Privacy policy

1. Data controller and contact

The controller of your personal data is Jan Tekieli, running a business under the name Jan Tekieli, Komuny Paryskiej 58A/43, 30-389 Kraków, Poland, VAT ID (NIP): 6762686594, REGON: 540822215. Training sessions take place at the studio at Zawiła 61A, 30-390 Kraków.

Contact for data protection matters: trener@tekieli.pl, phone +48 602 741 503, postal address as above.

No data protection officer has been appointed - I handle all such matters personally.

2. Where your data comes from

Data comes from three sources:

• from you - when you submit the contact form, call, write an e-mail or message me on social media,
• from your device - while you browse the site: IP address, browser and device information, pages visited (technical and statistical data),
• from Google - if you leave a review of my services on Google, I may show it on the site: your first name with the initial of your surname, the rating and text of the review and a link to it.

The site does not buy data from third parties and does not obtain it from any other external databases.

3. Purposes, legal bases and retention periods

I process data for the following purposes:

• Handling your enquiry from the form or by phone (first name, phone number, optionally e-mail, training goal, message) - Art. 6(1)(b) GDPR, i.e. steps taken at your request prior to entering into a contract. If you write on behalf of a company, the basis is Art. 6(1)(f) GDPR (my legitimate interest in handling business correspondence). Correspondence is kept for up to 12 months from the last contact if no collaboration follows.
• Establishing where enquiries come from (source and campaign from the page address, referring domain, first page visited, the button clicked) - Art. 6(1)(f) GDPR, i.e. my legitimate interest in assessing which promotional activities bring enquiries. This information is included in the form message and in an enquiry counter that contains no name, phone number, e-mail or message text. It is stored on your device for the duration of the visit (session browser storage) only with your consent to analytics cookies.
• Performance of the training services contract if you decide to work with me (contact details, billing details, training arrangements) - Art. 6(1)(b) GDPR. Kept for the duration of the collaboration.
• Settlements, invoices and tax obligations - Art. 6(1)(c) GDPR. Accounting records are kept for 5 years from the end of the year in which the tax payment deadline fell.
• Handling complaints about the site and establishing, pursuing or defending claims - Art. 6(1)(c) and (f) GDPR. Kept until claims become time-barred.
• Visit statistics in Google Analytics 4 (cookie identifier, IP address processed by Google, pages visited, device type, approximate location, events such as sending the form or using a calculator) - Art. 6(1)(a) GDPR, i.e. your consent. Measurement starts only once consent is given in the cookie banner and lasts until it is withdrawn; data in Google Analytics is subject to the retention setting (a maximum of 14 months).
• Site security, prevention of abuse and spam (hosting provider logs, the form's honeypot mechanism) - Art. 6(1)(f) GDPR. Logs are kept by the hosting provider for its standard periods, usually no longer than a few weeks.
• Publishing on the site a review of me that you left on Google (first name with the initial of your surname, rating, text, link to the review) - Art. 6(1)(f) GDPR, i.e. my legitimate interest in fairly presenting client reviews. The review is removed from the site if you object or delete it on Google.
• Publishing a review you sent me directly, or a video or photo featuring you - Art. 6(1)(a) GDPR, i.e. your consent, covering the use of your image. Published until consent is withdrawn.

4. Do you have to provide data

Providing data is voluntary, but a first name and phone number are needed for me to call you back - without them I cannot handle a form enquiry. The remaining fields (e-mail, goal, message) are optional.

If a collaboration follows, providing invoicing data is a statutory tax requirement.

Please send through the form only the data needed to handle your enquiry. I do not expect health information or other special categories of data (Art. 9(1) GDPR), or data on criminal convictions and offences (Art. 10 GDPR) - a first name and phone number are enough to book a consultation. If you provide such data on your own initiative, I process it only to the extent and on the terms permitted by law and delete it together with the correspondence.

5. Calculators

The calorie calculator and the fat-loss pace calculator run entirely in your browser. The data you enter (sex, age, height, body weight, activity level) is neither sent to the server nor stored in the site.

Google Analytics - if you consent to analytics cookies - receives only the fact that a calculator was used (calculator name, chosen goal, pace, number of weeks). Your body weight, height and age are not sent there.

If, after calculating, you click the button leading to the contact form, the results (e.g. starting and target weight or estimated energy requirements) appear in the contact page address and are inserted into the message. By submitting the form you pass them to me together with your enquiry - you can edit or delete them beforehand.

6. Cookies and browser storage

The site uses cookies and browser storage in three groups:

• Essential, used without consent: remembering your cookie decision, remembering that the form reminder was closed, bot protection (Cloudflare) and signing in to the closed reports panel.
• Analytics, only with consent: Google Analytics cookies (_ga and _ga_*) with a lifetime of up to 2 years, and remembering for the duration of the visit how the site was reached.
• Third-party content, only with consent: the studio map from Google Maps on the contact page. Only after consent does your browser connect to Google, which then receives your IP address and may set its own cookies. Without consent you see a tile linking to the studio's Google profile.

The site stores no marketing cookies, uses no advertising pixels and does not profile you for advertising purposes.

You can withdraw consent at any time - using the button at the bottom of this page or the "Cookie settings" link in the footer. Withdrawal deletes the _ga files and the stored visit context and stops measurement. The full list of cookies with retention periods is in the Cookie policy at trener.tekieli.pl/en/cookie-policy.

7. Data recipients

Data may be processed by the providers I use to run the site and my business:

• Cloudflare, Inc. - site hosting, content delivery network and abuse protection,
• Resend, Inc. - delivering messages sent from the contact form to my mailbox,
• Google Ireland Limited and Google LLC - visit statistics (Google Analytics 4), as a processor acting on my instructions,
• the e-mail provider where I keep correspondence,
• an accounting office and invoicing software provider - if a collaboration and settlements follow,
• entities authorised to obtain data under the law.

The providers listed process data on my instructions under data processing agreements. The studio map (Google Maps) and reviews on Google are different: here Google acts as a separate controller, on the terms of Google's privacy policy (policies.google.com/privacy). I do not sell data and do not share it for third-party marketing.

8. Transfers outside the EEA

Some providers (Cloudflare, Resend, Google) are based in the United States or use infrastructure outside the European Economic Area. In such cases transfers rely on the European Commission's adequacy decision (Data Privacy Framework) or on standard contractual clauses approved by the European Commission, together with additional technical safeguards such as transport encryption.

A copy of the standard contractual clauses, or information about the mechanism applied, is available on request sent to trener@tekieli.pl.

9. Your rights

In connection with the processing of your data you have the right to:

• access your data and receive a copy of it,
• rectify inaccurate or incomplete data,
• erase your data,
• restrict processing,
• data portability, for data processed on the basis of consent or a contract,
• object to processing based on my legitimate interest, including the publication of your Google review on the site,
• withdraw consent at any time - without affecting the lawfulness of processing carried out before the withdrawal.

Simply send your request to trener@tekieli.pl. I respond without undue delay and within one month of receiving it at the latest.

You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw (uodo.gov.pl).

10. Automated decisions and profiling

I do not take decisions about you based solely on automated processing that would produce legal effects or similarly significantly affect you. Google Analytics produces only aggregate traffic statistics that I use to improve the content - they are not used to assess individuals.

11. Data security

The site runs over HTTPS only, and the contact form sends data over an encrypted connection. Access to the mailbox holding correspondence and to the tooling I run the site with is password-protected. Individually shared materials (e.g. reports) are password-protected and excluded from search engine indexing.

Only I have access to the data, along with the service providers listed above, to the extent necessary.

12. Children

The site is not addressed to people under 16 and I do not knowingly collect their data. An enquiry concerning a minor is to be sent by their parent or legal guardian.

13. Changes to this policy

I update this policy whenever the scope of data, the purposes of processing or the tools used by the site change. The current version, with the date it applies from, is always available at this address; earlier versions are available on request.