Privacy Policy

This Privacy Policy describes the policies and procedures of UCZNIOWSKI KLUB SPORTOWY COS "OLIMP" ("Nourish Motion", "we", "us", or "our") regarding the collection, use, retention, and disclosure of personal data when you visit our website or interact with our services, in strict compliance with Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR) and Polish data protection legislation.

1. Categories of Personal Data We Collect

We may collect and process the following categories of data:

• Directly Provided Information: When you submit a request for an educational movement plan or send an inquiry via our contact forms, we collect your name, email address, and message content.
• Technical & Log Data: When you browse our site, our servers automatically record standard internet protocol information, including IP address, browser type and version, referring URL, time and date of visits, and pages viewed.
• Cookies & Device Identifiers: Small files stored on your device that facilitate user session handling, page rendering, and anonymous performance analytics.

2. Legal Bases for Data Processing (GDPR Article 6)

We process your personal information under the following legal bases:

• Consent (Art. 6(1)(a) GDPR): When you voluntarily submit your contact details to receive our movement plan or subscribe to wellness updates.
• Legitimate Interests (Art. 6(1)(f) GDPR): To monitor system security, prevent fraudulent activity, improve site performance, and ensure smooth technical functionality.
• Legal Obligation (Art. 6(1)(c) GDPR): When compliance with statutory Polish administrative or tax regulations requires data retention.

3. Purpose of Processing

The collected information is used strictly to:

• Provide, operate, and maintain our educational web resources;
• Respond to inquiries, questions, and plan requests;
• Detect, prevent, and address technical faults or security vulnerabilities;
• Comply with applicable legal obligations.

4. Data Retention Period

We retain personal data only for the duration necessary to fulfill the purposes for which it was gathered:

• Contact inquiry records: Retained for up to 12 months following resolution of your request.
• Server technical logs: Retained for security and operational diagnostics for up to 90 days.

5. Your Rights as a Data Subject under GDPR

Under Chapter III of the GDPR, you enjoy the following enforceable rights:

• Right of Access (Art. 15 GDPR): The right to obtain confirmation as to whether your personal data is being processed and receive a copy thereof.
• Right to Rectification (Art. 16 GDPR): The right to demand correction of inaccurate or incomplete data.
• Right to Erasure (Art. 17 GDPR): The right to request deletion of your personal data ("Right to be forgotten") under qualifying circumstances.
• Right to Restriction (Art. 18 GDPR): The right to request restriction of data processing.
• Right to Data Portability (Art. 20 GDPR): The right to receive your personal data in a structured, commonly used format.
• Right to Object (Art. 21 GDPR): The right to object at any time to processing based on legitimate interests.
• Right to Lodge a Complaint: You have the right to lodge a formal complaint with the competent supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, Poland (uodo.gov.pl).

6. Data Transfers & Third-Party Services

We do not sell, rent, or lease your personal information to commercial third parties. Data is hosted within the European Economic Area (EEA). Any service providers assisting with technical hosting are bound by strict Data Processing Agreements (DPA) complying with EU privacy mandates.

7. Contact the Privacy Controller

To exercise any of your statutory rights or submit questions concerning this Privacy Policy, please contact our data controller at [email protected] or send mail to: ul. Szkolna 9, 43-370 Szczyrk, Polska.