This notice explains how Consulting Agnieszka Balcerzak uses personal data to send theBABrain newsletter and operate this website. It also covers correspondence and any events or workshops you choose to register for.
1. Who is responsible for your data
The operator of theBABrain and the data controller is Agnieszka Balcerzak, conducting business under the name Consulting Agnieszka Balcerzak, NIP (Polish tax identification number): 5242512373, Poland.
For privacy questions, requests or withdrawal of consent, contact office@agnieszkabalcerzak.com.
2. What data we use and why
We receive information you provide through signup forms, event registration platforms and correspondence. When you register or buy a ticket through an external platform, it makes the relevant registration and transaction details available to us as the organiser.
- Newsletter and project updates. We use your email address, your name if supplied, and subscription preferences to send the newsletter with project updates, educational content and information about theBABrain meetings and workshops, when you have opted in. The legal basis is consent: Article 6(1)(a) GDPR.
- Events and workshops. We use your name, email address, registration details and information you choose to provide to manage your place, deliver access, and send joining instructions, reminders and practical updates. The legal basis is performance of the service you request, including steps before entering into a contract: Article 6(1)(b) GDPR.
- Paid bookings. We process booking details, transaction status and billing information where required to administer your purchase, payments and refunds under Article 6(1)(b) GDPR, and to fulfil applicable tax and accounting obligations under Article 6(1)(c) GDPR. Payment credentials are handled through the payment provider’s checkout.
- Correspondence. We use your contact details and message content to respond. The basis is Article 6(1)(b) GDPR for enquiries concerning a requested service, or Article 6(1)(f) GDPR for our legitimate interest in handling other correspondence.
- Website operation and security. Hosting and technical services process information such as IP addresses, browser details and request or diagnostic records to deliver and protect the website. The basis is our legitimate interest in operating a reliable and secure service: Article 6(1)(f) GDPR.
- Legal requests and claims. Relevant records may be processed to comply with legal obligations under Article 6(1)(c) GDPR, or to establish, exercise or defend legal claims under Article 6(1)(f) GDPR.
Providing data is voluntary, but the information marked as required is needed to process a registration, provide a service or answer an enquiry. Billing information may also be required by law. Please do not submit sensitive personal information that is unnecessary for your request.
3. Newsletter and your choices
You can withdraw your newsletter consent at any time using the unsubscribe option in a newsletter email or by contacting office@agnieszkabalcerzak.com. Withdrawal does not affect the lawfulness of processing carried out before it.
Subscribing is optional. Signing up for an event does not by itself subscribe you to the newsletter. Unsubscribing from the newsletter does not cancel an event booking; we may still send joining instructions and necessary updates for that event. This privacy notice is information, not a request for consent.
4. Who may receive your data
We use external service providers to support the activities above. Depending on how you interact with us, the relevant categories of recipients are:
- website hosting, infrastructure, security and technical resource providers;
- form, event registration, ticketing and online meeting providers;
- email, newsletter delivery, subscription and contact-management providers;
- cloud document, calendar and data-storage providers;
- payment service providers and, where necessary for applicable obligations, accounting or legal service providers;
- public authorities or other recipients where disclosure is required by law.
Providers processing data on our behalf are subject to applicable data-processing arrangements. Some providers also act as independent controllers for their own payment, account, security or legal purposes. Their privacy notices apply to those activities. We do not sell or rent your personal data.
5. International processing
Some of the technical, communication, event and payment services operate internationally, including in the United States. This can involve processing outside the European Economic Area. The applicable transfer mechanism depends on the provider and service: an adequacy decision where it covers the recipient, or appropriate safeguards such as the European Commission’s standard contractual clauses.
Contact office@agnieszkabalcerzak.com for information about the recipients and transfer safeguards relevant to your data, including how to obtain a copy of applicable safeguards.
6. How long data is kept
Retention depends on the purpose of the information, rather than one period for every record:
- Newsletter records: for the duration of the subscription. After withdrawal, limited records may be retained to respect your unsubscribe request and, where necessary, demonstrate consent or handle related claims.
- Event records: through registration, delivery and completion of related correspondence or follow-up. Records still needed for a purchase, unresolved complaint or legal claim are retained for that purpose, only for as long as needed for that purpose.
- Billing and transaction records: for the period required by applicable tax and accounting law. If a related proceeding requires longer retention, the relevant records are kept until that requirement ends.
- Correspondence and claims: until the matter and necessary follow-up are completed, and where relevant until the applicable limitation period expires or proceedings are concluded.
- Technical records: according to their operational or security purpose and the retention settings of the relevant service. Records needed to investigate a specific incident may be retained until that investigation is completed.
You can ask which retention period or criterion applies to a particular record. Data must not be kept beyond these purposes without a legal basis.
7. Website resources and external platforms
The current website does not include a dedicated advertising or analytics script. Visiting it still creates technical requests to the hosting infrastructure and external font services, which can receive your IP address and browser information.
Linked registration, meeting and payment platforms may use their own cookies or similar technologies under their own notices and controls. Statements about this website do not describe every external platform.
8. Your data protection rights
Subject to the conditions in the GDPR, you may request access to your data, correction, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your situation, and object to direct marketing at any time. Where processing relies on consent, you may withdraw it at any time.
Send requests to office@agnieszkabalcerzak.com. We may need proportionate information to verify your identity. The GDPR normally requires a response within one month; if a permitted extension is necessary, we will explain it within that first month. Some information may need to be retained despite an erasure request, for example to meet a legal obligation.
You can lodge a complaint with the President of Poland’s Personal Data Protection Office — UODO — or another competent supervisory authority, including in the EU/EEA country where you live or work.
9. Changes and contact
We update this notice when relevant processing changes and revise the date above. Where required, we provide additional information before using data for a new purpose. Questions can be sent to office@agnieszkabalcerzak.com.