Privacy Policy
Draft content — pending approval from the legal content owner
The text below is a document skeleton prepared for legal review and does not constitute final, approved content. Draft version dated 2 August 2026.
1. Data controller
The data controller is Nirmala Institute of Yoga and Ayurveda, Cichy Kącik 1/2, 55-002 Kamieniec Wrocławski, email: kontakt@nirmala.pl. [Business registration number — to be completed.]
2. What data we process
In connection with using the site, we may process data submitted via the contact or enquiry form: full name, email address, optionally a phone number, message content, and the selected course. Once the consent banner is implemented, we will also process pseudonymized Google Analytics 4 data — only with your consent.
3. Purpose and legal basis for processing
We process form data to respond to your enquiry and to send an automatic confirmation, based on consent (Article 6(1)(a) GDPR) and the controller's legitimate interest (Article 6(1)(f) GDPR) in handling correspondence.
4. Data retention period
The retention period for contact enquiries has not yet been established. [To be completed once decided — see the open "data-retention period" item in phase_1_plan.md.]
5. Recipients of data
Enquiry data may be shared with: Google Sheets (enquiry storage), a transactional email provider [provider to be selected], and the site's hosting provider (Vercel). This list will be updated once the final services are chosen.
6. Your rights
You have the right to access your data, rectify it, erase it, restrict its processing, port it, and object to its processing, as well as the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).
7. Cookies
Details about cookies and similar technologies can be found in our Cookie Policy.
8. Contact
For questions related to personal data protection, you can contact us at kontakt@nirmala.pl.