Privacy Policy

1. Scope and data controller

This policy applies to the Dosiq website, contact forms, information connected with a Dosiq account and Dosiq services where an application or screen links to this policy. It also describes the basic processing rules for the web workspace, mobile application and modules made available to salons.

Where Dosiq independently determines the purposes and means of processing, the controller is Patryk Warecki conducting business under the name “Patryk Warecki”, with an address for service at ul. Wiatraczna 29A lok. 61, 04-384 Warsaw, Poland, tax identification number 5213761257, REGON 366172513, e-mail: kontakt@dosiq.pl (the “Dosiq” or “controller”).

The fryz.me service is a separate channel and may have a separate controller and privacy policy. If you use fryz.me, please review the document published there.

2. Data we may process

The scope depends on the feature you use. We may process, in particular:

• data submitted in a contact form or when arranging a product presentation, such as your name, salon name, phone number, e-mail address, city, message and selected consents;
• account and organization data, such as user details, salon details, roles, permissions, billing details and consent history;
• operational data entered by a salon, such as employee, client, appointment, service, recipe, product, inventory and organization-configuration data;
• technical and security data, such as IP address, session identifiers, device and browser information, event logs, error information and data needed to detect abuse;
• payment and billing data, to the extent provided by you or a payment provider;
• website-usage data, including analytics data, but only in accordance with your cookie settings.

We do not ask for special categories of personal data unless a particular feature expressly provides for it and an appropriate legal basis exists. Please do not enter data that is not needed for using the service.

3. Data sources and whether data is required

We receive data directly from you, from the salon or organization that gives you access, from your device and browser, and from providers supporting payments, security or service operation.

Providing fields marked as required is needed to handle an enquiry, create an account, enter into or perform an agreement, or keep the service secure. Other data is voluntary. Not providing required data may prevent us from replying, registering you or providing a particular feature.

4. Purposes and legal bases

We process data for the following purposes:

• handling enquiries, product presentations and commercial contact — based on steps taken at your request before entering into an agreement, the controller’s legitimate interest or consent where required;
• creating and maintaining an account, providing the service, handling subscriptions and support — to perform an agreement;
• billing, accounting and compliance with legal obligations — to comply with a legal obligation;
• security, abuse prevention, and establishing, pursuing or defending claims — based on the controller’s legitimate interest;
• measuring traffic and improving the website — based on consent to analytics cookies or another legal basis where permitted by law;
• sending marketing communications — based on separate consent where required.

Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5. Dosiq, the salon and salon-client data

For account, contact, billing, security and operation of its own services, Dosiq acts as a controller.

The salon or organization using Dosiq generally determines the purposes of processing its clients’ and employees’ data, for example in connection with appointments, service history or client communications. In that scope, the salon is the controller and Dosiq acts as a processor under a data-processing agreement. The scope, duration and rules for that processing should follow the salon agreement and the service configuration.

If a salon gave you access to Dosiq, please first direct questions about data entered by that salon to the salon. You may also contact Dosiq; where necessary, we will forward the request to the appropriate controller.

6. Recipients and international transfers

Data may be shared with entities supporting Dosiq where necessary for service operation, in particular providers of:

• hosting, databases, file storage and infrastructure;
• e-mail, communications and support-ticket handling;
• payments, invoicing and accounting;
• security, error monitoring and system maintenance;
• analytics, only after the required consent has been obtained;
• legal, accounting or technical advice where needed.

These entities receive only the data needed for the relevant function and must maintain confidentiality and appropriate security measures.

If we use a provider outside the European Economic Area, or a provider may access data from outside the EEA, the transfer is made using a mechanism required by the GDPR, such as an adequacy decision or standard contractual clauses and additional safeguards where needed.

7. How long we keep data

We do not keep data longer than needed for the purpose for which it was collected. The period depends on the type of data and includes, in particular:

• the time needed to handle an enquiry, presentation or negotiations, followed by the period needed for accounting and claims;
• the term of an account and agreement, followed by the time needed to close billing, handle backups and claims;
• the period required by tax, accounting or other legal obligations;
• the period necessary to maintain security and investigate an incident;
• the period resulting from your cookie choice and analytics settings.

After the relevant period, we delete or anonymize data, or restrict its use to purposes for which the law permits further retention.

8. Your rights

Within the limits set by the GDPR, you have the right to:

• access your data and obtain a copy;
• correct inaccurate or complete incomplete data;
• erase data;
• restrict processing;
• data portability where processing is based on consent or an agreement and is automated;
• object to processing based on legitimate interest, including direct marketing;
• withdraw consent where processing is based on consent.

Send a request to kontakt@dosiq.pl. We may ask for information needed to verify your identity and the scope of the request. You also have the right to lodge a complaint with the President of the Polish Data Protection Authority.

9. Automated decision-making and profiling

The website and the public forms described here do not make decisions about you that produce legal or similarly significant effects solely through automated processing. If a future feature operates differently, we will provide the required information before you use it.

10. Security and policy changes

We apply technical and organizational measures appropriate to the risk, including access controls, least-privilege permissions, transmission safeguards, backups and event monitoring, according to the type of service.

This policy may be updated when the services, applicable law or the scope of providers changes. The current version is publicly available on this page. If a change is material, we will communicate it in a manner appropriate to the relationship with the user.

11. Cookies and similar technologies

The detailed description of cookies, local storage, analytics and how to change your choice is available in the Cookie Policy.