The administrator of personal data is Karolina Kutak-Zalewska, running a business under the name “MAF Usługi Karolina Kutak-Zalewska” with its registered office at ul. Pawia 3/43, 05-500 Piaseczno, with the tax identification number NIP: 9521812679, REGON number: 521342148, contact phone number +48 508-050-160, hereinafter referred to as the Administrator. Personal data provided by customers to the Administrator by signing up for treatments are included in the treatment schedule and further processed in order to provide services related to the conducted business activity. The legal basis for the processing of this data is the legitimate interest of the Administrator. Providing data is voluntary, but necessary to use the services provided by the Administrator. Personal data that customers provide to the Administrator in order to obtain invoices are included on invoices, copies of which the Administrator keeps for the period required by law. The legal basis for the processing of this data is the provisions of tax law. Providing data is voluntary, but necessary to receive an invoice. Data of customers and persons sending messages or making inquiries in electronic form are processed in order to exchange mutual correspondence or to answer questions. The legal basis for the processing of this data is the legitimate interest of the Administrator. Providing data is voluntary, but necessary for the exchange of mutual correspondence or to receive answers to the questions asked. Personal data is processed for no longer than it is necessary. The length of personal data processing may result from the provisions of the law, received consents for data processing or the implementation of the legitimate interests of the Administrator. Personal data processed by the Administrator may also be processed by Processing entities with whom an agreement for entrusting the processing of personal data has been concluded, responsible for: property protection, device servicing, and hosting services. Personal data processed by the Administrator are not subject to processes based on automated decision making, including profiling. The administrator does not transfer and does not intend to transfer personal data to a third country or an international organization. If the Administrator processes or will process personal data on the basis of the consent received from the data subject, such a person has the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. Persons whose personal data is processed by the Administrator have the right to request access to their data, rectification, deletion or limitation of processing, as well as the right to object to the processing, as well as the right to transfer their data and submit a complaint to the supervisory body.