Privacy Policy

Effective from: 26 October 2026

This page explains what data we collect on pilates-pszczyna.pl, why and for how long we keep it, and what rights you have. We have tried to collect as little as possible: the website does not use cookies or any tools that track visitors.

1. Data controller

The controller of your personal data is Aneta Pecka, running a business under the name ANETA PECKA ANETA-PILATES, ul. ks. bp. Bogedaina 2, 43-200 Pszczyna, Poland, tax ID (NIP) 6381479898, REGON 380546523.

For any matters concerning your personal data, you can contact us:

• by email: see the Contact section on the home page,
• by phone: +48 661 720 546,
• by post: ul. ks. bp. Bogedaina 2, 43-200 Pszczyna, Poland.

2. Contact form

When you send a message through the contact form, we process the data you provide: your name, email address and the content of your message.

• Purpose: to reply to your message and continue the correspondence on that matter, e.g. signing up for classes.
• Legal basis: our legitimate interest in being able to answer questions sent to us (Art. 6(1)(f) GDPR) and, when you ask about classes, steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• Retention: for as long as needed to deal with your enquiry and then for no longer than 12 months, unless you become our client – in that case, in line with the rules that apply to clients.

Providing your data is voluntary, but without your name and email address we will not be able to reply.

Please do not include detailed information about your health in the form. If you would like to discuss any health issues before classes, we will do so in person or by phone.

3. Spam protection

To protect the form against automated spam, for 10 minutes after you send a message we store an encrypted digest (a so-called hash) of your IP address – not the address itself. It is used only to limit the number of messages sent from one place and is then deleted automatically. The legal basis is our legitimate interest in keeping the website secure (Art. 6(1)(f) GDPR).

4. Server logs

Like every website, the server the site runs on automatically records basic technical information about visits: IP address, date and time, the address of the page opened and the browser type. This information is used only to keep the website secure and working properly (Art. 6(1)(f) GDPR). The logs are kept by the hosting provider (see section 7) for a period it sets – no longer than necessary to keep the website secure and to investigate any misuse. The person who maintains the website also has access to them, for technical purposes only. We do not use them to identify visitors or for statistics.

5. Cookies

The website does not use cookies or any analytics or advertising tools (such as Google Analytics or the Facebook pixel). Fonts, scripts and videos are loaded from our own server, not from third-party servers. That is why we do not ask for cookie consent.

6. Links to other websites

The website contains links to our Facebook and Instagram profiles and to Google Maps. These services open only when you click a link, and from then on their own privacy policies apply – we have no influence over the data they collect.

7. Who we share data with

Data may be processed only to the extent needed for the website and email to work, by:

• the person who maintains the website – a private individual who, at our request and free of charge, provides technical support for the website and the email account and makes their hosting account available for this purpose. They have access to data only to the extent necessary to maintain the website and do not use it for any other purpose;
• the hosting and email provider: Prociv Sp. z o.o. (VH.pl), ul. Czerniawska 2A/27, 50-576 Wrocław, Poland.

We do not sell data, we do not transfer it outside the European Economic Area, and we do not make automated decisions or carry out profiling based on it.

8. Your rights

You have the right to:

• access your data and receive a copy of it,
• have your data rectified (corrected),
• have your data erased,
• restrict processing,
• object to processing based on our legitimate interest,
• data portability – to the extent we process your data in connection with a contract.

To exercise these rights, write to us or call us (contact details in section 1). You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl), if you believe we are processing your data unlawfully.

9. Changes to this policy

If we change the way we process data (e.g. by adding a new feature to the website), we will update this policy and the date at the top of the page.

This is a translation. In case of any discrepancy, the Polish version prevails.