Privacy policy

This is a convenience translation. In case of any difference, the Slovak version applies.

Valid from 31 October 2026

On this page you can read how I process the personal data you send me through the KristiSwim website and what rights you have. I process data in accordance with Regulation (EU) 2016/679 (GDPR) and Act No. 18/2018 Coll. on Personal Data Protection.

1. Who is the controller

2. What data I process and why

• Lesson booking – booking takes place in the Booqme system (booqme.app). I use the data you enter there (for example name, contact and date) to handle the booking, communicate with you and run the lesson. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Contact via WhatsApp, SMS or e-mail – if you write to or call me, I process the data you send me (for example your name, phone number, e-mail and the content of your message) so that I can reply and handle your enquiry. Legal basis: steps taken before entering into a contract at your request and my legitimate interest in answering questions (Art. 6(1)(b) and (f) GDPR).
• Interest in group sessions – the “I’m interested” button sends me a notification together with the e-mail address you enter. I will use the e-mail only to get in touch when I launch group sessions. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. Sending it does not commit you to anything.
• Invoicing and accounting – I keep the data on the invoice because legal regulations require it (Art. 6(1)(c) GDPR).

Providing data is voluntary. Without a phone number or e-mail, however, I will not be able to get back to you. I do not use automated decision-making or profiling.

3. How long I keep the data

• Enquiries via WhatsApp, SMS and e-mail: for the time needed to handle the enquiry and for at most 12 months after the last contact.
• Expression of interest in group training: until consent is withdrawn, at most 24 months.
• Accounting documents: for the period set by law (10 years).

4. Who may have access to the data

I do not sell or publish the data. Only the service providers I use to run the business may have access to it:

• the Booqme booking system,
• the website hosting provider (Cloudflare),
• the provider that processes submitted forms and delivers them by email (Web3Forms),
• the email provider (Google, Gmail),
• Google Fonts – when the page is displayed, fonts are loaded from Google servers, and Google may record your IP address.

Some of these providers are based outside the European Economic Area, mainly in the USA. The transfer is secured by standard contractual clauses or another mechanism under the GDPR.

5. Cookies

The website uses no analytics or marketing cookies and does not track you. Links to Booqme and Instagram open third-party sites, which have their own privacy rules.

6. Your rights

You have the right to:

• access your data and obtain a copy of it,
• have incorrect data rectified,
• have your data erased (“right to be forgotten”),
• restrict processing,
• data portability,
• object to processing based on legitimate interest,
• withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal.

You can exercise your rights by email at [email protected]. If you believe I process your data incorrectly, you can lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Budková 2, 811 04 Bratislava, dataprotection.gov.sk.

7. Changes

I may amend this policy if the way data is processed changes. The current version is always on this page.