Privacy and Cookie Policy

Hello and welcome!

If you have landed here, it means you value your privacy. I understand that well, which is why I am giving you a document that sets out in one place the rules for processing personal data and for using cookies and other tracking technologies in connection with the appointment calendar management system.

The personal data controller is Zajączkowski CAD, Andrzej Zajączkowski, ul. Sikorskiego 27, 07-410 Ostrołęka, Poland, NIP: 7582359227.

If you have any doubts about this privacy policy, you can contact us at: [email protected].

1. Scope of this document

This privacy policy is written as questions and answers for greater clarity and readability. It covers, among other things:

• what data is collected,
• for what purpose it is processed,
• what rights you have as a user,
• how cookies work on the website.

2. Purposes of data processing

Personal data of system users, such as first name, last name and e-mail address, as well as data of end clients (first name, last name, phone number, e-mail address), is processed solely to provide services related to running the appointment calendar and to ensure the platform works properly.

3. Legal basis

The legal basis for data processing is Article 6(1)(b), (c) and (f) of the GDPR, respectively for the provision of services, legal obligations and the controller’s legitimate interest, for example for analytics or protection against claims.

4. User rights

The user has all rights arising from the GDPR, including the right of access to data, rectification, erasure, restriction of processing, objection and data portability.

5. Cookies

The system uses cookies and similar technologies in three categories: necessary (login, security and basic operation of the system), analytics (Google Analytics via Google Tag Manager, Meta Pixel, Microsoft Clarity, PostHog and OpenPanel) and diagnostic (OpenTelemetry). Necessary cookies are always active. We start Meta Pixel, Microsoft Clarity, PostHog, OpenPanel and OpenTelemetry only after the user has given consent.

Meta Pixel (Meta Platforms Ireland Ltd.) measures visits to the website coming from ads on Facebook and Instagram and allows Rewi ads to be shown to people who visited the website; it stores the cookie _fbp. Microsoft Clarity (Microsoft Ireland Operations Ltd.) records the course of a visit to the website (clicks, scrolling, cursor movement), which lets us see which elements of the site are unclear; it stores the cookies _clck and _clsk. Google Analytics, Meta Pixel and Microsoft Clarity run only on Rewi’s public pages: we do not run them in the panel for logged-in users, during login and registration, or on salons’ online booking pages.

Google measurement works in consent mode (Google Consent Mode): before you give consent, we carry out only anonymous measurement, without storing cookies or identifiers, which helps us estimate traffic. We start full analytics, with cookies and advertising signals, only after you accept the analytics category in the banner.

On your first visit you can accept all optional categories, reject them, or adjust your preferences yourself. The decision is saved in your browser.

If you accept the analytics category, after you create an account and confirm your e-mail address, and after the first paid subscription, our server will send information about that event to Meta (Conversions API) and Google (GA4 Measurement Protocol). We pass on a SHA-256 hash of the e-mail address (not the address itself), the IP address, browser data, advertising identifiers (_fbp, _fbc, the Google Analytics client identifier) and, for a payment, the net amount and currency. This is used to measure ad effectiveness. Without consent we send nothing. We delete the data prepared for sending once the payment has been sent, at the latest 90 days after registration. We keep the account acquisition source (utm parameters) permanently. You can withdraw your consent in the cookie settings.

6. Retention period and data transfers

Data is stored for the duration of the service and in accordance with legal requirements.

Data may be transferred to third countries when external tools are used, such as analytics or diagnostics providers, if their infrastructure or subcontractors are located outside the EEA.

7. Contact

For matters related to personal data, please contact us at: [email protected].