This version of the website does not load analytics or advertising tools and does not store tracking cookies. Photos and site files are stored locally. The WhatsApp link opens an external messenger. The form sends the enquiry to the controller through Telegram.
The Polish version of this policy is the binding version. This translation is provided for convenience.
1. General information
This Privacy Policy explains how personal data of people using the website operated by Uliana Serba Soprano (the “Site”) is processed and protected.
The controller of personal data is:
Organisation: Uliana Serba
Controller: Uliana Serba Soprano
Address: ul. Zbożowa 4, 30-002 Kraków, Poland
Email: [email protected]
Phone: +48 889 977 398
The controller processes personal data in accordance with applicable law, in particular Regulation (EU) 2016/679 (GDPR).
The controller takes due care to protect the personal data of Site users.
2. Scope of personal data
Depending on how the Site is used, the controller may process:
- first and last name;
- email address;
- phone number;
- company name, where relevant;
- the content of messages sent through contact forms;
- information about interest in the services offered;
- IP address;
- technical data about the device and browser;
- information about how the Site is used;
- other data voluntarily provided by the user.
Providing personal data is voluntary, but some data may be required to answer an enquiry, conclude a contract or provide a service.
3. Purposes and legal bases
The controller may process personal data for the following purposes:
3.1. Handling enquiries
Replying to messages sent through contact forms, email or phone.
Legal basis: Article 6(1)(f) GDPR (legitimate interest in corresponding) or Article 6(1)(b) GDPR where the enquiry concerns a contract.
3.2. Providing services
Processing data in order to conclude and perform a contract, serve clients and deliver the requested services.
Legal basis: Article 6(1)(b) GDPR.
3.3. Legal duties
Processing data required for tax, accounting and other legal obligations.
Legal basis: Article 6(1)(c) GDPR.
3.4. Marketing
Sending information about services, special offers and promotional materials where the law allows it and any required consent has been given.
Legal basis: Article 6(1)(a) GDPR or, where appropriate, Article 6(1)(f) GDPR.
3.5. Analytics and statistics
Analysing Site traffic and improving the Site and marketing.
Legal basis: Article 6(1)(a) GDPR where analytics tools require consent.
3.6. Claims
Establishing, pursuing or defending claims related to the activity.
Legal basis: Article 6(1)(f) GDPR.
4. Contact forms
You can contact the controller through the forms on the Site, by email or by phone.
Data submitted in the form (name, phone number, chosen lesson and page language) is delivered to the controller as a Telegram message.
Form data may be used to:
- answer the enquiry;
- provide information about the services;
- prepare an individual offer;
- contact you about the service.
Form data is not automatically used for marketing without a proper legal basis and any required consent.
5. Cookies
The Site may use cookies, which are small text files stored on your device.
Cookies may be used to:
- keep the Site working;
- remember settings and preferences;
- analyse visit statistics;
- improve the Site;
- measure advertising;
- run remarketing.
The Site may use necessary cookies, analytics cookies and marketing cookies.
Cookies that do not require consent may be used only as far as they are needed for the Site to work. This version stores a technical session identifier that protects the form from abuse. It does not use analytics or marketing cookies.
Other cookies are used only after the required consent. You can change cookie preferences or withdraw consent at any time.
6. Analytics and marketing tools
The Site may use Google Analytics, Google Ads, Google Tag Manager and the Meta Pixel (Facebook and Instagram).
These tools may collect information about visits, interactions, traffic sources and ad performance.
Tools that use analytics or marketing cookies are used only after the required consent. Their providers may process data under their own privacy rules.
The current version of the Site does not embed these tools.
7. Recipients of personal data
The controller may share personal data only with parties whose services are needed to run the activity and the Site.
Recipients may include:
- hosting providers;
- IT service providers;
- Telegram, as the provider of form notifications;
- email providers;
- CRM providers;
- analytics and advertising providers;
- accountants and legal advisers;
- public authorities where the law requires it.
The controller does not sell users’ personal data.
8. Transfers outside the EEA
Because technology providers, including Telegram, are used, personal data may be transferred outside the European Economic Area.
Where that happens, the controller uses the safeguards required by the GDPR, in particular an adequacy decision or standard contractual clauses where they apply.
You can ask the controller for information about those safeguards.
9. Storage period
Personal data is kept for as long as the purpose and legal basis require.
- Contact-form data is kept for as long as needed to handle the enquiry and any related claims.
- Contract data is kept for the term of the contract and for the period required by law.
- Accounting and tax data is kept for the statutory period.
- Data processed on the basis of consent is kept until consent is withdrawn or the purpose ends, unless another legal basis applies.
- Cookie data is kept for the lifetime of each cookie.
10. Your rights
People whose data is processed have the rights provided by the GDPR, within the limits of the law:
- the right of access;
- the right to rectification;
- the right to erasure;
- the right to restriction of processing;
- the right to data portability;
- the right to object;
- the right to withdraw consent at any time;
- the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland.
To exercise these rights, contact the controller at [email protected].
11. Security
The controller uses appropriate technical and organisational measures to protect personal data against accidental loss, destruction, unauthorised access, disclosure or unlawful processing.
12. Profiling and automated decisions
For marketing, user data may be used for advertising profiling by external providers if the required consent has been given.
The controller does not make decisions based solely on automated processing that produce legal effects or similarly significantly affect users.
13. Links to other websites
The Site may link to WhatsApp. The form enquiry is delivered through Telegram.
The controller is not responsible for the privacy practices of those independent operators. Please read the privacy policy of each external service.
14. Changes
The controller may update this Privacy Policy, in particular when the law, the technology used or the services change.
The current version will be published on the Site.
15. Contact
Questions about privacy, personal data or GDPR rights can be sent to:
Organisation: Uliana Serba
Controller: Uliana Serba Soprano
Address: ul. Zbożowa 4, 30-002 Kraków, Poland
Email: [email protected]
Phone: +48 889 977 398
