Privacy policy

The controller of your personal data is Ivan Malanchenko, a personal trainer based in Gdynia, Poland. Contact: ivanfitpl@gmail.com, +48 698 209 004.

Through the form: your name, phone number or email, the service you chose, the training goals you ticked (if any), your message (if you wrote one) and the language of the page. If you write or call me directly, whatever you tell me.

Providing your data is voluntary, but without your name and a way to contact you I can’t reply. Please don’t include health details in the form — it’s better to discuss them in person at our first session.

The form delivery service also receives your device’s IP address, which it uses to protect against spam (see “Who receives your data”).

I process your data to reply to your request, arrange sessions and correspond with you. Legal bases:

• your consent, given by ticking the box in the form (Art. 6(1)(a) GDPR);
• steps taken at your request before entering into a contract, such as choosing the format and times of sessions (Art. 6(1)(b) GDPR).

Your data is not used for newsletters or advertising, and it is never sold or shared for marketing. There is no automated decision-making or profiling.

I keep requests and correspondence for 24 months from our last contact and then delete them. If you withdraw your consent or ask me to delete your data sooner, I will do so without undue delay (unless the law requires me to keep it).

Web3Forms stores a copy of each request sent through the form, encrypted, for 7 days from the date it was sent; after that it is deleted automatically.

I don’t share your data with anyone for their own purposes. These services are technically involved in processing it:

• Web3Forms (Web3Creative, India) delivers requests from the form to my inbox. It acts as a processor (Art. 28 GDPR) under its Data Processing Agreement. Data is stored on AWS, emails are sent via Amazon SES, and the infrastructure also includes Cloudflare and Hetzner (Germany, Finland). To fight spam, Web3Forms sends the sender’s IP address and email to CleanTalk and Akismet (USA).
• Google (Gmail): requests and correspondence are kept in my mailbox, ivanfitpl@gmail.com.
• Cloudflare hosts the website and provides visit statistics (Web Analytics, see “Cookies, statistics and browser storage”): when you open a page, it processes your IP address to deliver the page and protect the site from attacks.

Some of these companies operate outside the European Economic Area (India, USA). Web3Forms transfers data under the European Commission’s Standard Contractual Clauses; Google and Cloudflare under the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.

This website uses no cookies, advertising pixels or tools that track you across other websites, which is why there is no cookie banner.

To see how many people visit the site and which pages they find useful, I use Cloudflare Web Analytics. It collects anonymous visit statistics: no cookies, nothing stored in your browser, no tracking across websites and no visitor profiles. It records the page address, the referring site, the browser and device type, the country and how fast the page loaded; your IP address itself is not stored in the statistics. The legal basis is my legitimate interest in improving the website (Art. 6(1)(f) GDPR).

To remember your language, the site saves its code (for example, “en”) in your browser’s local storage (localStorage) and, for the current session only, a note that you closed the language suggestion (sessionStorage). These entries stay on your device and are never sent anywhere; you can remove them by clearing the site data in your browser settings.

Fonts are loaded from our own server, not from Google.

You have the right to:

• access your data and get a copy of it;
• have it corrected;
• have it deleted;
• restrict its processing;
• receive it in a portable format;
• object to its processing;
• withdraw your consent at any time — this does not affect the lawfulness of processing before the withdrawal.

To exercise these rights, email ivanfitpl@gmail.com — I will reply within one month. You also have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa.

If the way I process data changes, I will update this page and the date at the top.