Privacy policy

Data controller

The controller of your personal data is Shape.Care sp. z o.o., with its registered office at ul. Bratysławska 1a/10, 31-201 Kraków, Poland, KRS 0000704588, NIP 6762539700, REGON 368810426.

For matters concerning personal data, contact us at contact@shape.care.

Data we process

In the contact form, you may provide your full name, email address, telephone number and message. Your email address and message are required for us to handle your enquiry; the remaining data is optional.

We also process technical data needed to operate and secure the form, particularly your IP address, the date and time of the request and data related to ALTCHA verification.

The form is not intended for sharing health data. If you nevertheless include such data in your message, we will process it only to the extent necessary to handle your enquiry.

Purposes and legal grounds

• handling your enquiry and responding to you: Article 6(1)(f) GDPR — our legitimate interest in communicating with people interested in our services;
• steps taken before entering into a contract, if your enquiry concerns such cooperation: Article 6(1)(b) GDPR;
• protecting the form and website against misuse: Article 6(1)(f) GDPR;
• establishing, pursuing or defending claims: Article 6(1)(f) GDPR;
• health data included in a message despite our request not to provide it: your explicit consent under Article 9(2)(a) GDPR.

Retention period

We retain form data for the time needed to handle your enquiry and then for the applicable limitation period for potential claims. Security-related technical data is retained for as long as necessary to keep the website secure and detect misuse.

Recipients of data

Data may be shared with service providers necessary to operate the website, contact form and correspondence, particularly providers of hosting, IT infrastructure, email and system maintenance. Data may also be disclosed to authorised public bodies where required by law.

Your rights

You have the right to access, rectify or erase your data, restrict its processing, receive data portability, object to processing based on legitimate interests, and withdraw consent where processing is based on consent. Withdrawing consent does not affect the lawfulness of processing carried out before it was withdrawn.

You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office.

Automated decision-making

Personal data will not be used for automated decision-making, including profiling.