Skip to content
Natalia Pacierpnik Sport & Mind

Privacy and cookies policy

Version dated 20 September 2026.

This policy explains how I process the personal data of people visiting nataliapacierpnik.com and contacting me about working together.

1. Controller and contact details

The controller is Natalia Pacierpnik, a sole trader operating as NATALIA PACIERPNIK SPORT & MIND, Polish tax identification number (NIP) 7681770322, REGON 545452266, ul. Czerwone Maki 59/32, 30-392 Kraków, Poland.

For privacy questions or to exercise your rights, email nataliapacierpnik@gmail.com, call +48 669 595 110, or write to the address above.

2. What data I process

  • From the contact form: your first name, email address, selected topic, message and form language.
  • From email, telephone or WhatsApp contact: contact details and information you provide in your conversation or message. Your profile information may also be visible in a messaging service.
  • From connections to the website: technical information, particularly your IP address, connection time, requested page address, browser and device information, and error information. This may appear in hosting logs.

The form sends your message to my email inbox. It does not create a separate submissions archive on the website. It does not ask for medical records or health information; please do not include these in an initial enquiry. If further cooperation requires other data, you will receive the relevant information before it is collected.

3. Purposes and legal bases

  • Providing the form service and handling an enquiry about working together: Article 6(1)(b) GDPR, where necessary to provide the form service or take steps at your request before entering into a contract.
  • Other correspondence and contact with someone representing an organisation: Article 6(1)(f) GDPR. My legitimate interest is answering enquiries and handling correspondence related to my business.
  • Website security, spam prevention and investigating technical problems: Article 6(1)(f) GDPR. The legitimate interest is protecting the website, correspondence and users against misuse.
  • Complaints: Article 6(1)(b) GDPR in connection with the form service and, insofar as required by law, Article 6(1)(c) GDPR.
  • Establishing, exercising or defending specific legal claims: Article 6(1)(f) GDPR, only where retaining particular data is justified for that purpose.

Providing data is voluntary. However, your first name, a valid email address, topic and message are needed to submit the form and receive a reply. You may choose another contact method. An enquiry does not subscribe you to a newsletter or marketing.

4. Who may receive data

I use the data to the extent needed to handle your enquiry. Authorised people assisting with correspondence or website maintenance may also have access where necessary, subject to confidentiality obligations.

  • Hostinger, the hosting provider: processes data needed to run the website on my behalf under its data processing terms.
  • Google, the Gmail operator: messages arrive at nataliapacierpnik@gmail.com. For consumer Gmail, Google acts as a separate controller under its privacy policy; this is not processing under Google Workspace terms.
  • Authorities or other entitled recipients: where disclosure is legally required or necessary to protect rights in a specific matter.

I do not sell personal data. Providers may use subcontractors under the arrangements described in their data protection documents.

5. Transfers outside the EEA

Using global providers may involve processing outside the European Economic Area, including in the USA. Google describes using adequacy decisions, including the EU–US Data Privacy Framework for Google LLC, and standard contractual clauses where required. Information and how to obtain copies of safeguards are available in Google's transfer framework.

Hostinger's terms provide for standard contractual clauses for transfers outside the EEA to countries without an adequacy decision, unless another lawful transfer basis applies. See section 9 of Hostinger's terms. You can also contact me for information about safeguards applicable to your data or a copy of them.

6. How long data is kept

  • Enquiries and correspondence: until a final response has been given and any agreed follow-up is completed. Once the matter is closed, I delete data that is no longer needed. If contact leads to a contract, data needed to perform it continues to be processed for that contract; you will receive information relating to that cooperation.
  • Complaints and claims: until the complaint is resolved, and afterwards only to the extent needed to document its outcome or protect against a specific, justified claim. The relevant limitation period determines retention, taking account of any interruption or suspension. If proceedings begin, retention may continue until their final conclusion and implementation of the outcome. I do not keep all correspondence indefinitely for hypothetical claims.
  • Technical data: routine logs are overwritten or deleted under the hosting provider's rotation cycle. An extract relating to a detected incident may be retained until the incident is investigated, its effects are addressed and, where justified, related claims are resolved.
  • Form spam protection: a temporary identifier and attempt counter remain valid for 10 minutes after the last counted attempt. Once expired, they no longer limit submissions and are subject to removal during technical data cleanup.
  • Backups: deleted data may remain in isolated backups until that backup is replaced under the provider's cycle. Backups are used for recovery after a failure, not for further correspondence or marketing. Previous erasure requests are taken into account after restoration.

The data retained after a matter is closed depends on its subject, actual legal obligations and the need to preserve evidence, rather than the mere ability to keep messages in an inbox.

7. Your rights

Subject to the GDPR, you may request access to your data and a copy of it, rectification, erasure or restriction of processing. You may object to processing based on legitimate interests on grounds relating to your particular situation. Data portability applies where its statutory conditions are met, including where data is processed by automated means on a contractual basis.

Send requests to nataliapacierpnik@gmail.com. If there are reasonable doubts about your identity, I may ask for information needed to confirm it. I will reply without undue delay, normally within one month. If an extension is permitted under the GDPR, I will tell you about it and explain the reason within that time.

You may complain to the President of the Polish Personal Data Protection Office; contact information is available at uodo.gov.pl. You may also contact the supervisory authority for your habitual residence, place of work or the place of the alleged infringement.

I do not make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

8. Cookies and similar technologies

The public website does not use analytics or advertising cookies, marketing pixels, or browser storage to track users. Its operation and animations do not require a visit identifier to be stored or consent to optional cookies.

Your browser may cache ordinary website files, such as images and fonts, to display the site more efficiently. You can clear this cache in your browser settings. Hosting logs and form safeguards operate on the server; they are not advertising cookies.

If tools requiring consent are introduced in future, you will receive information and a choice before they are activated. Continuing to browse will not be treated as consent.

9. WhatsApp and social media

Contact and social media buttons link to external services. When you follow them, you also use the relevant operator's service under its privacy rules. The website does not embed social plugins that track visits. Data you subsequently send me in a conversation is used to handle your contact as described above.

10. Updates

I update this policy when website features or data processing practices change. The version date appears at the beginning. The Contact form terms explain how to use the form.