version effective from 05.08.2022
1.1 Who is the administrator of the iyoni.app website?
The administrator of iyoni.app website is Katarzyna Goch, conducting business activities under the name LIFEBITE KATARZYNA GOCH, entered into the register of entrepreneurs of the Central Register and Information on Economic Activity kept by the Minister of Economy, at ul. Prof. Aleksandra Martyniaka 16 lok. 1, 10-763 Olsztyn, NIP 6912282020, REGON 386045360, (i.e. us).
2. PERSONAL DATA
2.1 Which legal act regulates the processing of your personal data?
Your personal data is collected and processed by us in accordance with the provisions of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27/04/2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing of Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119, p. 1), commonly referred to as GDPR. To the extent not regulated by GDPR, the processing of your personal data is governed by the Polish Personal Data Protection Act of 10 May 2018.
2.2 Who is the data controller for your personal data?
The controller of your personal data is Katarzyna Goch, conducting business activities under the name LIFEBITE KATARZYNA GOCH, entered into the register of entrepreneurs of the Central Register and Information on Economic Activity kept by the Minister of Economy, at ul. Prof. Aleksandra Martyniaka 16 lok. 1, 10-763 Olsztyn, NIP 6912282020, REGON 386045360, phone: , email: You can contact us regarding your personal data via:
• email: email@example.com
3. HOW WE PROCESS THE PERSONAL DATA THAT YOU PROVIDE TO US?
3.1 Which personal data we process and for what purposes?
Our website features a number of services for which we process various personal data on different legal bases.
a. To analyse traffic on the website, we process your personal data such as IP address and browser data. This data is processed on the basis of Article 6 (1) (f) GDPR, i.e. processing necessary for the purposes of the legitimate interests pursued by the controller which consists of analysing user traffic on the website. The data will be processed until you object to such processing.
b. For the purposes of direct marketing of our services, including remarketing, we process your personal data such as IP address and browser data. This data is processed on the basis of Article 6 (1) (f) GDPR, i.e. necessary for the purposes of the legitimate interests pursued by the controller which consists of direct marketing of our own services, including remarketing. The data will be processed until you object to such processing.
c. If you contact us, in order to ensure continuity of communication and enable contact with the Controller in matters regarding our business activities, we process your personal the data such as name, surname, e-mail address, telephone number and correspondence address. Your data is processed on the basis of Article 6 (1) (f) GDPR i.e. necessary for the purposes of the legitimate interests pursued by the controller which consists of maintaining continuity of communication and enabling contact with the Company in matters regarding our business activities. The data will be processed until you object to such processing.
d. For compliance with legal obligations to which the controller is subject, specifically tax and accounting regulations, we process your personal data such as name, surname, company name, PESEL number, NIP or REGON number, e-mail address, correspondence address, telephone number and bank account number. This data is processed pursuant to article 6 (1) (c) GDPR i.e. processing is necessary for compliance with legal obligations to which the controller is subject, specifically tax and accounting regulations. The data will be processed until the expiry of the legal obligations to which the controller is subject and which justify such processing.
3.2 Voluntary provision of personal data
The provision of your personal data is voluntary on your part, but it is necessary for us to provide you with our services e.g. sending a newsletter or creating an account.
3.3 Recipients of personal data
The current list of entities to which we disclose your personal data can be found here.
3.4 Automated decision-making (including profiling)
Your personal data will not be used for automated decision-making or profiling.
3.5 Will your personal data be transferred outside the EEA or to international organizations?
To enable the use of Google services, your personal data may be transferred to the United States, where Google LLC servers are located. Google LLC is listed as Privacy Shield participant (link: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active) and applies Model Contractual Clauses for the transfer of personal data which are approved by the European Commission. To use Facebook services, your personal data may be transferred to the United States, where Meta Inc. servers are located. Meta Inc. listed as an organization participating in the Privacy Shield framework (link: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active) for th Workplace service and ads and measurement products. Meta Platforms Ireland Limited transfers personal data to Meta Inc. on the basis of the Annex on the transfer of European data by Facebook, which includes the new Standard Contractual Clauses effective from 2022. More information can be found here:
4. What are your rights related to the processing of your personal data?
Pursuant to GDPR, you have the following rights:
● right of access by the data subject (Article 15 GDPR);
● right to rectification (Article16 GDPR);
● right to erasure (‘right to be forgotten’) (Article 17 GDPR);
● right to restriction of processing (Article 18 GDPR);
● right to object to processing of your personal data (Article 21 GDPR);
● right to data portability (Article 20 GDPR).
If you submit any of the above requests to us, we will provide you with information on actions taken on your request without undue delay and in any event within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests.
We shall inform you of any such extension within one month of receipt of the request, together with the reasons for the delay.
4.1 Can you withdraw your consent to the processing of your personal data?
You can withdraw your consent to the processing of your personal data at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. If you wish to withdraw your consent to the processing of your personal data, please send your request to: firstname.lastname@example.org
4.2 Complaints to the supervisory authority
If you consider that the processing of personal data relating to you infringes the personal data protection regulations, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The Polish supervisory authority within the meaning of the GDPR is the President of the Personal Data Protection Office who replaced GIODO on 25 May 2018.
5. COOKIE files
5.1 General information
While browsing the web pages of our internet service, cookies, hereinafter the “Cookies,” are used to ensure optimal operation of the website and enhance your experience. Cookies are small text files that are saved on your end device each time you use our website. Cookies allow us to identify the software you are using and tailor our service to your needs.
Cookies usually contain the name of the domain from which they come, duration of their storage on The device and values assigned to them.
The cookies we use are safe for your devices. Therefore, no viruses and no unwanted or malicious software can affect your devices via cookies.
5.3 Types of Cookies
We use two types of cookies:
Session cookies: stored and kept on your device until the web browser session is closed. The saved information is then permanently deleted from the memory of your device. This mechanism does not allow the acquisition of any personal data or confidential information from your device.
Persistent cookies: stored and kept on your device until deleted. Closing the web browser or switching off the device does not cause them to be removed from your device. This mechanism does not allow the acquisition of any personal data or confidential information from your device.
online shop configuration;
Cookies may be used by advertising networks, especially by Google, to deliver content marketing tailored to your preferences. For this purpose, information about how you navigate the web or the length of time spent on the site may also be stored.
To view and edit information on your preferences collected by Google advertising network, you can use the tool available here: https://www.google.com/ads/preferences/.
You may also change your cookie settings yourself at any time. To do so, go to your web browser settings or service configuration to change the settings for cookie storage and access to your device.
You may change these settings to disable automatic handling of cookies in your web browser or set the browser to notify you each time they are about to be stored on your device. Detailed information on the options and methods for handling cookies is available in the software (web browser) settings.