Privacy policy

This Privacy Policy sets out the principles for collecting, processing, and storing personal data necessary to provide services electronically via the website www.flowdk.pl (referred to as the “Website”).
The administrator of personal data is Flow Daria Kubisztal, NIP: 9671492555,  e-mail: studio@flowdk.pl (referred to as the: „Administrator”).
Personal data are processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
Data collected by the Administrator will be:

processed in accordance with applicable law,
processed for clearly defined purposes and not subject to further processing incompatible with those purposes,
substantively accurate and adequate in relation to the purposes for which they are processed,
stored no longer than necessary to achieve the purpose of processing.

§2 Scope of collected data

The Administrator processes personal data necessary for the provision and development of services available through the Website and its individual features.
The Administrator may process the following personal data of the Users:

name and surname,
e-mail address,
phone number,
residental address (if required for the invoice),
payment details (submitted directly to the payment providor, they are not stored by the Administrator),
information regarding participation in classes and purchased services.

§3 Purpose of data processing
Personal data are processed for the following purposes:

fulfilment of orders and provision of services (Article 6(1)(b) of the GDPR),
contacting the User in organisational or technical manners  (Article 6(1)(f) of the GDPR),
sending marketing information with the User’s consent – newsletter/SMS (Article 6(1)(a) of the GDPR),
issuing invoices and accounting documents (Article 6(1)(c) of the GDPR),
possible settlement, pursuit of claims or defence against them on the basis of the Administrator’s legitimate interest in protecting its rights (Article 6(1)(f) of the GDPR)

§4 Recipients of data

Data may be transferred to the following categories of recipients:

internet payment service providers,
subcontractors, in particular entities providing and operating selected IT systems and solutions,
accounting offices,
courier and postal service providers,
public authorities, if required by law.

2. Personal data are not transferred outside the European Economic Area (EEA) or international organisations.

§5 Period of data retention
Personal data are stored:

for the period necessary to perform the contrcat and accounting obligations, investigate or defend against possible claims (for a period of 5 years),
on the basis of consent until such consent is withdrawn, with the exception that the withdrawal of consent does not affect the lawfulness of data processing carried out prior to such withdrawal.

§6 User rights
1. The User has the right to:

access their personal data,
rectify data,
delete data,
restrict processing,
transfer data,
object to processing based on the legally justified interest of the Administrator,
withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal,
submit a complaint to the President of the Personal Data Protection Office (ul. Stanisława Moniuszki 1A, 00-014 Warszawa).

2. The data processing does not involve automated decision-making, including profiling.

§7 Cookies
The Website uses cookies to ensure proper performance, analyse traffic and customise content. Cookies may be temporary (session cookies) or permanent. Users can manage cookies through their web browser settings.

§8 Data protection
The Administartor uses appropriate technical and organisational measures to ensure the security of personal data, including SSL encryption, access control and regular backups.

§9 Final provisions
The privacy policy may be updated. The lates version is always available on the Website.

If you have any questions regarding personal data, please contact: studio@flowdk.pl

PRIVACY POLICY