Last updated: September 16, 2025
1. Introduction
Glowinface Institut d.o.o. (“Glowinface”, “we”, “us”) is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR, EU 2016/679). This policy explains how we collect, use, and protect your personal data.
2. Data We Collect
- Identity & Contact Data (name, email, phone, address)
- Payment Data (processed securely by payment providers)
- Service Data (subscriptions, training participation, bookings)
- Technical Data (cookies, IP address, browser type)
3. How We Use Your Data
- To deliver services, memberships, trainings, and product orders
- To process payments
- To manage bookings and communication
- To comply with legal obligations
4. Data Sharing
We only share data with trusted third parties necessary for service delivery:
- Good Tripper LLC – hosting online membership content
- Lime-Booking (Adanta d.o.o.) – managing studio bookings
- Stripe and PayPal – platforms for processing online payments
- GLS – logistics and delivery services
All third parties comply with GDPR or equivalent standards.
5. Legal Basis for Processing
We process personal data under:
- Contractual necessity (to provide services you purchased)
- Legal obligations (e.g., accounting)
- Legitimate interest (improving services, fraud prevention)
- Consent (for marketing communications)
6. Data Retention
- Personal data is kept only as long as necessary for the purpose collected.
- Certain data (e.g., invoices) is stored as required by law.
7. Your GDPR Rights
You have the right to:
- Access your personal data
- Request correction or deletion
- Restrict or object to processing
- Data portability
- Withdraw consent (for marketing)
- File a complaint with your national supervisory authority
Requests can be sent to support@glowinface.com.
8. Cookies & Tracking
Our website uses cookies to ensure functionality and improve user experience. You may manage or disable cookies via your browser settings.
9. Data Security
We implement technical and organizational measures to protect personal data from unauthorized access, alteration, or disclosure.
10. International Transfers
Data is stored and processed within the European Union. If transfers outside the EU occur, they are safeguarded with Standard Contractual Clauses or equivalent measures.
11. Updates
We may update this Privacy Policy from time to time. Updates will be posted on our website with a new “Last Updated” date.