1. Data Controller

The controller of personal data of participants in the “Soleo Glow” Competition (hereinafter: the “Competition”) is Aroma Trend Sp. z o.o. (NIP: 5342408853; KRS: 0001082691) (hereinafter: the “Controller”) – contact for GDPR matters: contact@soleoglow.com. The Competition is run by the Organiser (Komar Group Maciej Komarczuk, NIP: 526-259-76-80; ul. Puławska 255/16, 02-740 Warsaw), who processes participants’ data solely as a data processor within the meaning of Art. 28 GDPR, on behalf of and in the name of the Controller.

For matters relating to the protection of personal data, please contact the Controller:

• by e-mail: contact@soleoglow.com
• in writing: Aroma Trend Sp. z o.o., ul. Sławęcińska 4, Macierzysz, 05-850 Ożarów Mazowiecki

2. Purpose and Legal Basis for Data Processing

Personal data of Competition participants are processed for the following purposes and on the following legal bases:

2.1. Organisation and Conduct of the Competition

Legal basis: Art. 6(1)(a) GDPR (consent of the Participant expressed by joining the Competition) and Art. 6(1)(c) GDPR (legal obligations, including tax and accounting obligations); regarding complaint handling – Art. 6(1)(d) GDPR (protection of vital interests of the Participant). Art. 6(1)(f) GDPR (legitimate interest of the Controller – organisation and conduct of the Competition, pursuit and defence of claims, complaint handling, archiving and statistical purposes) and Art. 6(1)(c) GDPR (legal obligations, including tax and accounting obligations).

• registration of applications and verification of participation conditions,
• selection of semi-finalists and finalists,
• organisation of the final trip to Ibiza,
• payment of prizes and tax settlements.

2.2. Marketing and Promotion of the Soleo Brand

Regarding the purposes described in this section. Legal basis: Art. 6(1)(a) GDPR (consent) – regarding publication of image, UGC content and event materials in Soleo brand channels.

• publication of submitted video materials (UGC) in brand social media channels,
• use of participants’ image in promotional materials,
• distribution of content from the final event in Ibiza.

2.3. Public Voting

Legal basis: Art. 6(1)(a) GDPR (consent) and the legitimate interest of the Controller (Art. 6(1)(f) GDPR) – organisation of voting on the Landing Page.

3. Scope of Data Processed

The Controller processes the following categories of personal data:

• identification data: first name, surname or alias/nickname,
• contact data: e-mail address, phone number (optional), delivery address for the Glow Kit package (for semi-finalists),
• social media profile data: profile name on Instagram / TikTok / Facebook platforms,
• image: photos and video recordings submitted as a competition entry or taken during the final event,
• professional activity data (B2B only): salon/company name, position, address details.

4. Data Retention Period

Personal data of participants are retained for the following period:

• for the duration of the Programme and for the time necessary to settle it and handle any complaints – no less than 12 months after the end of the Programme,
• regarding tax settlements – for the period required by law (as a rule, 5 years from the end of the tax year),
• regarding UGC content and image – for the duration of the consent granted, but no longer than 3 years after the end of the Programme, unless the participant withdraws consent earlier.

5. Recipients of Data

Participants’ data may be transferred to the following categories of recipients:

• providers of technical and hosting services (Landing Page operator, CRM systems, mailing systems),
• marketing and production agencies cooperating in the organisation of the Programme,
• courier and logistics companies (regarding delivery of Glow Kit packages),
• travel agencies and hotels (regarding organisation of the final trip),
• public authorities – solely to the extent required by law.

The Controller informs that, in connection with participants’ use of social media platforms (Instagram, TikTok, Facebook), participants’ personal data may be transferred outside the European Economic Area, including to the United States. The transfer takes place on the basis of standard contractual clauses approved by the European Commission, constituting adequate safeguards within the meaning of Art. 46 GDPR.

6. Participants’ Rights

Each participant has the following rights in connection with the processing of their personal data:

• right of access to data (Art. 15 GDPR),
• right to rectification of data (Art. 16 GDPR),
• right to erasure of data (Art. 17 GDPR) – the so-called 'right to be forgotten’,
• right to restriction of processing (Art. 18 GDPR),
• right to data portability (Art. 20 GDPR),
• right to object (Art. 21 GDPR),
• right to withdraw consent at any time – without affecting the lawfulness of processing carried out before withdrawal,
• right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).

 

To exercise the above rights, please contact the Controller at: contact@soleoglow.com

7. Cookies and Analytics

The Programme’s Landing Page (soleoGlow.com) uses cookies for the purpose of:

• ensuring the proper functioning of the registration form and the voting module,
• traffic analysis and campaign optimisation (Meta Pixel, TikTok Pixel, Google Analytics),
• retargeting in paid Meta Ads and TikTok Ads campaigns.

Detailed information on cookies is available in the Cookie Policy on the Landing Page.

8. Data Security

The Controller applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss or destruction, in particular:

• encryption of data transmission (SSL/TLS),
• access control to data processing systems,
• regular staff training on personal data protection.

9. Changes to the Privacy Policy

The Controller reserves the right to amend this Privacy Policy. Any changes will be published on the Programme’s Landing Page with appropriate notice. Continued participation in the Programme following the introduction of changes constitutes acceptance thereof.

10. Contact

All questions and requests regarding the processing of personal data within the “Soleo Glow” Competition should be addressed to the Controller (Organiser):

• E-mail: contact@soleoglow.com
• Postal address: Aroma Trend Sp. z o.o., ul. Sławęcińska 4, Macierzysz, 05-816 Ożarów Mazowiecki

This Privacy Policy is effective from 16 March 2026.