Skip to main content

Privacy Policy

Last updated: 26 August 2026

Who is responsible for your data

The controller of your personal data is Alina Symonenko, running a sole proprietorship (jednoosobowa działalność gospodarcza) registered in CEIDG in Poland.

  • Business address: ul. Kolejowa 43/11, lok. 1 m. 6, 01-217 Warszawa, Poland
  • NIP: 5253062927
  • REGON: 542839792
  • Email: mail@alinasymonenko.pl
  • Phone / WhatsApp / Telegram: +48 537 423 268

If you have any question about how your data is handled, write to me at the email above. I answer these personally.

What data I collect, and why

When you contact me through WhatsApp, Telegram, phone or email, I receive your name or profile name, your phone number or email address, and whatever you choose to tell me in the message. I use this to answer you, advise which course suits you, and agree the details of your training.

When you book a place on a course, I collect your name, email address, phone number, the course chosen and the date. I need this to reserve your place, confirm arrangements and deliver the training.

When I issue an invoice or receipt, I process the billing details required by Polish tax law, which may include your name, address and — for business clients — your company name and tax identification number.

When you simply visit the website, my hosting provider records standard technical information in server logs: IP address, browser type, the pages requested and the time of the request. This is used to keep the site running and secure.

When you consent to analytics cookies, statistical information about your visit is collected — which pages you viewed, how you reached the site, approximate location at city level, and device type. This is never used to identify you personally.

I do not collect health data, and I do not ask for any information beyond what is described above.

Legal grounds for processing

I rely on the following grounds under the GDPR (Regulation (EU) 2016/679):

  • Article 6(1)(b) — taking steps at your request before entering into a contract, and performing the training contract itself. This covers enquiries, bookings and delivery of courses.
  • Article 6(1)(c) — compliance with legal obligations, in particular Polish accounting and tax law, which requires me to keep records of transactions.
  • Article 6(1)(f) — my legitimate interests: keeping the website secure and operational, and defending or pursuing claims should that ever become necessary.
  • Article 6(1)(a) — your consent, which is the basis for analytics cookies and for any marketing messages you may choose to receive. You can withdraw consent at any time, and doing so does not affect processing carried out before withdrawal.

Who else sees your data

Your data is shared only with parties who need it in order for me to run this business:

  • My hosting provider, which stores the website and its database.
  • The messaging services you choose to use. If you write to me on WhatsApp, your message is processed by Meta Platforms; on Telegram, by Telegram Messenger. Their own privacy policies govern that processing, and I have no control over it. If you prefer not to use them, email works just as well.
  • Google, if you have consented to analytics cookies, as the provider of Google Analytics.
  • My accountant and the tax authorities, in relation to invoices and accounting records.

I do not sell your data, and I do not share it with anyone for their own marketing purposes.

Transfers outside the European Economic Area

Some of the services above are operated by companies based in the United States. Where data is transferred outside the EEA, it is done on the basis of the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework, which are the legal mechanisms intended to secure a comparable level of protection.

How long I keep it

  • Enquiries that do not lead to a booking: up to 12 months from our last exchange, in case you come back to the conversation.
  • Booking and course records: for the duration of our arrangement and then for as long as claims could still be raised under Polish law.
  • Accounting and tax documents: 5 years from the end of the tax year in which the transaction took place, as required by Polish law.
  • Server logs: for the retention period applied by my hosting provider.
  • Analytics data: for the retention period configured in Google Analytics.

Your rights

Under the GDPR you have the right to:

  • access your data and receive a copy of it;
  • rectify it if it is inaccurate or incomplete;
  • erase it, where there is no overriding legal reason for me to keep it;
  • restrict processing in certain circumstances;
  • data portability — receive your data in a machine-readable format;
  • object to processing based on my legitimate interests;
  • withdraw consent at any time, where consent is the basis for processing.

To exercise any of these, write to mail@alinasymonenko.pl. I will respond within one month.

You also have the right to lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa.

Is providing data required?

Providing your data is voluntary, but without it I cannot answer your enquiry, reserve a place for you, or issue the documents that a paid service requires. For invoices, providing billing details is a legal requirement rather than a choice.

Automated decision-making

Your data is not used for automated decision-making or profiling that produces legal effects for you.

Cookies

The website uses cookies. On your first visit a consent banner asks which categories you allow; nothing beyond the cookies strictly needed to run the site is set until you agree. Full details of which cookies are used, what they do and how to change your choices at any time are set out in the Cookie Policy.

Changes to this policy

If this policy changes, the updated version will be published on this page with a new date at the top.