Privacy Policy
I. Personal Data Controller
We kindly inform you that the controller of your personal data is:
4skills spółka z ograniczoną odpowiedzialnością with its registered office at ul. Ossowska 35/2, 05-220 Zielonka, entered into the Register of Entrepreneurs of the National Court Register (KRS) under number 0000854959, NIP (Tax ID): 125-170-86-07,
contact with the Controller – e-mail address: info@mcoaching.io,
hereinafter referred to as the “Company”.
The Company manages the mCoaching platform available at: https://mcoaching.io and the website https://www.mcoaching.io/
II. Purposes and legal bases for the processing of personal data
DATA OF WEBSITE VISITORS
| Purpose of processing | Scope of data | Legal basis |
|---|---|---|
| Contacting you | first name and surname; company; e-mail address or telephone number; place of employment; information regarding the matter in which you contact us. | The legal basis for such processing is Article 6(1)(f) of the GDPR, which allows us to pursue our legitimate interest, which in this case is responding to your message sent using the contact details provided on the website. |
| Archiving and evidential purpose | first name and surname; company; e-mail address or telephone number; place of employment; information regarding the matter in which you contact us. | The legal basis for such processing is Article 6(1)(f) of the GDPR, which allows the processing of personal data where the Company pursues its legitimate interest (in this case, the Company’s interest is to have personal data that allow it to prove certain facts related to your contacting the Company). |
| Analytical purpose | date and time of the visit; type of operating system; approximate location; type of web browser used to view the website; time spent on the website; visited subpages; IP address. | The legal basis for such processing is Article 6(1)(f) of the GDPR, which allows the processing of personal data where the Company pursues its legitimate interest (in this case, the Company’s interest is to learn about the users’ activity on the website). |
| Advertising, market research and analysis of user behaviour and preferences | date and time of the visit; type of operating system; approximate location; type of web browser used to view the website; time spent on the website; visited subpages; other data obtained through the use of cookies; other data collected by external providers of analytical, promotional and advertising tools (such as Google Analytics, Hotjar, Vimeo). | The legal basis for such processing is Article 6(1)(a) of the GDPR, which allows the processing of personal data on the basis of freely given consent (upon the first visit to the website you are asked for your consent to the use of such tools). |
| Use of cookies | information contained in cookies. | The legal basis for such processing is Article 6(1)(a) of the GDPR, which allows the processing of personal data on the basis of freely given consent (upon the first visit to the website you are asked for your consent to the use of cookies). |
| Fulfilment of obligations related to data protection | first name and surname; e-mail address; other data provided by you. | The legal basis for such processing is, firstly, Article 6(1)(c) of the GDPR, which allows the processing of personal data where such processing is necessary for the Company to comply with a legal obligation; secondly, Article 6(1)(f) of the GDPR, which allows the processing of personal data where the Company pursues its legitimate interest (in this case, the Company’s interest is to have knowledge about individuals who exercise their rights under the GDPR). |
| Establishment, exercise or defence of claims | first name and surname; company; e-mail address or telephone number; place of employment; information regarding the matter in which you contact us; data processed for advertising, market research and analysis of user behaviour and preferences; data processed for analytical purposes; data contained in cookies. | The legal basis for such processing is Article 6(1)(f) of the GDPR, which allows the processing of personal data where the Company pursues its legitimate interest (in this case, the Company’s interest is to have personal data that allow it to establish, pursue or defend against claims, including those of clients and third parties). |
DATA OF PERSONS DESIGNATED BY THE SERVICE RECIPIENT FOR CONTACT AND PERSONS AUTHORISED TO REPRESENT THE SERVICE RECIPIENT (E.G. ATTORNEYS, MEMBERS OF THE MANAGEMENT BOARD)
| Purpose of processing | Scope of data | Legal basis |
|---|---|---|
| Contacting you | first name and surname; position or function; company; e-mail address or telephone number; information regarding the matter in which you contact us. | The legal basis for such processing is Article 6(1)(f) of the GDPR, which allows us to pursue our legitimate interest, which in this case is communication with you in order to conclude or perform a contract with the entity you represent. |
| Archiving and evidential purpose | first name and surname; position or function; company; e-mail address or telephone number; information regarding the matter in which you contact us. | The legal basis for such processing is Article 6(1)(f) of the GDPR, which allows the processing of personal data where the Company pursues its legitimate interest (in this case, the Company’s interest is to have personal data that allow it to prove certain facts related to your contacting the Company). |
| Fulfilment of obligations related to data protection | first name and surname; e-mail address; data regarding the request. | The legal basis for such processing is, firstly, Article 6(1)(c) of the GDPR, which allows the processing of personal data where such processing is necessary for the Company to comply with a legal obligation; secondly, Article 6(1)(f) of the GDPR, which allows the processing of personal data where the Company pursues its legitimate interest (in this case, the Company’s interest is to have knowledge about individuals who exercise their rights under the GDPR). |
| Keeping accounting records and tax documentation | first name and surname; company; home address or registered office address; Tax ID (NIP); e-mail address; invoice number; amount of remuneration; bank account number and bank details. | The legal basis for such processing is Article 6(1)(c) of the GDPR, which allows the processing of personal data where such processing is necessary for the Company to comply with legal obligations, in particular in the field of tax law. |
| Establishment, exercise or defence of claims | first name and surname; company; position or function; e-mail address; information regarding the matter in which you contact us. | The legal basis for such processing is Article 6(1)(f) of the GDPR, which allows the processing of personal data where the Company pursues its legitimate interest (in this case, the Company’s interest is to have personal data that allow it to establish, pursue or defend against claims, including those of clients and third parties). |
DATA OF SERVICE RECIPIENTS (CLIENTS)
| Purpose of processing | Scope of data | Legal basis |
|---|---|---|
| Creating a Service Recipient account and concluding a contract with the Company | first name and surname; e-mail address; password; registration date; date of conclusion of the agreement; subject of the agreement; home address or registered office address, and possibly correspondence address. | The legal basis for such processing is Article 6(1)(b) of the GDPR, which allows the processing of personal data where it is necessary for the performance of a contract or in order to take steps prior to entering into a contract. |
| Sending e-mail notifications | first name and surname; company; e-mail address. | The legal basis for such processing is Article 6(1)(f) of the GDPR, which allows the processing of personal data where the Company pursues its legitimate interest (in this case, the Company’s interest is to inform the client about activities related to the provision of services in order to improve the user experience of the service). |
| Issuing invoices and fulfilling other obligations arising from tax law | first name and surname; company; home address or registered office address; Tax ID (NIP); e-mail address; invoice number; amount of remuneration; bank account number and bank details. | The legal basis for such processing is Article 6(1)(c) of the GDPR, which allows the processing of personal data where such processing is necessary for the Company to comply with legal obligations, in particular in the field of tax law. |
| Fulfilment of obligations related to data protection | first name and surname; e-mail address; other data provided by you. | The legal basis for such processing is, firstly, Article 6(1)(c) of the GDPR, which allows the processing of personal data where such processing is necessary for the Company to comply with legal obligations; secondly, Article 6(1)(f) of the GDPR, which allows the processing of personal data where the Company pursues its legitimate interest (in this case, the Company’s interest is to have knowledge about individuals who exercise their rights under the GDPR). |
| Establishment, exercise or defence of claims | first name and surname; company; home address or registered office address; Tax ID (NIP); e-mail address; telephone number; invoice number; amount of remuneration; bank account number and bank details; password; subject of the agreement. | The legal basis for such processing is Article 6(1)(f) of the GDPR, which allows the processing of personal data where the Company pursues its legitimate interest (in this case, the Company’s interest is to have personal data that allow it to establish, pursue or defend against claims, including those of clients and third parties). |
III. Cookies
The Company uses so-called cookies on its website, i.e. short text information stored on the user’s computer, phone, tablet or other device. They can be read by our system, as well as by systems belonging to other entities whose services we use.
Cookies perform many useful functions on the website which we describe below (if this information is insufficient, please contact us):
- ensuring security – cookies are used to protect the user’s personal data from access by unauthorised persons;
- impact on processes and performance of the website – cookies are used to ensure that the website works efficiently and that you can use the functions available on it, for example by remembering your settings between visits. Thanks to them you can navigate smoothly through the website and its individual pages;
- session status – cookies often store information about how visitors use the website, e.g. which subpages they view most frequently. They also enable the identification of errors displayed on some subpages. Cookies used to save the so-called “session state” help to improve services and increase the comfort of browsing the website;
- creating statistics – cookies are used to analyse how visitors use the website (how many users visit the site, how long they stay on it, which content attracts the most interest, etc.). This allows us to constantly improve the website and adapt its operation to users’ preferences. To track activity and create statistics, we use Google tools such as Google Analytics and Hotjar;
- use of social features – on the website we use social features, such as Facebook Pixel, LinkedIn, Vimeo, social plugins that enable liking our page, sharing content in social networks and subscribing to our profiles. For this to be possible, we use cookies provided by those entities.
Your web browser by default allows cookies to be stored on your device, therefore during your first visit we ask for your consent to their use. If you do not wish cookies to be used while browsing the website, you can change your browser settings – completely block the automatic handling of cookies or request notification each time cookies are stored on your device. You can change your settings at any time.
However, respecting the autonomy of all persons using the website, we feel obliged to warn that disabling or limiting the use of cookies may cause significant difficulties in using the website, e.g. the need to log in on every subpage, longer loading times or limitations in the use of certain functionalities.
IV. Tools used on the website
For the purposes of advertising and promotion, as well as improving the quality of our services, the Company uses IT tools provided by external suppliers.
Currently, the Company uses the following tools:
- Google Analytics – to collect data about users visiting the Company’s website;
- Hotjar – to record data on user behaviour on the website, such as navigation, scrolling, cursor movement, approximate location, device used, operating system, browser type;
- social features – we enable the use of social features such as sharing content in social media and subscribing to social profiles. Using these features involves the use of cookies from administrators of social media services such as Facebook, Vimeo, YouTube, LinkedIn.
The use of the above tools takes place on the basis of your consent expressed when you first enter the Company’s website.
If you believe that we should not process your personal data using these tools, you can withdraw your consent at any time (instructions can be found in the “Right to withdraw consent” section) and block the collection of data for their purposes.
To block Google Analytics, you should download and install the appropriate browser add-on available at:
https://tools.google.com/dlpage/gaoptout?hl=pl
You can prevent Hotjar from measuring your activity by using the following link:
https://www.hotjar.com/legal/compliance/opt-out/
If you have any doubts, please contact us at: info@mcoaching.io
Of course, you can re-give your consent at any time and restore the operation of the above tools.
V. Right to withdraw consent
If the processing of personal data is based on consent, you may withdraw this consent at any time, at your sole discretion.
If you wish to withdraw your consent to the processing of personal data, simply send a message directly to the Company at: info@mcoaching.io
If the processing of your personal data was based on consent, its withdrawal does not render the prior processing unlawful. In other words, until you withdraw your consent, we are entitled to process your personal data, and the withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
VI. Requirement to provide personal data
Providing personal data is voluntary and depends on your decision. However, providing certain personal data may be necessary to meet your expectations regarding the use of the website.
Moreover, without your data it will not be possible to conclude or perform a contract, nor to contact you regarding such matters (in particular if you are a person designated for contact or representation of the Service Recipient).
If you contact us for any reason, providing your data may be necessary, for example to respond to your question.
Where legal regulations require us to process your data (e.g. tax law) – providing such data is obligatory.
VII. Automated decision-making and profiling
Your data is not used by us for automated decision-making, including profiling.
VIII. Recipients of personal data
Like most entrepreneurs, we use the assistance of other entities in our activity, which often involves the need to transfer personal data. Therefore, where necessary, we may transfer your data to a hosting provider, lawyers, banks, providers of invoicing tools, accountants and IT service providers.
In addition, it may happen that, on the basis of an applicable legal provision or a decision of a competent authority, we will be obliged to transfer your personal data to other entities, whether public or private. It is therefore difficult for us to predict who may request disclosure of your personal data. Nevertheless, we assure you that every such request for data disclosure is analysed very carefully and thoroughly to avoid unintentionally providing information to an unauthorised person.
IX. Transfer of personal data to third countries
We may transfer your data outside the European Economic Area or to an international organisation in connection with our cooperation with various entities. We assure you that data will be transferred only to countries in respect of which the European Commission has issued a decision confirming an adequate level of data protection, or with full compliance with legal requirements, including on the basis of appropriate agreements containing standard contractual clauses adopted by the European Commission, ensuring an adequate level of protection for the transferred personal data. You have the right to obtain a copy of these safeguards at any time.
We will provide you with additional explanations regarding the transfer of personal data at any time, in particular if this issue causes your concern.
X. Period of personal data processing
In accordance with applicable law, we do not process your personal data “indefinitely”, but only for the time necessary to achieve the specific purpose. After that period, your personal data will be irreversibly deleted or destroyed.
With regard to specific processing periods, we inform you that we process personal data for the following periods:
- for the duration of service provision – with respect to data processed in order to use the services offered;
- until the expiry of limitation periods – with respect to data processed for the purpose of concluding and performing a contract, establishing, pursuing or defending claims, and for fulfilling obligations under tax law;
- until consent is withdrawn or the purpose of processing is achieved – with respect to data processed on the basis of consent;
- until an effective objection is lodged or the purpose of processing is achieved – with respect to data processed on the basis of the Company’s legitimate interest, unless a different retention period is indicated above;
- until the data becomes outdated or no longer useful, but no longer than 2 years – with respect to data processed for the use of cookies and administration of the platform.
XI. Rights of data subjects
We kindly inform you that you have the right to:
- access your personal data;
- rectify your personal data;
- erase your personal data;
- restrict the processing of your personal data;
- object to the processing of your personal data;
- data portability.
The above rights may be limited where:
- there are legitimate grounds for processing which override your interests, rights and freedoms, or
- there are grounds for establishing, exercising or defending legal claims.
XII. Right to lodge a complaint
If you believe that your personal data is processed in breach of applicable law, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) in Poland.
XIII. Final provisions
In matters not regulated by this Privacy Policy, the provisions on personal data protection shall apply.
You will be informed of any changes to this Privacy Policy by e-mail or in any other manner appropriate to the way your data is processed.
This Privacy Policy has been in force since 01.10.2025.