Privacy policy.

Effective date: 31 August 2025

Website: palomastyling.com

PTASHYNSKA (“Company,” “we,” “our,” “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share your personal data when you visit our website, interact with us, or purchase our services.

We comply with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Dutch GDPR Implementation Act (Uitvoeringswet Algemene verordening gegevensbescherming – UAVG).

By using our Website, you acknowledge that you have read this Privacy Policy. Where required by law (e.g., for cookies or newsletters), we will separately request your consent.


Data Controller

The controller responsible for your personal data is:

PTASHYNSKA
Weteringschans 165/15692, 1001 ND, Amsterdam, Netherlands
Email: contact@alinaptashynska.com

Personal Data We Process

We process your personal data because you use our services and/or because you provide this data to us yourself.

We may process the following categories of personal data:

  • First and last name

  • Gender (if provided)

  • Telephone number

  • Email address

  • Billing and shipping address

  • Payment information (processed securely via Stripe, not stored by us)

  • Newsletter subscription preferences

  • Other personal data that you actively provide, for example through a contact form or correspondence

Special and/or Sensitive Data

Our website and/or services are not intended to collect data about visitors under 16 years of age, unless they have parental or guardian consent. We cannot verify the age of visitors. We encourage parents to be involved in their children’s online activities.

If you believe we have collected personal data about a minor without consent, please contact us at contact@alinaptashynska.com. We will delete such information.

Purposes and Legal Bases for Processing

We process your personal data for the following purposes:

  • Sending our newsletter or other marketing communications (only with your consent)

  • Processing your payment and delivering digital products or services (contract performance)

  • Contacting you by telephone or email if necessary to perform our services (contract or legitimate interest)

  • Informing you of changes to our services and products (legitimate interest)

  • Complying with legal obligations, such as tax law (legal obligation)

We do not engage in automated decision-making, including profiling, within the meaning of Article 22 GDPR that produces legal effects or similarly significantly affects you.


Retention Periods

We do not store your personal data longer than is strictly necessary. The retention period depends on the type of data and our legal obligations. Examples:

  • Customer accounts: 2 years after the last activity

  • Financial administration and invoices: 7 years (tax law)

  • Contact forms and enquiries: 1 year

  • Newsletter subscriptions: until you unsubscribe

After expiry of the retention period, your personal data will be deleted or anonymised.


Sharing of Personal Data with Third Parties

We only share your personal data with third parties if this is necessary for the performance of our agreement with you or to comply with a legal obligation.

Examples:

  • Stripe (payment processing)

  • Email marketing provider (newsletter delivery)

  • Hosting and IT service providers

All third parties process your data only on our instructions and under data processing agreements.

We use Stripe for payment processing. Stripe may transfer personal data outside the European Economic Area (EEA). Where this occurs, Stripe ensures appropriate safeguards under the GDPR, including the use of the European Commission’s Standard Contractual Clauses and, where applicable, adequacy decisions. For more details, see Stripe’s Privacy Policy.”

If we transfer personal data outside the EEA, we ensure appropriate safeguards, such as the European Commission’s adequacy decisions or Standard Contractual Clauses.

Security of Personal Data

We take the protection of your data seriously and apply appropriate technical and organisational measures to prevent misuse, loss, unauthorised access, unwanted disclosure, and unauthorised alteration.

If you believe that your data is not properly secured or there are signs of misuse, please contact us at contact@alinaptashynska.com.

Your Rights

You have the right to access, correct, or delete your personal data. You also have the right to withdraw any consent you have given for data processing, or to object to the processing of your personal data by PTASHYNSKA. In addition, you have the right to data portability. This means that you may submit a request for us to send the personal data we hold about you in a computer file to you or to another organisation named by you.

To exercise these rights, contact us at contact@alinaptashynska.com. We may ask you to verify your identity before processing your request (e.g. by providing a redacted copy of your ID, with photo, MRZ, passport number, and BSN blacked out).

We will respond as soon as possible, and no later than four weeks.

You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):
https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons

Changes to This Privacy Policy

This Privacy Policy may be updated from time to time. Updates will be published on this page with a revised “effective date.”

Contact

If you have questions about this Privacy Policy or our data practices, please contact:

PTASHYNSKA
Weteringschans 165/15692, 1001 ND, Amsterdam, Netherlands
Email: contact@alinaptashynska.com