Privacy and Cookies Policy (GDPR)

We take the security and confidentiality of your personal data seriously. This policy explains how we collect, process, and protect your information in full compliance with EU Regulation 2016/679 (GDPR).

1. Data Controller

The data controller is Finarena Joanna Tonkowicz, based in Poland, contact email for privacy matters: [email protected].

2. Purposes and Legal Bases for Data Processing

1. Order fulfillment and workshop participation: We collect your full name, email address, phone number, and company billing details (including VAT number for invoices). Legal basis: Art. 6(1)(b) GDPR (contract performance).

2. Workshop preparation and needs discovery: Voluntarily provided survey responses regarding your training challenges and participant profiles. Legal basis: Art. 6(1)(b) and (f) GDPR (legitimate interest in adapting workshop relevance).

3. B2B corporate inquiries and waitlist: Name, work email, organization details, and inquiry text. Legal basis: Art. 6(1)(f) GDPR (contact initiated upon request).

4. Accounting and statutory obligations: Issuing VAT invoices and maintaining statutory tax records. Legal basis: Art. 6(1)(c) GDPR (legal obligation).

3. Third-Party Service Providers (Sub-processors)

We transfer data strictly to trusted technical partners essential to running the service:

Stripe Payments Europe, Ltd. — certified secure online payment processing.
Resend Inc. — transactional email delivery (workshop tickets, calendar invitations).
Hetzner Online GmbH — encrypted server and database hosting located within the European Union (Germany/Finland).
Professional accounting and legal advisory providers.

4. Your Data Subject Rights

Under GDPR, you have the right to access, rectify, delete (“right to be forgotten”), restrict processing, or transfer your personal data, as well as lodge a complaint with your supervisory authority (UODO in Poland). To exercise your rights, email [email protected].