Privacy Policy

Last updated: 1 January 2025 · Effective from: 1 January 2025

This Privacy Policy describes how Vigorentra ("we", "us", or "our") collects, uses, and protects personal information about visitors to our website at vigorentra.com (the "Website"). We are committed to protecting your privacy and processing your data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Polish data protection law.

1. Data Controller

The data controller responsible for your personal data is:

  • Name: Vigorentra
  • Address: Warsaw, Poland
  • Email: info@vigorentra.com

2. What Data We Collect

We may collect the following categories of personal data:

2.1 Data You Provide Directly

  • Name and surname when completing our contact form
  • Email address for correspondence
  • Phone number (optional, if provided)
  • Content of messages sent through our contact form
  • Any other information you voluntarily include in your communication

2.2 Data Collected Automatically

  • IP address and browser information via web server logs
  • Cookie identifiers (see our Cookie Policy)
  • Pages visited and time spent on the Website
  • Referring website or search engine
  • Device type and operating system

3. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Consent (Article 6(1)(a) GDPR): When you tick the consent checkbox on our contact form or accept cookies.
  • Legitimate Interests (Article 6(1)(f) GDPR): For website analytics and security to improve our Website and protect it from misuse.
  • Legal Obligation (Article 6(1)(c) GDPR): Where required by applicable law.

4. How We Use Your Data

We use your personal data for the following purposes:

  • To respond to your enquiries submitted through the contact form
  • To provide you with information about our wellness and fitness programmes
  • To analyse website usage and improve the user experience
  • To ensure the security and proper functioning of the Website
  • To comply with legal obligations

We do not use your data for automated decision-making or profiling.

5. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to third parties for marketing purposes. We may share data with:

  • Service providers: Hosting and email providers that support our Website, bound by data processing agreements
  • Analytics providers: Anonymised or aggregated data for website analytics
  • Legal authorities: Where required by law or court order

Any third parties we use are required to maintain the confidentiality of your information and to use it only for the purposes we specify.

6. International Transfers

Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

7. Data Retention

We retain your personal data only for as long as necessary for the purposes stated in this policy:

  • Contact form submissions: up to 12 months from the date of correspondence
  • Analytics data: up to 26 months in anonymised form
  • Server logs: up to 90 days

8. Your Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of access: To request a copy of the personal data we hold about you
  • Right to rectification: To request correction of inaccurate or incomplete data
  • Right to erasure: To request deletion of your personal data ("right to be forgotten")
  • Right to restriction: To restrict how we process your data in certain circumstances
  • Right to data portability: To receive your data in a structured, machine-readable format
  • Right to object: To object to processing based on legitimate interests
  • Right to withdraw consent: To withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at info@vigorentra.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Polish supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include HTTPS encryption, access controls, and regular security reviews.

10. Cookies

We use cookies and similar tracking technologies on this Website. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

11. Children's Privacy

Our Website is not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post any updates on this page with a revised "Last updated" date. We encourage you to review this page periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: