Privacy Policy & Cookies
Last updated: 30 March 2026
1. Data Controller
The controller of your personal data is SAWINA Sp. z o.o., registered at: ul. Księdza Bolesława Domańskiego 1, 75-362 Koszalin, Poland, Tax ID (NIP): 6692554484, KRS: 0000804330, REGON: 384390437.
You can contact the controller:
- By email: vno.group2@gmail.com
- By post: to the registered office of the company
- In person: at one of our salons in Koszalin
2. Scope of Data Collected
Our website does not require registration, login, or providing any personal data. We only collect:
- Analytics data — anonymous information about website traffic collected via Google Analytics 4 (only after consent is given): device type, browser, approximate geographic location, pages visited, visit duration, traffic source.
- Technical data — IP address (anonymised), browser and operating system type, automatically transmitted by your browser for proper page rendering.
We do not collect sensitive data, children's data, or data submitted via forms (the website does not contain contact forms).
3. Purposes and Legal Basis for Processing
We process data on the following legal bases (Regulation (EU) 2016/679 — GDPR):
- Art. 6(1)(a) GDPR (consent) — processing of analytics data via Google Analytics takes place only after the user gives voluntary consent through the cookie banner.
- Art. 6(1)(f) GDPR (legitimate interest) — ensuring the proper and secure operation of the website, including handling essential (technical) cookies.
4. Cookies
Cookies are small text files stored on your device by your browser.
4.1. Essential (Technical) Cookies
Used to remember your cookie consent preferences. Stored in the browser's local storage (localStorage) under the key cookie_consent. They are necessary for the website to function properly and do not require consent.
4.2. Analytics Cookies (Google Analytics 4)
We use Google Analytics 4 (ID: G-4CLZYWTL87) to analyse website traffic. These cookies are set only after the user gives consent. Google Analytics uses the following cookies:
| Name | Purpose | Expiry |
|---|---|---|
_ga | Distinguishing users | 13 months |
_ga_* | Session state maintenance | 13 months |
IP address is anonymised (anonymize_ip: true parameter). The data does not allow direct identification of the user.
5. Cookie Consent Management
On your first visit to the website, we display a cookie consent banner. You have three options:
- Accept all — we enable analytics cookies from Google Analytics.
- Reject all — we do not set analytics cookies; only essential cookies remain active.
- Customise — choose which cookie categories you want to enable.
You can change or withdraw your consent at any time by clicking "Cookie Settings" in the website footer or . Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Regardless of the settings on our website, you can manage cookies directly in your browser settings (Chrome, Firefox, Safari, Edge, etc.).
6. Data Recipients and Transfers to Third Countries
Analytics data may be transferred to Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and to Google LLC (USA) as part of the Google Analytics service. Data transfers to the USA are carried out on the basis of the European Commission's adequacy decision under the EU-US Data Privacy Framework. Google processes data in accordance with its privacy policy.
We do not sell, share, or transfer personal data to any other third parties for marketing purposes.
7. Data Retention Period
- Cookie preferences — stored in the browser's local storage (
localStorage) indefinitely, until manually deleted by the user or by clearing browser data. - Google Analytics cookies — expire automatically after 13 months from the last activity on the website.
8. Your Rights
Under the GDPR, you have the following rights:
- Right of access (Art. 15 GDPR) — you can obtain information about whether we process your data and, if so, access it.
- Right to rectification (Art. 16 GDPR) — you can request correction of inaccurate data.
- Right to erasure (Art. 17 GDPR) — you can request deletion of your data ("right to be forgotten").
- Right to restriction of processing (Art. 18 GDPR) — you can request restriction of data processing.
- Right to data portability (Art. 20 GDPR) — you can receive your data in a structured format.
- Right to object (Art. 21 GDPR) — you can object to processing based on legitimate interest.
- Right to withdraw consent (Art. 7(3) GDPR) — you can withdraw consent at any time without affecting the lawfulness of prior processing.
- Right to lodge a complaint — you can file a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl.
To exercise the above rights, contact us by email: vno.group2@gmail.com or in person at one of our salons.
9. External Services
The website uses the following third-party services:
- Google Analytics 4 (Google Ireland Limited / Google LLC) — website traffic analysis, activated only after consent is given.
- Google Fonts — fonts are hosted locally on our server and are not downloaded from Google servers; therefore, no data is transferred to Google in this regard.
- Booksy (Booksy International sp. z o.o.) — when you click the booking link, you will be redirected to the external Booksy platform, which has its own privacy policy.
- Leaflet / OpenStreetMap — contact map; map tile data is downloaded from OpenStreetMap Foundation servers in accordance with their privacy policy.
10. Data Security
We implement appropriate technical and organisational measures to protect data against unauthorised access, loss, or destruction, including: encrypted connections (HTTPS/TLS), IP address anonymisation, data minimisation, and regular security reviews.
11. Changes to the Privacy Policy
We reserve the right to update this privacy policy in the event of changes to legislation, the scope of processed data, or external services used. We will inform you of any significant changes on the website. The date of the last update can be found at the top of this document.