Privacy policy

1. Data controller and contact

The controller of your personal data is Jan Tekieli, running a business under the name Jan Tekieli, Komuny Paryskiej 58A/43, 30-389 Kraków, Poland, VAT ID (NIP): 6762686594, REGON: 540822215. Training sessions take place at the studio at Zawiła 61A, 30-390 Kraków.

Contact for data protection matters: trener@tekieli.pl, phone +48 602 741 503, postal address as above.

No data protection officer has been appointed - I handle all such matters personally.

2. Where your data comes from

Data comes from two sources:

• from you - when you submit the contact form, call, write an e-mail or message me on social media,
• from your device - while you browse the site: IP address, browser and device information, pages visited (technical and statistical data).

The site does not buy data from third parties and does not obtain it from external databases.

3. Purposes, legal bases and retention periods

I process data for the following purposes:

• Handling your enquiry from the form or by phone (first name, phone number, optionally e-mail, training goal, message) - Art. 6(1)(b) GDPR, i.e. steps taken at your request prior to entering into a contract. If you write on behalf of a company, the basis is Art. 6(1)(f) GDPR (my legitimate interest in handling business correspondence). Correspondence is kept for up to 12 months from the last contact if no collaboration follows.
• Health information you provide on your own initiative in the message (e.g. a past injury) - Art. 9(2)(a) GDPR, i.e. your explicit consent given by sending that information. You do not need to provide it to book a consultation; it is deleted together with the correspondence.
• Performance of the training services contract if you decide to work with me (contact details, billing details, training arrangements) - Art. 6(1)(b) GDPR. Kept for the duration of the collaboration.
• Settlements, invoices and tax obligations - Art. 6(1)(c) GDPR. Accounting records are kept for 5 years from the end of the year in which the tax payment deadline fell.
• Handling complaints about the site and establishing, pursuing or defending claims - Art. 6(1)(c) and (f) GDPR. Kept until claims become time-barred.
• Visit statistics in Google Analytics 4 (cookie identifier, IP address processed by Google, pages visited, device type, approximate location, events such as sending the form or using a calculator) - Art. 6(1)(a) GDPR, i.e. your consent. Measurement starts only once consent is given in the cookie banner and lasts until it is withdrawn; data in Google Analytics is subject to the retention setting (a maximum of 14 months).
• Site security, prevention of abuse and spam (hosting provider logs, the form's honeypot mechanism) - Art. 6(1)(f) GDPR. Logs are kept by the hosting provider for its standard periods, usually no longer than a few weeks.
• Publishing a review, video or photo featuring you - Art. 6(1)(a) GDPR, i.e. your consent, covering the use of your image. Published until consent is withdrawn.

4. Do you have to provide data

Providing data is voluntary, but a first name and phone number are needed for me to call you back - without them I cannot handle a form enquiry. The remaining fields (e-mail, goal, message) are optional.

If a collaboration follows, providing invoicing data is a statutory tax requirement.

5. Calculators

The calorie calculator and the fat-loss pace calculator run entirely in your browser. The data you enter (sex, age, height, body weight, activity level) is neither sent to the server nor stored in the site.

Google Analytics - if you consent to analytics cookies - receives only the fact that a calculator was used (calculator name, chosen goal, pace, number of weeks). Your body weight, height and age are not sent there.

If, after calculating, you click the button leading to the contact form, the results (e.g. starting and target weight or estimated energy requirements) appear in the contact page address and are inserted into the message. By submitting the form you pass them to me together with your enquiry - you can edit or delete them beforehand.

6. Cookies and browser storage

The site uses cookies and local browser storage to the following extent:

• Essential: your cookie decision is saved in local browser storage (localStorage, key cookie-consent). It stays on your device until you clear your browser data and is never sent to the server.
• Analytics: Google Analytics cookies (_ga and _ga_*) with a lifetime of up to 2 years. They are created only after you click the consent button in the cookie banner.
• Third party, on the contact page: the studio map is loaded from Google's servers (Google Maps). Opening the contact page establishes a connection to Google, which then receives your IP address and may set its own cookies. Google's processing is governed by Google's privacy policy.

The site stores no marketing cookies, uses no advertising pixels and does not profile you for advertising purposes.

You can withdraw consent to analytics cookies at any time - using the button at the bottom of this page or the "Cookie settings" link in the footer. Withdrawal deletes the _ga files and stops measurement. You can also delete and block cookies in your browser settings.

7. Data recipients

Data may be processed by the providers I use to run the site and my business:

• Cloudflare, Inc. - site hosting, content delivery network and abuse protection,
• Resend, Inc. - delivering messages sent from the contact form to my mailbox,
• Google Ireland Limited and Google LLC - visit statistics (Google Analytics 4) and the studio map (Google Maps),
• the e-mail provider where I keep correspondence,
• an accounting office and invoicing software provider - if a collaboration and settlements follow,
• entities authorised to obtain data under the law.

Providers process data on my instructions under data processing agreements. I do not sell data and do not share it for third-party marketing.

8. Transfers outside the EEA

Some providers (Cloudflare, Resend, Google) are based in the United States or use infrastructure outside the European Economic Area. In such cases transfers rely on the European Commission's adequacy decision (Data Privacy Framework) or on standard contractual clauses approved by the European Commission, together with additional technical safeguards such as transport encryption.

A copy of the standard contractual clauses, or information about the mechanism applied, is available on request sent to trener@tekieli.pl.

9. Your rights

In connection with the processing of your data you have the right to:

• access your data and receive a copy of it,
• rectify inaccurate or incomplete data,
• erase your data,
• restrict processing,
• data portability, for data processed on the basis of consent or a contract,
• object to processing based on my legitimate interest,
• withdraw consent at any time - without affecting the lawfulness of processing carried out before the withdrawal.

Simply send your request to trener@tekieli.pl. I respond without undue delay and within one month of receiving it at the latest.

You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw (uodo.gov.pl).

10. Automated decisions and profiling

I do not take decisions about you based solely on automated processing that would produce legal effects or similarly significantly affect you. Google Analytics produces only aggregate traffic statistics that I use to improve the content - they are not used to assess individuals.

11. Data security

The site runs over HTTPS only, and the contact form sends data over an encrypted connection. Access to the mailbox holding correspondence and to the tooling I run the site with is password-protected. Individually shared materials (e.g. reports) are password-protected and excluded from search engine indexing.

Only I have access to the data, along with the service providers listed above, to the extent necessary.

12. Children

The site is not addressed to people under 16 and I do not knowingly collect their data. An enquiry concerning a minor is to be sent by their parent or legal guardian.

13. Changes to this policy

I update this policy whenever the scope of data, the purposes of processing or the tools used by the site change. The current version, with the date it applies from, is always available at this address; earlier versions are available on request.