Privacy Policy
Privacy and Cookie Policy
Effective date: [07.07.2026]
Website: wgladyduchowe.pl
Data Controller: [A&A Sp. z o.o.]
Tax Identification Number / Business Registry Number: [4990695841]
Email address for personal data matters: kontakt@wgladyduchowe.pl
Website address: https://www.wgladyduchowe.pl/
This Privacy and Cookie Policy sets out the rules governing the processing of personal data relating to individuals who use the wgladyduchowe.plcontact the Wglądy Duchowe branduse the contact form, email, messaging services, social media, services, workshops, self-work materials, or any other forms of contact available as part of the activities of Wglądy Duchowe.
We take the confidentiality of the information you provide seriously. Personal data, including any photographs submitted for energetic assessment, is used solely to handle your enquiry, communicate with you, provide the agreed service, process payments, handle any complaints or guarantees, and establish, pursue, or defend legal claims. We do not publish submitted photographs, sell personal data, or disclose it to unauthorised parties.
1. Data Controller
The Controller of your personal data is:
Website: wgladyduchowe.pl
Data Controller: [A&A Sp. z o.o.]
Tax Identification Number / Business Registry Number: [4990695841]
Email address for personal data matters: kontakt@wgladyduchowe.pl
Website address: https://www.wgladyduchowe.pl/
For matters concerning the protection of personal data, you may contact the Controller by email at: kontakt@wgladyduchowe.pl.
Should the Controller appoint a Data Protection Officer, their contact details will be provided in this section. As of the publication date of this Policy, the Controller is not required to appoint a Data Protection Officer, unless such an obligation arises from applicable law or from the scale and nature of the processing activities.
2. Legal Bases for Processing Personal Data
We process personal data only where a valid legal basis applies. Depending on the circumstances, the legal basis for processing may be:
Article 6(1)(a) of the GDPR — your consent, for example to receive a newsletter, have your testimonial published, allow the use of analytical or marketing cookies, or, in certain cases, permit the processing of data voluntarily provided through a form;
Article 6(1)(b) of the GDPR the need to take steps before entering into a contract or to perform a contract, for example to respond to an enquiry, select an appropriate service, provide an energetic assessment, carry out a cleansing service, conduct a workshop or consultation, or provide another agreed service;
Article 6(1)(c) of the GDPR — compliance with a legal obligation to which the Controller is subject, including tax, bookkeeping, and accounting obligations;
Article 6(1)(f) of the GDPR — the legitimate interests of the Controller, including responding to messages, securing the website, maintaining correspondence, pursuing or defending legal claims, analysing service quality, and conducting basic marketing of the Controller’s own services;
Article 9(2)(a) of the GDPR — your explicit consent to the processing of special categories of personal data where you voluntarily provide information concerning, for example, your health, mental state, philosophical, spiritual, or religious beliefs, or other sensitive information.
We do not ask you to provide sensitive information unless you independently decide that it is necessary to describe your situation. Please do not send medical documentation, test results, detailed information about treatment, or any other excessive personal data unless it is necessary to handle your enquiry.
3. Nature of the Services Provided by Wglądy Duchowe
The services, materials, and practices offered by Wglądy Duchowe are spiritual, energetic, developmental, educational, and intended to support personal well-being.
They do not constitute healthcare services, medical, psychological, or psychiatric advice, psychotherapy, medical diagnosis, or treatment within the meaning of applicable law. Information provided through assessments, reports, consultations, workshops, or correspondence does not replace consultation with a doctor, psychologist, psychotherapist, or another appropriately qualified professional.
Where you describe physical, emotional, or psychological concerns, we process this information only to the extent that you voluntarily provide it and only where it is necessary to respond to your enquiry or provide the agreed energetic service.
4. Personal Data We May Process
Depending on how you use the website and contact us, we may process the following information:
your first name, surname, or pseudonym; your email address; your telephone number, if provided; your social media profile name, if you contact us through Facebook, Messenger, TikTok, YouTube, or another platform; the content of your message; the selected area of enquiry, such as energetic assessment, cleansing and energetic work, soul and relationships, home, business, space, animals, consultations, workshops, or tools; a description of the situation with which you are seeking support; a full-body photograph or another photograph voluntarily submitted for the purpose of an assessment or energetic service; information required for payments and accounting, such as invoicing details, address, tax identification number, bank account number, and payment confirmation; information concerning the ordered service, its date, scope, related communication, complaint, or guarantee; technical data associated with your use of the website, including your IP address, device type, browser type, operating system, date and time of access, pages visited, referral source, cookies, and similar technologies.
Where an enquiry concerns an animal, home, business, physical space, or another person, we process the personal data of the individual contacting us and any information provided to the extent necessary to handle the enquiry. If you provide another person’s data, you should have an appropriate legal basis for doing so, such as that person’s consent or authority to act as their representative or guardian.
5. Photographs Submitted for Energetic Assessment
For certain services, we may ask you to provide a full-body photograph or another photograph required to carry out an energetic assessment or agreed energetic service.
The photograph is used solely for the following purposes:
identifying the person or area concerned by the enquiry;
carrying out the energetic assessment;
marking disturbed areas on the photograph, where included in the selected service;
preparing a description, report, or recommendation;
handling a complaint, guarantee claim, or clarification concerning the scope of the service provided.
We do not use photographs for biometric identification, create biometric profiles from them, publish them, use them for marketing purposes, or disclose them to third parties, unless this is based on your explicit consent, required by law, or necessary for the establishment, pursuit, or defence of legal claims.
Photographs are retained for the period necessary to provide the service and are generally deleted within 90 days of its completion,unless longer retention is required to handle a complaint or guarantee claim, pursue or defend legal claims, or comply with applicable law.
6. Contact Through the Form, Email, and Messenger
If you contact us through the contact form, by email, through Messenger, or via another communication channel, we process the information contained in your message for the purpose of:
responding to your enquiry;
clarifying the matter;
selecting an appropriate service;
presenting an offer;
agreeing on the scope of cooperation;
taking steps before entering into a contract;
providing the agreed service, if your enquiry results in an order.
Providing personal data is voluntary. However, failure to provide contact details may prevent us from responding, and failure to provide information required to perform a service may make it impossible to provide that service.
Correspondence is retained for the period necessary to handle the matter and subsequently for the period required to safeguard against potential claims, but no longer than the applicable limitation period, unless a longer retention period is required by law.
7. Provision of Services, Assessments, Energetic Work, Consultations, and Workshops
If you order a service, energetic assessment, cleansing service, consultation, workshop, material, or another offering available through Wglądy Duchowe, we process your personal data for the purpose of:
accepting your enquiry or order;
agreeing on the scope of the service;
contacting you before the service is provided;
carrying out the assessment or energetic work;
providing a description, report, annotated photograph, or recommendation;
processing payment;
issuing an invoice or receipt, where applicable;
handling complaints, guarantees, and post-service enquiries;
establishing, pursuing, or defending legal claims.
The legal basis for processing is Article 6(1)(b) of the GDPR, namely the performance of a contract or taking steps before entering into a contract. Where tax and accounting obligations apply, the legal basis is Article 6(1)(c) of the GDPR.
If you voluntarily provide special categories of personal data as part of your enquiry, such as information concerning your health, emotional state, beliefs, or spiritual views, the legal basis for processing such information is your explicit consent under Article 9(2)(a) of the GDPR.
Data associated with the provision of services is retained for the duration of the service and subsequently for the period required under tax and accounting law and for the applicable limitation period for legal claims.
8. Payments, Settlements, and Accounting Documents
If you make a payment or request an invoice, we may process information required to handle the payment and comply with accounting obligations, including:
your first name and surname or company name;
your address;
your tax identification number;
adres e-mail,
information about the ordered service;
the amount paid;
the payment date;
your bank account number, where visible in the payment details;
information required to issue an invoice or another accounting document.
The legal basis for processing is Article 6(1)(c) of the GDPR, meaning compliance with a legal obligation, and Article 6(1)(b) of the GDPR where the information is required to perform a contract.
Accounting documents are retained for the period required under tax and accounting regulations, generally for five years from the end of the tax year to which they relate.
9. Complaints, Guarantees, and Legal Claims
If you submit a complaint, a guarantee-related enquiry, an objection, or another post-service request, we process the information required to consider and respond to the matter.
The legal basis for processing is Article 6(1)(b) of the GDPR where the request concerns the performance of a contract, Article 6(1)(c) of the GDPR where handling the matter is required by law, and Article 6(1)(f) of the GDPR, meaning the legitimate interests of the Controller in handling enquiries, protecting its rights, and establishing, pursuing, or defending legal claims.
The data is retained for the period necessary to handle the matter and subsequently for the applicable limitation period for potential claims.
10. Testimonials, Recommendations, and Client Experiences
If you provide a testimonial, recommendation, account of your experience following a session, feedback message, or consent to publish an excerpt from your statement, we may process your personal data for the purpose of publishing the testimonial on the website, social media, or in promotional or educational materials.
A testimonial is published only with your consent or to the extent that you knowingly and intentionally submit it for publication. We may publish it using your first name, initials, pseudonym, or another designation agreed with you.
You may withdraw your consent to the publication of a testimonial at any time. The withdrawal of consent does not affect the lawfulness of any processing carried out before the consent was withdrawn.
11. Newsletter and Marketing Communications
If a newsletter or another form of regular marketing communication is introduced on the website, subscription will be voluntary and will require your consent.
In such a case, we will process your personal data, particularly your email address and, where applicable, your first name, to send information about services, materials, workshops, new content, promotions, or other activities of Wglądy Duchowe.
The legal basis for processing will be Article 6(1)(a) of the GDPR, meaning your consent, together with applicable electronic communications legislation.
You may withdraw your consent at any time, for example by clicking the unsubscribe link contained in a message or by contacting us at kontakt@wgladyduchowe.pl.
12. Marketing of Our Own Services
We may market the services, materials, workshops, and content of Wglądy Duchowe, particularly by responding to your enquiry, presenting an offer, or informing you about activities similar to those in which you have expressed an interest.
The legal basis for processing may be Article 6(1)(f) of the GDPR, meaning the legitimate interests of the Controller in providing information about its own activities, unless you object to such processing.
Commercial information sent electronically as part of a newsletter or regular marketing communication will be sent only after the required consent has been obtained.
13. Social Media
Wglądy Duchowe may operate profiles, channels, or pages on external platforms such as Facebook, Messenger, YouTube, TikTok, or other social media services.
If you follow our profiles, leave comments, send messages, react to content, or contact us through social media, your personal data may be processed both by us and by the operator of the relevant platform.
For the purposes of our activities, we process personal data to:
communicate with users;
respond to messages and comments;
build a community;
provide information about services, materials, and workshops;
analyse activity on our profiles;
protect against misuse and breaches of law.
Social media platform operators are separate data controllers and process personal data in accordance with their own terms and privacy policies. You should review the applicable privacy rules before using these platforms.
14. Materiały do pracy własnej i pliki PDF
Serwis może udostępniać bezpłatne materiały, nagrania, narzędzia, procesy, oświadczenia lub pliki PDF do pracy własnej.
Jeżeli pobierasz materiały bez podawania danych, nie zbieramy dodatkowych danych osobowych poza standardowymi danymi technicznymi związanymi z korzystaniem ze strony, takimi jak adres IP, logi serwera i informacje cookies.
Jeżeli pobranie materiału będzie wymagało podania adresu e-mail lub zapisu na listę odbiorców, zostaniesz o tym wyraźnie poinformowany, a przetwarzanie danych będzie odbywać się zgodnie z właściwą podstawą prawną wskazaną przy formularzu.
15. Technical Data and Website Security
When you use the website, certain technical data may be processed automatically, including:
your IP address;
the date and time of your visit;
the address of the page visited;
the address of the website from which you were referred;
your browser type and version;
your operating system;
your device type;
information about errors;
information recorded in server logs;
cookie information and similar identifiers.
We process this information to:
ensure the correct operation of the website;
protect against attacks, spam, misuse, and unauthorised access;
diagnose technical errors;
compile technical statistics;
ensure the security of users and the Controller.
The legal basis for processing is Article 6(1)(f) of the GDPR, meaning the legitimate interests of the Controller in ensuring the security and proper operation of the website.
Server logs are retained for the period necessary to ensure the security and stability of the website. In the event of an incident, they may be retained for the period required to investigate the matter and establish, pursue, or defend legal claims.
16. Recipients of Personal Data
Personal data may be disclosed only to entities that support us in operating the website and conducting our activities, and only to the extent necessary to fulfil the relevant purposes.
Recipients of personal data may include:
the hosting provider;
the domain provider;
the email service provider;
IT service providers and website administrators;
the provider of contact form services;
providers of anti-spam and security tools;
the payment service provider, where used;
banks;
accounting or bookkeeping service providers;
tax advisers;
law firms or debt collection agencies, where necessary;
newsletter service providers, if a newsletter is introduced;
analytics providers, such as Google Analytics, where used;
advertising service providers, such as Google Ads or Meta Pixel, where used;
social media platform operators, including Meta, Google/YouTube, and TikTok, if you use those platforms or if their features are embedded on the website.
We disclose personal data only where necessary, lawful, and appropriately secured, for example under a data processing agreement or another appropriate legal mechanism.
17. Transfers of Personal Data Outside the European Economic Area
Some external tools, particularly analytics, advertising, email, cloud, and social media services, may involve the transfer of personal data outside the European Economic Area, particularly to the United States or other countries in which the relevant providers operate.
Where such a transfer takes place, it is carried out only where the provider applies the required data protection safeguards, such as an adequacy decision issued by the European Commission, Standard Contractual Clauses, supplementary security measures, or another mechanism permitted under the GDPR.
18. Data Retention Periods
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected.
In particular:
contact form data and correspondence are retained for the period required to handle the matter and subsequently for the period necessary to safeguard against potential claims;
data relating to the provision of services is retained for the duration of the service, the handling of complaints or guarantee claims, and the applicable limitation period for claims;
photographs submitted for assessments or energetic services are generally retained for up to 90 days after completion of the service, unless longer retention is necessary for a complaint, guarantee claim, legal claim, or based on separate consent;
accounting and tax records are retained for the period required by law, generally five years from the end of the relevant tax year;
data processed on the basis of consent is retained until the consent is withdrawn, unless another legal basis permits continued processing;
newsletter data is retained until you unsubscribe or the newsletter is discontinued;
cookie data is retained for the lifetime of the relevant cookie or until consent is withdrawn;
server logs are retained for the period necessary to maintain security, diagnose problems, and protect against misuse.
19. Your Rights
In connection with the processing of your personal data, you have the following rights under the GDPR:
the right of access to your personal data;
the right to receive a copy of your personal data;
the right to have inaccurate data corrected;
the right to have incomplete data completed;
the right to erasure of your personal data;
the right to restriction of processing;
the right to data portability where processing is based on consent or a contract and is carried out by automated means;
the right to object to processing based on legitimate interests;
the right to object to direct marketing;
the right to withdraw consent at any time where processing is based on consent;
the right not to be subject to a decision based solely on automated processing, including profiling, where that decision produces legal effects concerning you or similarly significantly affects you;
the right to lodge a complaint with the President of the Polish Personal Data Protection Office.
To exercise your rights, contact us at: kontakt@wgladyduchowe.pl.
We may ask you to provide additional information required to verify your identity where this is necessary to prevent personal data from being disclosed to an unauthorised person.
20. Right to Lodge a Complaint with the Polish Data Protection Authority
If you believe that we are processing your personal data unlawfully, you have the right to lodge a complaint with the supervisory authority:
President of the Personal Data Protection Office
ul. Moniuszki 1A
00-014 Warsaw
Website: uodo.gov.pl
We encourage you to contact us first at kontakt@wgladyduchowe.pl. This will allow us to investigate the matter and respond to your request more quickly.
21. Voluntary Provision of Personal Data
Providing personal data is voluntary, although in certain cases it is necessary to use specific functions or services.
Failure to provide an email address will prevent us from responding to your message.
Failure to provide information required to perform a service may make it impossible to provide that service.
Failure to provide invoicing details will prevent us from issuing an invoice.
Refusing consent to cookies other than strictly necessary cookies will not prevent you from using the website, although it may affect analytics, advertising, or embedded third-party content.
Refusing consent to receive the newsletter will prevent you from receiving it.
22. Personal Data of Children and Minors
The services and materials provided by Wglądy Duchowe are generally intended for adults.
If an enquiry concerns a minor, the child’s personal data may be provided only by a parent, legal guardian, or another person authorised to act on behalf of the child. In such a case, we may ask for confirmation that the person making the enquiry is authorised to provide the data and order a service concerning the child.
We do not knowingly conduct marketing directed specifically at children.
23. Automated Decision-Making and Profiling
We do not make decisions concerning you based solely on automated processing where those decisions would produce legal effects concerning you or similarly significantly affect you.
If we use analytics or advertising tools, they may create general profiles of user interests for statistical purposes or to display advertisements. Such processing is carried out only to the extent permitted by law and, where required, after you have consented to the use of analytical or marketing cookies.
24. Cookies — General Information
The website uses cookies and similar technologies.
Cookies are small files stored on your device, such as a computer, phone, or tablet, when you use a website. They may be read by the website during subsequent visits.
Cookies may be used to:
ensure the correct operation of the website;
remember user preferences;
operate forms;
provide security;
compile anonymous or pseudonymous statistics;
measure the effectiveness of marketing activities;
embed external content, such as YouTube videos or social media features;
display advertisements, where such activities are conducted.
25. Types of Cookies Used on the Website
The following categories of cookies may be used on the website:
Strictly Necessary Cookies
These cookies are required for the proper operation of the website, forms, security features, privacy preference settings, and website protection. They may be used without separate consent because they are necessary to provide services electronically.
Analytical Cookies
These cookies help us understand how users interact with the website, which pages they visit, how long they remain on the website, and which content they find useful. They are used only with your consent where their use goes beyond what is strictly necessary for the operation of the website.
Marketing Cookies
These cookies are used to measure the effectiveness of advertisements, create audience groups, conduct remarketing, or display personalised advertising content. They are used only with your consent.
Functional and Social Media Cookies
These cookies may be used to support embedded content, such as YouTube videos, social media buttons, maps, widgets, or other external features. They may be set by third-party providers and require consent where they are not essential to the operation of the website.
26. First-Party and Third-Party Cookies
The website may use:
first-party cookies — set directly by the wgladyduchowe.pl website;
third-party cookies — set by external providers, such as Google, Meta/Facebook, YouTube, TikTok, and providers of analytics, advertising, anti-spam, or technical services.
Third parties may process personal data in accordance with their own privacy policies. This applies in particular to Google, YouTube, Meta/Facebook, Messenger, TikTok, and other tools embedded in or connected to the website.
27. Cookie Consent and Preference Management
When you first visit the website, you may be asked to select your cookie preferences.
You have the right to:
accept all cookies;
reject cookies other than strictly necessary cookies;
select specific categories of cookies;
change your cookie preferences at any time;
delete cookies through your browser settings.
Cookies other than strictly necessary cookies are used only after you have provided consent. Consent must be freely given, informed, specific, unambiguous, and as easy to withdraw as it was to provide.
You may also manage cookies through your internet browser settings. Restricting or disabling cookies may affect the operation of certain website features.
28. Cache and Local Data Storage
The website may use browser cache, local storage, session storage, or similar technologies to:
improve website loading speed;
remember user preferences;
remember user preferences;
improve security;
support the operation of forms or other website features.
Locally stored data may be deleted through your browser settings.
29. Links to External Websites and Services
The website may contain links to other websites, social media platforms, YouTube channels, Facebook profiles, TikTok accounts, PDF materials, or other external resources.
We are not responsible for the privacy policies, cookie practices, or data processing rules applied by external websites and platforms. Before using an external service, you should review its privacy policy.
30. Data Security
We apply technical and organisational measures designed to protect personal data against unauthorised access, loss, destruction, alteration, disclosure, or unlawful processing.
In particular, we take steps to:
restrict access to personal data to authorised persons only;
protect email accounts and administrative panels;
apply website security measures;
use trusted hosting and IT service providers;
maintain the confidentiality of correspondence and photographs;
minimise the amount of personal data processed;
delete personal data when it is no longer required.
31. Changes to This Privacy Policy
This Privacy Policy may be amended, particularly in the event of:
changes in applicable law;
changes to the scope of services;
the introduction of new website features;
changes to providers of technical, analytical, or marketing tools;
changes to the way personal data is processed.
The updated version of the Policy will be published on the website. In the case of significant changes, we may also notify users through a website notice or by email, where appropriate.