Privacy Policy

1. Data Controller

The data controller for the purposes of this policy is NuYoga Juzuga, Orla 5, Elbląg, Poland, email: [email protected], phone: +48 552 353 186.

2. What Data We Collect

We collect personal data only when you voluntarily provide it to us. This includes:

• Your name and email address when you use the contact form or footer enquiry form on this website.
• Your phone number if provided via the contact form.
• The name of your organisation or institution if you choose to provide it.
• The content of any message you send us.
• Technical data collected automatically by our hosting infrastructure, including your IP address, browser type, operating system, referring URLs, and pages visited. This data is collected in aggregate and is not ordinarily linked to your identity.

3. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 GDPR:

• Consent (Article 6(1)(a) GDPR): When you tick the privacy consent checkbox on our contact form, you consent to us processing your data to respond to your enquiry. You may withdraw consent at any time by contacting us at [email protected].
• Legitimate interests (Article 6(1)(f) GDPR): We process technical log data on the basis of our legitimate interest in maintaining the security and performance of our website.
• Legal obligation (Article 6(1)(c) GDPR): Where we are required by applicable Polish or EU law to retain certain records, we do so on this basis.

4. How We Use Your Data

We use personal data you provide to respond to your enquiry about the course, to provide information you have requested, and to manage our relationship with you as a prospective or current course participant. We do not use your personal data for automated decision-making or profiling. We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

5. Data Retention

We retain personal data submitted via our contact forms for a period of up to 24 months from the date of your last contact with us, after which it is securely deleted. Technical log data is retained for up to 12 months. If you request deletion of your data before these periods expire, we will action your request within 30 days, subject to any legal obligation to retain the data.

6. Cookies and Tracking Technologies

This website uses cookies. You can manage your cookie preferences at any time using the "Cookie preferences" link in the bottom-left corner of every page. For full details of the cookies we use, please see our Cookie Policy.

7. Your Rights

Under GDPR and Polish data protection law, you have the following rights in relation to your personal data:

• Right of access (Article 15 GDPR): You may request a copy of the personal data we hold about you.
• Right to rectification (Article 16 GDPR): You may ask us to correct inaccurate data.
• Right to erasure (Article 17 GDPR): You may ask us to delete your personal data in certain circumstances.
• Right to restriction of processing (Article 18 GDPR): You may ask us to restrict processing in certain circumstances.
• Right to data portability (Article 20 GDPR): Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to object (Article 21 GDPR): You may object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, Poland, website: uodo.gov.pl.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures are reviewed regularly. However, no transmission over the internet can be guaranteed to be completely secure, and we cannot warrant the absolute security of data transmitted to us electronically.

9. International Transfers

We process personal data within the European Economic Area (EEA). If we ever use service providers outside the EEA, we ensure appropriate safeguards are in place as required by Chapter V GDPR, such as Standard Contractual Clauses approved by the European Commission.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of this website after changes are posted constitutes your acknowledgement of the updated policy. For material changes, we will take reasonable steps to notify you.

11. Contact

If you have questions about this Privacy Policy or about how we handle your personal data, please contact us at: NuYoga Juzuga, Orla 5, Elbląg, Poland. Email: [email protected]. Phone: +48 552 353 186.