PRIVACY POLICY

valid in the Online Store and when providing mentoring and awareness services

§ 1. General provisions
1. This Privacy Policy defines the principles of processing personal data of individuals using the website, the online store, and services provided by the Administrator, in particular mentoring, awareness, educational services, and the sale of physical and digital products.
2. The Administrator makes every effort to ensure that personal data is processed in accordance with:
Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR),
the Act of May 10, 2018 on the protection of personal data,
the Act of July 18, 2002 on providing services by electronic means,
the Act of July 12, 2024 – Law on electronic communications,
other applicable legal provisions.

§ 2. Data Administrator
The administrator of personal data is:
Natalia Prósińska
conducting business under the name:
Natalia Prósińska Conversations with the Soul
Address:
Waszulki 83, 13-100 Nidzica
NIP:
9840178147
REGON:
543351555
email address:
kontakt@nataliaprosinska.pl
hereinafter referred to as the "Administrator".

§ 3. Scope of processed data
The Administrator may process, among others:
first name and last name,
company name,
NIP,
correspondence address,
email address,
phone number,
data for issuing invoices,
payment data,
order history,
service usage history,
information voluntarily provided during contact forms,
information provided during mentoring sessions to the extent necessary to perform the service,
technical data related to the use of the website.
The Administrator does not process special categories of personal data unless their provision is made voluntarily by the person concerned and is necessary for the provision of the service or arises from legal provisions.

§ 4. Purposes of data processing
Personal data is processed for the purpose of:
1. fulfilling orders,
2. concluding and executing contracts,
3. providing mentoring services,
4. organizing stationary and online events,
5. conducting online courses,
6. maintaining contact with the Client,
7. handling complaints,
8. handling returns,
9. issuing accounting documents,
10. fulfilling tax obligations,
11. pursuing claims,
12. defending against claims,
13. conducting statistics,
14. ensuring the security of the website,
15. sending newsletters – after obtaining appropriate consent,
16. conducting marketing activities – to the extent permitted by law.

§ 5. Legal bases for processing
The Administrator processes personal data based on:
art. 6 sec. 1 lit. a GDPR – consent,
art. 6 sec. 1 lit. b GDPR – performance of the contract,
art. 6 sec. 1 lit. c GDPR – legal obligation,
art. 6 sec. 1 lit. f GDPR – legitimate interest of the Administrator.

§ 6. Data related to mentoring services
1. In connection with the provision of mentoring services, the Administrator may process information voluntarily provided by the Client during Sessions.
2. This data is used solely for the proper implementation of cooperation.
3. The Administrator does not use information obtained during Sessions for profiling or automated decision-making.
4. Information provided during Sessions is subject to confidentiality, subject to cases arising from applicable legal provisions.

§ 7. Data recipients
Data may be transferred to entities cooperating with the Administrator, solely to the extent necessary to provide services, in particular:
hosting providers,
online store operators,
payment operators,
accounting service providers,
law firms,
courier companies,
IT service providers,
mailing system providers,
training platform providers,
online meeting organization tool providers.
Each of these entities processes data in accordance with applicable legal provisions.

§ 8. Data retention period
Data is stored for the period necessary to achieve the purpose of processing, and then for the period resulting from applicable laws, particularly tax, accounting, and limitation of claims regulations.

§ 9. Rights of individuals whose data is being processed
Every individual has the right to:
access their data,
rectify their data,
delete their data,
restrict processing,
transfer their data,
object to processing,
withdraw consent at any time if processing is based on it,
file a complaint with the President of the Personal Data Protection Office.

§ 10. Cookies
1. The website uses cookies and similar technologies.
2. Cookies are used for:
the proper functioning of the site,
ensuring security,
remembering user preferences,
conducting statistics,
analyzing traffic,
marketing activities – if the user gives appropriate consent.
3. Detailed information about the use of cookies can be found in the Cookie Policy or the consent banner displayed during the first visit to the site.

§ 11. Newsletter
1. The newsletter is sent only to those who have given separate consent.
2. Consent can be withdrawn at any time by clicking the appropriate link in the email or contacting the Administrator.

§ 12. Data Security
The Administrator applies technical and organizational measures to ensure an appropriate level of protection of personal data, taking into account the nature, scope, purposes, and risks associated with their processing.

§ 13. Transfer of data outside the European Economic Area
As a rule, the Administrator does not transfer data outside the European Economic Area. If data is transferred outside the EEA in connection with the use of services from technology providers (e.g., mailing platforms, analytical or communication tools), the Administrator will ensure that appropriate safeguards required by GDPR are applied.

§ 14. Changes to the Privacy Policy
1. The Administrator may make changes to this Privacy Policy in case of:
changes in legal regulations,
technological changes,
expansion of the scope of activities,
introduction of new services or functionalities.
2. The current version of the Privacy Policy is published on the Administrator's website.

§ 15. Contact
For matters concerning personal data protection, you can contact the Administrator at:
email: kontakt@nataliaprosinska.pl
correspondence address: Waszulki 83, 13-100 Nidzica

Effective date of the Privacy Policy: 10.08.2026