Last updated: March 23, 2026
The controller of personal data processed through the website symbol-krakow.com (hereinafter: the "Website") is Valeria, conducting sole proprietorship under the name Symbol Kraków, located at Osiedle Dywizjonu 303 46, lok. 84/B, 31-875 Kraków, Poland (hereinafter: the "Controller").
Contact regarding personal data protection: email: contact@symbol-krakow.com, phone: +48 577 811 760.
The Website does not contain contact forms, user registration, or a booking system. All appointment reservations are made through the external platform Booksy (booksy.com), which is a separate data controller.
The Website collects only anonymous and anonymised data through Google Analytics 4 (GA4), including: information about visited pages and user behaviour, approximate geographic location (city level), device type, browser and operating system, traffic source (e.g. search engine, social media), session duration and number of pages viewed.
The Website does not collect data enabling direct identification of the user (name, surname, email address, phone number, etc.) — unless the user voluntarily provides such data by contacting us by phone or through social media.
Data collected through GA4 is processed for the following purposes:
• Website traffic and user behaviour analysis — to improve the content and functionality of the Website. Legal basis: user consent (Art. 6(1)(a) GDPR).
• Statistical reporting — to evaluate the effectiveness of the Website. Legal basis: legitimate interest of the Controller (Art. 6(1)(f) GDPR).
Providing data is voluntary. The user may decline analytical cookies — in such case, Website functionality will not be limited.
The Website uses cookies exclusively for analytical purposes through Google Analytics 4. The cookies used include:
• _ga — unique user identification, validity: 2 years. • _ga_[ID] — session state maintenance, validity: 2 years.
GA4 cookies do not collect personal data enabling direct identification.
The user can manage cookies through their browser settings (block or delete cookies). Every browser provides this option in its settings. Blocking cookies does not affect Website functionality.
Analytical data collected through GA4 is transferred to Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) as a data processor.
Data may be transferred outside the European Economic Area (EEA) — particularly to the United States — under the EU-US Data Privacy Framework and Standard Contractual Clauses (SCCs).
The Controller does not sell, share, or transfer users' personal data to any other third parties for marketing purposes.
Analytical data collected by Google Analytics 4 is retained for 14 months from the user's last activity, in accordance with GA4 settings, after which it is automatically deleted.
Cookies are stored on the user's device for the period specified in Section 4. The user may delete them at any time.
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), every user has the right to:
• access their personal data (Art. 15 GDPR), • rectification of data (Art. 16 GDPR), • erasure of data — the "right to be forgotten" (Art. 17 GDPR), • restriction of processing (Art. 18 GDPR), • data portability (Art. 20 GDPR), • object to data processing (Art. 21 GDPR), • withdraw consent for data processing at any time, without affecting the lawfulness of processing prior to withdrawal (Art. 7(3) GDPR).
To exercise these rights, please contact: contact@symbol-krakow.com. The Controller will respond within 30 days.
Every user has the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, website: https://uodo.gov.pl.
The Website contains links to external platforms, including:
• Booksy (booksy.com) — an appointment booking platform. Booksy is a separate data controller. Use of Booksy is subject to Booksy's terms of service and privacy policy. • Instagram (@symbol.krk) — social media profile. Use of Instagram is subject to the privacy policy of Meta Platforms, Inc.
The Controller is not responsible for data processing by external platforms.
The Controller implements appropriate technical and organisational measures to protect data from unauthorised access, alteration, disclosure, or destruction. The Website uses the HTTPS protocol, ensuring encrypted data transmission.
The Controller reserves the right to update this Privacy Policy. The current version will always be available at symbol-krakow.com/privacy-policy. Users will be notified of significant changes through an appropriate notice on the Website.