1. Data Controller

The data controller is:
Katarzyna Krzakiewicz – Rising Phoenix (sole proprietorship)
Poznań, Poland
Email: kasia.projects@gmail.com

2. Scope of this policy

This Privacy Policy explains how personal data is collected and processed in connection with services, website use, and client communication.

3. Purpose and legal basis of processing

Your data may be processed for:

• providing hypnotherapy, subconscious work, and holistic/energy-based sessions
• scheduling and delivering sessions
• client communication
• maintaining session documentation
• accounting and legal obligations
• client intake and safety screening

Legal basis:

Article 6(1)(b) GDPR – contract performance
Article 6(1)(a) GDPR – consent
Article 6(1)(c) GDPR – legal obligation
Article 6(1)(f) GDPR – legitimate interest

4. Types of data collected

We may process:

• full name
• email address
• phone number
• billing details (if applicable)
• information provided in forms or communication
• health and wellbeing information (if voluntarily provided)
• booking and communication history

5. Sensitive data

You may voluntarily provide sensitive data (health, emotional state, personal experiences).
This data is processed only with your explicit consent and solely for service delivery.

6. Data retention

• contact data: until end ofcooperation + up to 6 years
• session notes: 12–36 months after last session
• accounting data: 5 years from the end of the tax year
• marketing data: until consent is withdrawn.

7. Data sharing

Data may be shared only with:

accounting services
banks and payment providers
IT providers (email, hosting, booking systems)
public authorities if required by law

Data is never sold or used for third-party marketing.

8. International transfers

We do not intentionally transfer data outside the EEA.
If third-party tools store data outside the EEA, GDPR safeguards apply.

9. Your rights

You have the right to:

• access your data
• rectify your data
• erase your data
• restrict processing
• object to processing
• data portability
• withdraw consent
• lodge a complaint with a supervisory authority.

10. Right to lodge a complaint

President of the Personal Data Protection Office (UODO)
ul. Stawki 2, 00-193 Warsaw, Poland
Email: kancelaria@uodo.gov.pl
Phone: +48 606 950 000
https://uodo.gov.pl

11. Security

We apply appropriate technical and organisational measures to protect personal data.

12. Cookies

This website uses cookies for:

functionality
analytics
user experience improvement

You can manage cookies in your browser settings.

13. Contact

Email: kasia.projects@gmail.com