Privacy policy

1. Data controller

The controller of your personal data is KK Zen Sp. z o.o., based in Warsaw. For personal data matters, contact us by email at kontakt@zenpilates.studio or in person at the studio.

2. Data we collect

Depending on how you use our website, we may collect:

• contact details (first name, surname, email address, phone number) when you complete a registration or contact form;
• technical data (IP address, browser type, operating system), automatically while you browse the website;
• analytics data (how you use the website and which pages you visit), collected through cookies.

3. Why we process data

We process your personal data to:

• respond to enquiries submitted through website forms;
• provide class booking services and information about studio programmes, such as Projekt Zen;
• analyse website traffic and improve functionality;
• market our services, only with your consent.

4. Legal basis for processing

We process your data based on your consent (Article 6(1)(a) GDPR), performance of a contract or steps before entering into one (Article 6(1)(b) GDPR), and our legitimate interest (Article 6(1)(f) GDPR) in analytics and improving service quality.

5. Cookies

Our website uses cookies for correct operation and traffic analysis:

• essential cookies — required for the website to function and cannot be disabled;
• analytics cookies (Google Analytics) — help us understand how visitors use the website by measuring visits and interactions;
• marketing cookies (Google Tag Manager, Meta) — used to measure campaign effectiveness and personalise marketing content.

6. Managing cookie consent

On your first visit, we show a banner asking for consent to analytics and marketing cookies. You can accept or decline them. You can change your preferences at any time using “Cookie settings” in the home page footer.

7. Your rights

Regarding the processing of your data, you have the right to:

• access your data;
• correct your data;
• erase your data (the right to be forgotten);
• restrict processing;
• data portability;
• object to processing;
• withdraw consent at any time;
• lodge a complaint with the supervisory authority, UODO.

8. Data retention

We retain data for the period necessary to fulfil the purposes for which it was collected, or until consent is withdrawn. Analytics data retention depends on the configuration of the tools in use.

9. Data recipients

Your data may be shared with processors acting on our behalf, including Google LLC (analytics), Fitssey (bookings), Supabase (storage of Projekt Zen interest-list registrations) and hosting providers (Vercel).

10. Contact

For questions about personal data processing, email kontakt@zenpilates.studio or visit us at the studio.