Data Privacy Notice & GDPR Compliance

2. Categories of Data Processed

We process personal information only to the extent strictly necessary to deliver informational services, respond to user inquiries, and maintain system security:

• ✓ Contact & Inquiry Data: Full name, email address, chosen coaching topic, and message content submitted through our contact desk.
• ✓ Diagnostic Tool Inputs: Sliders and parameters entered into the Activity-Rest Matrix are processed purely client-side in your browser and are not transmitted to or stored on our servers.
• ✓ Technical Telemetry: Anonymized server logs including IP address, browser user-agent, operating system, and request timestamps to ensure infrastructure availability.

3. Legal Grounds for Processing (GDPR Article 6)

Your data is processed under the following lawful bases:

• ✓ Art. 6(1)(b) GDPR: Performance of pre-contractual steps or answering explicit requests submitted via the inquiry form.
• ✓ Art. 6(1)(f) GDPR: Legitimate interests of the Controller, including securing website infrastructure, preventing automated abuse, and defending against legal claims.
• ✓ Art. 6(1)(a) GDPR: Explicit user consent for non-essential cookies and diagnostic preferences.

4. Data Retention Periods

Inquiry submissions and correspondence are retained for up to twelve (12) months following the resolution of the matter, unless extended retention is required by statutory corporate recordkeeping mandates under Polish tax or commercial law. Server access logs are automatically rotated and purged after thirty (30) calendar days.

5. Data Subject Rights Under GDPR

As a data subject residing within the European Economic Area, you hold the following non-derogable rights:

• ✓ Right of Access (Art. 15 GDPR): The right to obtain confirmation and a copy of personal data processed.
• ✓ Right to Rectification (Art. 16 GDPR): The right to correct inaccurate or incomplete data.
• ✓ Right to Erasure (Art. 17 GDPR): The right to request deletion of data (“Right to be Forgotten”).
• ✓ Right to Restriction (Art. 18 GDPR): The right to restrict active processing during dispute.
• ✓ Right to Data Portability (Art. 20 GDPR): The right to receive personal data in a structured, machine-readable format.
• ✓ Right to Object (Art. 21 GDPR): The right to object at any time to processing based on legitimate interests.

To exercise any of these entitlements, transmit a written notice to our Data Protection representative at [email protected]. You also hold the right to lodge a formal complaint with the Polish Data Protection Authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa.

6. Security and Sub-Processors

WARSAW EQUITY PARTNERS WEP Sp. z o.o. implements modern SSL/TLS 256-bit encryption for all data in transit, strict access control policies, and regular vulnerability audits. We do not sell, rent, or transfer personal data to third-party commercial marketing brokers.