GreenBeeGreenBee
← Back to home
Legal

Privacy Policy

Last updated: 6 October 2026

This Privacy Policy explains how GreenBee (owner — Olena Bilan) (“we”, “us”, “our”) — the GreenBee massage studio (Gdańsk 80-392, Szczecińska 23/11–12, office 8) — collects, uses and protects the personal data of visitors to greenb.ee and clients of the studio.

We respect your privacy and process personal data in accordance with the General Data Protection Regulation (GDPR, EU Regulation 2016/679) and applicable law.

1. Who is responsible for your data (Controller)

  • Name: GreenBee
  • Owner: Olena Bilan
  • Address: Gdańsk 80-392, Szczecińska 23/11–12, office 8
  • Phone: +48 504 161 860
  • Email for privacy matters: privacy@greenb.ee

2. What data we collect

2.1. Booking and contact data

When you book a session through the form on the Site, by phone or via a messenger, we collect: your name, phone number, email, the selected service and, optionally, a message. Please do not include medical details in the free-text message — we clarify the necessary health information separately (see 2.2).

2.2. Health data (special category)

To carry out a massage safely (especially lymphatic drainage), we may ask about your health and contraindications (e.g. illnesses, pregnancy, injuries, allergies). This is a special category of personal data (Art. 9 GDPR). We process such data only with your explicit consent and solely to provide the service safely. You are not obliged to provide this information, but without it we may have to decline the session for safety reasons.

2.3. Automatically collected data

When you visit the Site, certain technical data is collected automatically:

  • IP address;
  • browser type and version, operating system, device type;
  • date and time of visit, pages viewed, referral source;
  • technical server logs.

2.4. Analytics data

With your consent, we use Google Analytics to understand how visitors use the Site (pages viewed, session duration, approximate location based on IP, aggregated device and browser data). This data is pseudonymised. More details in section 3.

3. Cookies and similar technologies

3.1. Strictly necessary (essential) cookies Required for the basic functioning and security of the Site (including language choice and saving your cookie settings). They are always set and do not require consent.

3.2. Analytics cookies (Google Analytics) Set only after your consent via the cookie banner. They are not activated before consent is given.

On your first visit to the Site you will see a cookie consent banner where you can accept or reject analytics cookies. Rejecting is as easy as accepting. You can change or withdraw your choice at any time via the “” button in the Site footer.

4. Why we use data and on what legal basis

PurposeLegal basis (GDPR)
Ensuring the operation and security of the Site
Legitimate interest (Art. 6(1)(f))
Booking sessions and contacting clients
Performance of a contract / steps at your request (Art. 6(1)(b))
Processing health data for a safe massage
Explicit consent (Art. 9(2)(a))
Visit analytics (Google Analytics)
Consent (Art. 6(1)(a))

5. Who we share data with

We do not sell your personal data. Data may be processed by trusted service providers (“processors”) acting on our behalf:

  • Analytics: Google (Google Analytics), Google Ireland Limited / Google LLC;
  • Hosting / infrastructure: Microsoft Azure and Hetzner dedicated servers.

6. International data transfers

Our hosting infrastructure (Microsoft Azure, Hetzner) is located within the EU/EEA.

Google Analytics may transfer data to servers outside the EU/EEA, including the USA. Such transfers take place with appropriate safeguards under the GDPR — in particular on the basis of EU Standard Contractual Clauses and/or Google's participation in the EU–US Data Privacy Framework.

7. How long we keep data

  • technical logs — 180 days;
  • Google Analytics data — according to the account retention settings (up to 14 months);
  • booking data and correspondence — for the duration of client service and 12 months after the last visit;
  • health data — for the duration of client service.

8. Your rights

Under the GDPR you have the right to:

  • access your data;
  • request correction of inaccurate data;
  • request erasure (“right to be forgotten”);
  • restrict or object to processing;
  • receive your data in a structured format (portability);
  • withdraw consent at any time (this does not affect the lawfulness of processing before withdrawal);
  • lodge a complaint with a supervisory authority.

To exercise your rights, write to us: privacy@greenb.ee

Supervisory authority in Poland: Prezes Urzędu Ochrony Danych Osobowych (UODO), uodo.gov.pl

9. Data security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss or disclosure. However, no method of transmitting data over the internet is completely secure.

10. Children

The Site is not intended for persons under 16, and we do not knowingly collect their personal data.

11. Changes to this Policy

We may update this Policy from time to time. The current version is always available on this page with the date of the last update.

12. Contact

For privacy questions, contact: privacy@greenb.ee