United States. Transfers are carried out on the basis of an adequacy decision of the European Commission concerning the EU-US Data Privacy Framework in relation to providers certified under this programme, or on the basis of standard contractual clauses (SCCs) approved by the European Commission, supplemented where necessary by additional safeguards.

Withdrawal of consent and limitation of tracking

You may withdraw or change your consent to the use of cookies and marketing tools at any time in the cookie panel/banner on the Websites, as well as through your browser settings. Independently of this, you may restrict the use of data concerning your activity on the Meta side in your account settings, under “Activity Off Meta Technologies” (formerly “Off-Facebook Activity”), and on the Google side, among other places, in “My Activity” and “Ad Settings”. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

FINAL PROVISIONS

The Data Controller may amend this Privacy Policy, in particular in the event of changes to the functionality of the Websites, changes to service providers, changes to business processes or changes in legislation. The current version of the document is published on the Websites.