Privacy Policy

This Privacy Policy sets out the rules for the processing and protection of personal data of Users who visit the website and register for the online course “Achieve Performance Mindset – Mental Preparation for Musicians.”

1. Data Controller

The controller of personal data is Joanna Latała (hereinafter referred to as the “Controller”).

The Controller may be contacted via the email address provided on the website.

2. Scope of Collected Data

The Controller processes personal data provided by Users in particular when:

completing a registration or application form,
enrolling in an online course,
making payments,
contacting the Controller by email.

The processed data may include:

full name,
email address,
billing and payment information,
any other data voluntarily provided by the User.

3. Purposes of Data Processing

Personal data are processed for the following purposes:

performance of the agreement for participation in the online course,
processing payments and accounting obligations,
communication related to the organization and delivery of the course,
delivery of educational materials,
compliance with legal obligations,
protection of the Controller’s legitimate interests.

4. Legal Basis for Processing

Personal data are processed in accordance with:

Article 6(1)(b) GDPR – performance of a contract,
Article 6(1)(c) GDPR – compliance with a legal obligation,
Article 6(1)(f) GDPR – legitimate interests of the Controller,
Article 6(1)(a) GDPR – consent of the User, where applicable.

5. Data Recipients

Personal data may be shared only to the extent necessary with entities cooperating with the Controller, including in particular:

payment service providers (e.g. Stripe),
IT and online course platform providers (e.g. Zoom),
accounting and financial service providers.

Personal data are not sold or shared with third parties for marketing purposes.

6. International Data Transfers

Due to the use of services such as Zoom or Stripe, personal data may be transferred outside the European Union.
Such transfers are carried out in compliance with GDPR requirements, including the use of appropriate safeguards such as Standard Contractual Clauses.

7. Data Retention Period

Personal data are retained:

for the duration of the agreement and thereafter for the period required by applicable law,
until consent is withdrawn, where processing is based on consent.

8. User Rights

Users have the right to:

access their personal data,
rectify inaccurate data,
request erasure of data (“right to be forgotten”),
restrict processing,
data portability,
object to processing,
withdraw consent at any time (where applicable),
lodge a complaint with a supervisory authority.

9. Data Security

The Controller applies appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.

10. Cookies

The website may use cookies in order to:

ensure proper functioning of the website,
perform statistical analysis,
improve the quality of services.

Users may manage cookie settings in their web browser at any time.

11. Changes to the Privacy Policy

The Controller reserves the right to amend this Privacy Policy.
The current version will always be available on the website.

12. Final Provisions

By using the website and registering for the online course, the User acknowledges and accepts this Privacy Policy.