Hello! Your privacy matters to me. In this Privacy Policy I explain how I process your personal data when you use my website www.tanczace-awokado.pl and all of its subpages. The policy covers all of my sites, services and products, my social media, and every place that links to it. Here you will learn what data I collect, for what purpose I use it, how I protect it and what rights you have. Personal data means any information about an identified or identifiable natural person (Article 4(1) GDPR).
Agnieszka Słonina, conducting business activity under the name Tańczące Awokado Agnieszka Słonina, registered office address: Nyska 54A/3, 50-505 Wrocław, NIP: 8992944434, REGON: 523811736, tel. 536973488.
The joint controllers of the personal data are:
The joint controllership results from my use of the above platforms.
A User is any natural person who visits my site or my social media profiles, or uses my services, products or features.
A User should be at least 16 years old to be able to give consent to the processing of personal data on their own. If you are under 16, you need the consent of your legal guardian (for example, a parent).
Where necessary, I may ask you to confirm your age.
I look after your personal data with the utmost care. I process it only when it is truly necessary.
I have implemented appropriate internal procedures that allow me to store data securely, control who has access to it and prevent unauthorised use.
I use modern technical and organisational measures that meet the requirements of applicable law - including the GDPR - and the best industry standards. You can be sure that every processing operation takes place under full confidentiality and in accordance with the law.
I do everything to keep your data safe with me - but your own caution matters greatly too. Therefore, do not share your login details with anyone, use up-to-date antivirus software and regularly update your software, including your operating system and web browser.
Do you have questions? Contact me:
In order to perform a contract or answer your question, I may process your personal data. The scope of this data depends on the nature of the matter and the way you contact me. I may need, among other things:
I collect only the data that is truly necessary to handle your matter.
Your personal data may reach me in various ways - depending on how you use my site. You provide me with data, for example, when you:
I always inform you of the purpose for which I ask for data and what happens to it. All in accordance with the principles of transparency and minimisation under the GDPR.
Providing personal data is voluntary, but in some cases it is necessary for you to be able to use a feature of my site or product, or to have an order performed.
I always clearly state which data is mandatory - you will find this information on the site pages, in the terms and conditions and in the offer. If you do not provide it, this may result in your being unable to use a feature of my site or to have a service performed.
I process your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: the GDPR), and other currently applicable personal data protection legislation. I apply all the diligence and reliability required by law in order to protect your data.
| Purpose | Legal basis | Retention period |
|---|---|---|
| Quote request: sending an offer in response to your enquiry. | Article 6(1)(b) GDPR - processing is necessary for the performance of a contract or to take steps at your request before entering into a contract. | For the duration of the talks and negotiations, and then for the limitation period for any claims, in accordance with the law. |
| Contract: entering into and performing a contract or taking steps at your request before entering into a contract, accepting and performing an order. | Article 6(1)(b) GDPR - processing is necessary for the performance of a contract or to take steps at your request before entering into a contract. | For the duration of the talks and of the performance of the contract, and for the limitation period for claims, in accordance with the law. |
| Contact: contact form, contact, communication with you and replying to your message. | Article 6(1)(f) GDPR - processing is necessary for the purposes of my legitimate interest, in this case replying to the message you sent. | For the duration of communication with you or until an effective objection is raised, and then for the limitation period for any claims, in accordance with the law. |
| Electronic services: providing services by electronic means in the form of making the content presented on the site available, including the newsletter service and account handling. | Article 6(1)(b) GDPR - processing is necessary for the performance of a contract or to take steps at your request before entering into a contract. | For the time necessary to perform the service and for the limitation period for claims, in accordance with the law. |
| Legal obligations and documentation: meeting obligations arising from the law, such as handling reports concerning illegal content, creating documentation arising from the GDPR, issuing a document of sale. | Article 6(1)(c) GDPR - processing is necessary for compliance with a legal obligation to which I am subject. | For the time required by law, such as tax law or the GDPR. |
| Complaints: conducting complaint proceedings, withdrawal from the contract. | Article 6(1)(c) GDPR - processing is necessary for compliance with a legal obligation to which I am subject. | For the time of handling the complaint. I may store it longer if the law requires it or for the limitation period for claims, in accordance with the law. |
| Site administration: carrying out research and analyses of the site, in particular with regard to its functionality, creating databases, ensuring the security of the site and managing the site. | Article 6(1)(f) GDPR - processing is necessary for the purposes of my legitimate interest, in this case ensuring the correct operation of the site. | For the time needed to achieve the purpose of processing or until an effective objection is raised. |
| Analysis, statistics and improving the site: analysing how you use the site, getting to know your preferences, improving the site's features and keeping statistics. | Article 6(1)(f) GDPR - processing is necessary for the purposes of my legitimate interest, in this case obtaining information about your activity on the site. | For the time needed to achieve the purpose of processing or until an effective objection is raised. |
| Offer: sending commercial and marketing offers. | Article 6(1)(a) GDPR - processing of personal data on the basis of your consent. | Until consent is withdrawn or the purpose of processing is achieved. |
| Direct marketing: direct marketing of my own products or services or of recommended third-party products and services. | Article 6(1)(f) GDPR - processing is necessary for the purposes of my legitimate interest, in this case informing you about my products and services. | Until an effective objection is raised, and then for the limitation period for any claims, in accordance with the law. |
| Social media: running my social media and interacting with their users. | Article 6(1)(f) GDPR - processing is necessary for the purposes of my legitimate interest, in this case running social media profiles. | For the time needed to achieve the purpose of processing or until an effective objection is raised. |
| Archiving and legal protection: storing data for archival, evidential and statistical purposes and to protect my rights consisting in establishing, pursuing or defending against claims. | Article 6(1)(f) GDPR - processing is necessary for the purposes of my legitimate interest, in this case establishing, pursuing or defending against claims that may arise in connection with the use of the site or of my services and products. | Until an effective objection is raised, and then for the limitation period for any claims, in accordance with the law. |
| Comments: leaving comments on the site. | Article 6(1)(a) GDPR - processing of personal data on the basis of your consent. | Until consent is withdrawn or the purpose of processing is achieved. |
| Essential cookies: storing data in essential cookies, using cookies for the correct functioning of the site and for collecting data from the site. | Article 6(1)(b) GDPR - processing is necessary for the performance of a contract or to take steps at your request before entering into a contract. | For the time you use the site and for the limitation period for claims, in accordance with the law. |
| Functional and analytical cookies: storing data in functional and analytical cookies, using cookies for the correct functioning of the site and for collecting data from the site. | Article 6(1)(a) GDPR - processing of personal data on the basis of your consent. | Until consent is withdrawn or the purpose of processing is achieved. |
| Special categories of data: performance of the contract, including preparing an individual meal plan, assessing and monitoring your progress and ongoing dietary cooperation - to the extent that you have provided me with data about your health. | Article 9(2)(a) GDPR - processing of personal data on the basis of your explicit consent. | Until consent is withdrawn or the purpose of processing is achieved. I may store it longer if the law requires it or for the limitation period for claims, in accordance with the law. |
| Image: making your image or before-and-after photos available, for example on my social media or website. | Article 6(1)(a) GDPR - processing of personal data on the basis of your consent. | Until consent is withdrawn or the purpose of processing is achieved. |
Providing personal data is voluntary, but in many cases it is necessary to use a given feature of the site, to conclude and perform a contract or to receive selected services. If you do not provide the data, it may make it impossible to achieve a given purpose. In each matter I clearly state which data is mandatory.
In connection with the processing of personal data you have the following rights:
How can you exercise your rights? To exercise your rights you can contact me in writing or by email - you will find the contact details in this Privacy Policy.
Remember that your rights are not absolute and do not always apply to every type of processing. The detailed rules for exercising these rights are set out in the GDPR.
Your personal data may be transferred to third parties whose services I use. When choosing the entities I work with, I am always guided by ensuring an appropriate level of protection of your personal data. External service providers that take part in the processing of your personal data include in particular:
Your personal data may be transferred to countries outside the European Economic Area (EEA), but only where it is genuinely necessary. This most often happens when I use the services of globally operating companies such as Meta.
In order to ensure an adequate level of protection for personal data transferred outside the EEA, appropriate legal mechanisms compliant with the GDPR are used. In particular, the following are used:
If your personal data is transferred to a country outside the EEA, you have the right to obtain a copy of the safeguards applied to the transfer of personal data to a third country. To receive such information, contact me using the contact details provided.
As part of my activity I analyse some personal data by automated means, using tools provided by external service providers (for example social media platforms).
For example, I analyse your activity on the site, the history of orders placed, and your activity on my social media profiles and groups.
The purpose of the analysis is to better match content, offers and messages to the general preferences of recipients. Thanks to this I can provide more relevant and valuable materials and target direct marketing to your preferences.
The analysis of this data takes place automatically - under the rules set by the providers of the relevant services, such as the Instagram platform. This processing does not affect your rights and does not produce any legal effects. It also has no significant effect on your situation, including your rights and freedoms.
The controller of your personal data is Agnieszka Słonina, conducting business activity under the name Tańczące Awokado, registered office address: Nyska 54A/3, 50-505 Wrocław, NIP: 8992944434, REGON: 523811736, tel. 536973488.
The joint controller of the personal data is Meta Platforms Ireland Limited (address: Merrion Road, Dublin 4, D04 X2K5, Ireland). The joint controllership results from my use of social media.
If you like my Instagram profile under the name @tanczace_awokado or my Facebook profile under the name Tańczące Awokado, join a group or leave a comment, I may process the data that you make public or have provided to me directly (for example your first and last name, photo or profile name). Other data is processed by the owners of the social media under the terms set out in their terms and policies.
I will process the personal data provided on social media for the purpose of:
administering and managing the account, including informing you about my activity, the campaigns I promote, events, communicating with you, interacting and building a community;
taking steps towards concluding a contract due to your interest in my services or products;
statistical purposes - concerning how you use my profile and analyses of functionality;
possibly establishing, pursuing or defending against claims;
in which case the legal basis for the processing of personal data is Article 6(1)(f) GDPR, that is, my legitimate interest.
In addition, the basis for the processing of personal data is your consent, which you give by liking/following my profile or joining a group (Article 6(1)(a) GDPR). You may stop following my profile or block my account at any time. However, only using the "Block user" option will mean that the content I create is not displayed to you. In other cases, due to the open nature of social platforms, published materials may remain visible to you.
Providing personal data is voluntary, but necessary to fully use the functionality of my social media profiles. Your personal data:
In relation to your personal data you have the following rights:
To exercise your rights you can contact me in writing at: ul. Nyska 54A/3, 50-505 Wrocław, or by email at: office@tanczace-awokado.pl.
Your personal data may be transferred to third parties whose services I use, such as entities providing hosting, advisory or maintenance services, and others. When choosing the entities I work with, I am always guided by ensuring an appropriate level of protection of your personal data.
Because I use social media, your personal data may be transferred outside the European Economic Area, in accordance with the rules set by Meta in its privacy policy. This entity has declared that it guarantees the adequate level of protection of the shared personal data required by European law.
When you use my social media profile, Meta uses cookies to create page statistics. This data is anonymous and does not allow users to be identified. I do not have access to your personal data - the statistics are created and processed solely by the platform. Thanks to them I can better match content to the interests of visitors. This processing does not affect your rights, does not produce legal effects and does not significantly affect your situation, including your rights or freedoms.
I use Google Analytics to analyse how users use the site - including the number of visits, the subpages visited, traffic sources, time spent on the site and the types of devices and browsers. Google Analytics uses cookies and assigns unique identifiers (Client ID) to users, which makes it possible to track their behaviour within this website. This data is transferred to Google and may be combined with other information Google holds if the user has consented to this within Google's services. I do not have access to information that would allow me to identify specific users on my own. Nevertheless, the data collected by Google may be considered personal data within the meaning of the GDPR. You can find detailed information about the scope and rules of data collection in the Google Analytics privacy policy.
I record appointment times in the Google Calendar run by the dietitian. The following are sent to Google: your first and last name, email address, the date and time of the appointment, its type and the form of the meeting. If the appointment takes place online, Google creates a Google Meet link for it. When you reschedule or cancel an appointment, the same information is updated in the calendar or removed from it.
The basis for the processing is the performance of the contract - without the calendar entry and the meeting link the consultation cannot be carried out. You receive a calendar invitation at the email address you provided; you may ignore it and the appointment will take place as normal. Google acts here as a separate controller in respect of its own services - you will find the details in Google's privacy policy.
On the site I use Meta Pixel, which helps measure the effectiveness of advertising run through Facebook and Instagram. This tool makes it possible to collect information about whether a user has performed certain actions on the site (for example, submitted a form or made a purchase), where they came to the site from and which subpages they visited. Meta Pixel collects data about users, which is then sent to Meta and may be linked to the user's Facebook or Instagram account - provided the user is logged in there. Meta Pixel does not allow me to identify specific individuals and does not allow me to track users outside my website. More information about the rules of data processing by Meta can be found in Meta's privacy policy.
I use the Manychat tool to automate communication through platforms such as Messenger or Instagram. This tool allows me to send automated messages, run marketing campaigns and collect basic data such as first name, email address or answers given in the chat. Manychat operates within social media accounts. More information about the rules of data processing by Manychat can be found in its privacy policy.
I also use MailerLite - a tool for running a newsletter and marketing campaigns. Within this tool I collect data such as first name, email address, subscription status on the subscriber list and activity related to opening messages and clicking links. MailerLite allows me to segment recipients and deliver better-matched content. You will find the details of data processing in the MailerLite privacy policy.
On the site I use plugins that make it easy to go quickly to my social media profiles or share content (for example, through a "Share" button). These plugins are marked with the icons or logos of the relevant services (for example Facebook, Instagram or LinkedIn).
Personal data is transferred to the social portal only when you click on a given plugin - that is, when you take an active action. After clicking, your browser connects to the servers of the given social service and you are redirected to its page. At that point:
I have no influence over the scope of data collected and processed by a given service after you click on its plugin. This information is processed in accordance with the privacy policy of the given platform. Remember: data may be transferred even if you do not have an account on the given service or are not logged in.
The detailed rules for using cookies, their types, validity periods and how to manage consent are described in a separate Cookie Policy.
I am constantly working on improving the way I protect personal data. That is why this document is regularly reviewed and - if needed - updated.
This Privacy Policy is effective from 27.06.2026.