Back to homepage

    Privacy Policy

    I. General Provisions

    This Privacy Policy sets out the rules for the processing of personal data by INNER LEAD Kajetan Młynarczyk (the 'Controller').

    The policy applies to:

    • users of the websites
      • kajetanmlynarczyk.pl
      • leadersretreat.pl
    • clients of coaching and consulting services
    • participants of workshops and retreats

    The Controller takes special care to protect personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

    II. Data Controller

    The controller of personal data is:

    INNER LEAD Kajetan Młynarczyk
    Address: Złota 75A/7; 00-819 Warsaw, Poland
    Email: kontakt@kajetanmlynarczyk.pl

    III. Scope, Purposes, and Legal Basis for Data Processing

    1. Contact (form, email, LinkedIn)

    Scope of data:

    • full name
    • email address
    • phone number
    • company
    • position
    • invoicing details
    • message content

    Purpose:

    • to respond to an inquiry
    • to contact you regarding services
    • to collect data for invoicing

    Legal basis: Art. 6(1)(f) of the GDPR (legitimate interest of the Controller)

    Storage period: up to 6 months after the contact has ended

    2. Service Provision (coaching / consulting)

    Scope: full name, contact details, data necessary for the provision of services

    Purpose: performance of a contract

    Legal basis: Art. 6(1)(b) of the GDPR

    Period: for the duration of the cooperation and until the statute of limitations for claims expires

    3. Workshops and Retreats

    Scope: full name, contact details, organizational data (e.g., information needed to carry out the event)

    Purpose: organization and execution of events

    Legal basis: Art. 6(1)(b) of the GDPR

    For online events: technical data (e.g., login, IP address).

    4. Image (photos and recordings)

    Photos or recordings may be taken during selected events.

    Image data is processed solely on the basis of: the participant's voluntary consent (Art. 6(1)(a) of the GDPR).

    Consent is collected separately and can be withdrawn at any time.

    5. Payments (Stripe)

    In the case of online payments, data is transferred to the payment operator: Stripe, Inc.

    Payment data is processed by Stripe as a separate controller in accordance with its privacy policy.

    Legal basis: Art. 6(1)(b) of the GDPR

    6. Legal Obligations

    Data may be processed for the purpose of:

    • issuing invoices
    • maintaining accounting records

    Legal basis: Art. 6(1)(c) of the GDPR

    Period: in accordance with legal regulations (usually 5–6 years)

    7. Newsletter

    Scope: email address

    Purpose: sending information about services and events

    Legal basis: Art. 6(1)(a) of the GDPR (consent)

    Every user will have the option to unsubscribe at any time.

    8. Social Media

    The Controller processes the data of individuals who follow social media profiles (e.g., LinkedIn) for communication and service promotion purposes.

    Legal basis: Art. 6(1)(f) of the GDPR

    IV. Data Recipients

    Data may be transferred to:

    • IT service providers (hosting, email)
    • online meeting tools (e.g., Google Meets, Zoom, Teams)
    • payment operator (Stripe)
    • accounting office
    • entities supporting the organization of events

    V. Data Transfers Outside the EEA

    Some tools (e.g., Stripe, Google, Zoom) may process data outside the European Economic Area.

    Processing is carried out in accordance with appropriate legal safeguards (e.g., standard contractual clauses).

    VI. Rights of the Data Subject

    You have the right to:

    • access your data
    • rectify your data
    • erase your data
    • restrict processing
    • object to processing
    • data portability
    • withdraw consent

    To exercise your rights, please contact: kontakt@kajetanmlynarczyk.pl

    VII. Complaint to a Supervisory Authority

    You have the right to lodge a complaint with:

    the President of the Personal Data Protection Office
    ul. Stawki 2, 00-193 Warsaw, Poland

    VIII. Policy Changes

    The policy may be updated. The current version is available on the website.