Privacy Policy

Last updated: 21 May 2026

This Privacy Policy describes how personal data is collected, used, and protected on this website (kobierska.com). It applies to all visitors and contacts of Natalia Kobierska (sole proprietorship, Poland).

1. Data Controller

Natalia Kobierska
ul. Sportowa 11a, 05-806 Komorów, Poland
NIP: 5342669306
Email: nk.kobierska@gmail.com

2. What data is collected

This website does not use cookies, analytics, or tracking technologies. No personal data is collected automatically when you browse the site.

Personal data is only processed when you actively contact me:

• Email contact: name, email address, and the content of your message
• LinkedIn contact: information you share through the LinkedIn platform (governed by LinkedIn's own privacy policy)

3. Purpose and legal basis of processing

Personal data is processed for the following purposes:

• To respond to your inquiry - legitimate interest (Art. 6(1)(f) GDPR) or, where applicable, performance of a contract (Art. 6(1)(b) GDPR)
• To deliver agreed services (for clients) - performance of a contract (Art. 6(1)(b) GDPR)
• To comply with legal obligations (e.g. tax records for accepted contracts) - legal obligation (Art. 6(1)(c) GDPR)

4. Data retention

• Inquiry emails that do not result in a contract: up to 12 months from last contact
• Client contracts and related correspondence: as required by Polish tax and commercial law (typically 5 years from end of fiscal year)
• Marketing-related contacts (e.g. coaching leads): until you withdraw consent or object

5. Data sharing

Personal data is not sold, rented, or shared with third parties for marketing purposes.

Data may be shared with the following categories of recipients, only when necessary:

• Email service providers (Google Workspace / Gmail) - for receiving and storing correspondence
• Accounting service providers - for tax and bookkeeping obligations
• Hosting provider (Vercel Inc.) - for serving this website (no personal data is stored on the server beyond standard request logs maintained by the hosting provider)
• Public authorities - only when required by law

6. International transfers

Some service providers (e.g. Vercel, Google) may process data outside the European Economic Area. Such transfers are based on adequacy decisions or standard contractual clauses approved by the European Commission.

7. Your rights under GDPR

You have the right to:

• Access your personal data (Art. 15 GDPR)
• Request correction of inaccurate data (Art. 16 GDPR)
• Request erasure of your data (Art. 17 GDPR)
• Restrict processing of your data (Art. 18 GDPR)
• Receive your data in a portable format (Art. 20 GDPR)
• Object to processing based on legitimate interest (Art. 21 GDPR)
• Withdraw consent at any time, where processing is based on consent (Art. 7 GDPR)
• Lodge a complaint with the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl)

To exercise any of these rights, contact: nk.kobierska@gmail.com.

8. Cookies

This website does not use cookies of any kind (neither functional, analytical, nor marketing). No consent is required.

9. Security

The website is served over HTTPS. Email communication is handled through Google Workspace infrastructure, which applies industry-standard encryption at rest and in transit.

10. Changes to this policy

This Privacy Policy may be updated to reflect changes in legal requirements or business practices. The "Last updated" date at the top of the page indicates the most recent revision.

11. Contact

For privacy-related questions or requests, contact: nk.kobierska@gmail.com.