Privacy Policy of Naya Yoga Club

​

§1 General Provisions

1. This Privacy Policy describes the rules for processing the personal data of users (“Users”) of the website www.nayayogaclub.pl (the “Site”).

2. The data controller is Naya Yoga Club Sp. z o.o., with its registered office at ul. Śniadeckich 18, 85-011 Bydgoszcz, Poland, NIP: 9671486218, e-mail: hello@nayayogaclub.pl (the “Controller”).

3. Personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”).

​​

§2 Scope of Collected Data
The Controller may process the following categories of personal data:

• First and last name

• E-mail address

• Telephone number

• Residential address (where required for invoicing)

• Payment details (transmitted directly to the Przelewy24 operator; not stored by the Controller)

• Information on class attendance and purchased services

​​

§ 3 Purposes of Processing
Personal data are processed for the following purposes:

1. Fulfilling orders and providing services (e.g., sale of class passes, class registration)

2. Communicating with Users on organizational or technical matters

3. Sending marketing information, subject to the User’s consent (newsletter)

4. Issuing invoices and other accounting documents

5. Establishing, pursuing, or defending legal claims

​​

§ 4 Legal Basis for Processing

1. Processing is based on one or more of the following legal grounds:

   • Art. 6 (1)(b) GDPR – performance of a contract (e.g., purchase of a pass)

   • Art. 6 (1)(c) GDPR – legal obligation (e.g., tax laws)

   • Art. 6 (1)(a) GDPR – consent (e.g., newsletter subscription)

   • Art. 6 (1)(f) GDPR – legitimate interests of the Controller (e.g., statistical analysis, defense against claims)

​​

§ 5 Recipients of Data

1. Personal data may be disclosed to:

   • Payment service providers (Przelewy24 / PayPro SA)

   • IT service providers maintaining the Site and booking system

   • Accounting firms

   • Public authorities, where required by law

2. Data are not transferred outside the European Economic Area (EEA), except when a User independently uses services located outside the EEA (e.g., Google or Meta e-mail accounts).

​​

§ 6 Data Retention Period
Personal data are retained:

• For the duration necessary to perform the contract and fulfill accounting obligations (at least 5 years)

• Until withdrawal of consent (for data processed on consent)

• Until expiration of any civil-law claims

​​

§ 7 User Rights
Users have the right to:

• Access their data

• Rectify inaccurate data

• Erase data (“right to be forgotten”)

• Restrict processing

• Data portability

• Object to processing

• Withdraw consent at any time (without affecting processing prior to withdrawal)

• Lodge a complaint with the President of the Polish Data Protection Authority (ul. Stawki 2, 00-193 Warsaw)

​​

§ 8 Cookies
The Site uses cookies to ensure proper functionality, analyze traffic, and tailor content. Cookies may be:

• Session (temporary)

• Persistent (stored until deleted)
  Users may manage or block cookies via their browser settings.

​​

§ 9 Data Security
The Controller implements appropriate technical and organizational measures to secure personal data, including SSL encryption, access controls, and regular backups.

​

§ 10 Final Provisions

1. This Privacy Policy may be updated; the current version is always available on the Site.

2. For questions or requests regarding personal data, please contact: kontakt@nayayogaclub.pl.