Privacy Policy
1. This Privacy Policy sets out the rules for processing personal data obtained through the website flowintegrationmethod.com, hereinafter referred to as the “Website”.
2. The owner of the Website and, at the same time, the Data Controller is Agnieszka Sztrauch, 14 Norwich Road, Doncaster DN2 4QD, hereinafter referred to as the “Controller”.
3. Personal data collected by the Controller through the Website is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), also referred to as the GDPR.
4. The Controller takes particular care to respect the privacy of Customers visiting the Website.
§ 1 Type of data processed, purposes and legal basis
1. The Controller collects information about natural persons performing a legal act not directly related to their business activity, natural persons running a business or professional activity in their own name, and natural persons representing legal persons or organisational units without legal personality to which the law grants legal capacity, running a business or professional activity in their own name, hereinafter collectively referred to as Customers.
2. The Controller processes Customers’ personal data in connection with the use of the contact form on the Website, to the extent necessary to perform a contract or to take steps prior to entering into it. The legal basis for processing is Article 6(1)(b) GDPR.
3. When using the contact form, the Customer provides the following data:
- email address
- first name
- telephone number
4. While using the Website, additional information may be collected, in particular: the IP address assigned to the Customer’s computer or the external IP address of the Internet service provider, domain name, browser type, access time and operating system type. Navigational data may also be collected, including information about links Customers choose to click or other actions taken on the Website, for purposes related to the provision of services, as well as for technical, administrative, analytical and statistical purposes. In this respect, the legal basis for processing is also Article 6(1)(f) GDPR, i.e. processing necessary for the purposes of the legitimate interests pursued by the Controller, namely ensuring IT security, managing the Website and improving the functionality of the Website and the services provided.
§ 2 Recipients of data
1. Customers’ personal data is transferred to service providers used by the Controller in running the Website. Depending on contractual arrangements and circumstances, these service providers either act on the Controller’s instructions as to the purposes and means of processing the data (processors) or determine the purposes and means of processing themselves (controllers).
1.1. Processors. The Controller uses providers who process personal data solely on the Controller’s instructions. These include, among others, providers of hosting services, accounting services, marketing systems, website traffic analysis systems and systems for analysing the effectiveness of marketing campaigns.
1.2. Controllers. The Controller uses providers who do not act solely on its instructions and who determine the purposes and means of using Customers’ personal data themselves. They provide electronic payment and banking services.
2. Location. Service providers are based mainly in Poland and in other countries of the European Economic Area (EEA).
3. Upon request, the Controller discloses personal data to authorised state authorities, in particular to the Public Prosecutor’s Office, the Police, the President of the Personal Data Protection Office, the President of the Office of Competition and Consumer Protection or the President of the Office of Electronic Communications.
§ 3 Data retention period
1. Customers’ personal data is stored as follows:
1.1. Where the legal basis for processing personal data is consent, the Customer’s personal data is processed by the Controller until consent is withdrawn and, after withdrawal, for a period corresponding to the limitation period for claims that may be raised by or against the Controller. Unless a specific provision states otherwise, the limitation period is six years, and three years for claims for periodic payments and claims related to running a business.
1.2. Where the legal basis for processing is the performance of a contract, the Customer’s personal data is processed by the Controller for as long as is necessary to perform the contract and, thereafter, for a period corresponding to the limitation period for claims. Unless a specific provision states otherwise, the limitation period is six years, and three years for claims for periodic payments and claims related to running a business.
§ 4 Cookies and IP address
1. The Website uses small files called cookies. They are saved by the Controller on the end device of the person visiting the Website, if the web browser allows it. A cookie usually contains the name of the domain it comes from, its “expiry time” and an individual, randomly selected number identifying the file. Information collected by means of such files helps tailor the products offered by the Controller to the individual preferences and real needs of visitors to the Website.
2. The Controller uses two types of cookies:
2.1. Session cookies: when the browser session ends or the computer is switched off, the stored information is deleted from the device’s memory. The session cookie mechanism does not allow any personal data or confidential information to be collected from Customers’ computers.
2.2. Persistent cookies: these are stored in the memory of the Customer’s end device and remain there until they are deleted or expire. The persistent cookie mechanism does not allow any personal data or confidential information to be collected from Customers’ computers.
3. The Controller uses its own cookies for the purpose of:
3.1. analysis, research and audience measurement, in particular to create anonymous statistics that help understand how Customers use the Website, which makes it possible to improve its structure and content.
4. The Controller uses third-party cookies for the purpose of:
4.1. displaying, on the Website’s information pages, a map showing the location of the Controller’s office, using the maps.google.com service (third-party cookie controller: Google Inc, based in the USA).
5. The cookie mechanism is safe for the computers of Customers visiting the Website. In particular, viruses or other unwanted or malicious software cannot reach Customers’ computers this way. Nevertheless, Customers can restrict or disable cookie access to their computers in their browser settings. If this option is used, the Website can still be used, except for functions that by their nature require cookies.
6. The Controller may collect Customers’ IP addresses. An IP address is a number assigned to the computer of a person visiting the Website by their Internet service provider. The IP number enables access to the Internet. In most cases it is assigned to the computer dynamically, i.e. it changes with each connection to the Internet, and for this reason it is generally treated as non-personal identifying information. The Controller uses the IP address to diagnose technical problems with the server, to create statistical analyses (e.g. to determine which regions the most visits come from), as information useful for administering and improving the Website, and for security purposes and the possible identification of unwanted automated programs that browse the Website’s content and burden the server.
§ 5 Rights of data subjects
Persons whose data is processed have the following rights:
1. The right to withdraw consent to data processing at any time:
1.1. The Customer has the right to withdraw any consent they have given.
1.2. Withdrawal of consent takes effect from the moment consent is withdrawn.
1.3. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
1.4. Withdrawal of consent does not have any negative consequences for the Customer, but it may prevent further use of services or functions which, under the law, the Controller may only provide with consent.
2. The right to object to data processing:
2.1. The Customer has the right to object at any time, on grounds relating to their particular situation, to the processing of their personal data based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions. The Controller may then no longer process that personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or grounds for the establishment, exercise or defence of legal claims.
2.2. Unsubscribing by email from marketing communications about products or services will be treated as the Customer’s objection to the processing of their personal data, including profiling for those purposes.
3. The right to erasure (“right to be forgotten”):
3.1. The Customer has the right to request the erasure of all or some of their personal data.
3.2. The Customer has the right to request the erasure of personal data if:
3.2.1. the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
3.2.2. they have withdrawn a specific consent, to the extent that the personal data was processed on the basis of that consent;
3.2.3. they have objected to the processing under Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or they have objected to the processing under Article 21(2) GDPR;
3.2.4. the personal data is processed unlawfully;
3.2.5. the personal data must be erased to comply with a legal obligation under Union or Member State law to which the Controller is subject;
3.2.6. the personal data was collected in relation to the offer of information society services.
3.3. Despite a request for erasure of personal data, in connection with an objection or withdrawal of consent, the Controller may retain certain personal data to the extent that processing is necessary for the establishment, exercise or defence of legal claims, or for compliance with a legal obligation requiring processing under Union or Member State law to which the Controller is subject. This applies in particular to personal data including first name, surname and email address, which are retained for the purpose of handling complaints and claims related to the use of the Controller’s services, as well as the home or correspondence address and order number, which are retained for the purpose of handling complaints and claims related to concluded sales contracts or the provision of services.
4. The right to restriction of processing:
4.1. The Customer has the right to request the restriction of processing of their personal data. Until the request has been considered, it prevents the use of certain functions or services whose use would involve processing the data covered by the request. The Controller will also not send any communications, including marketing communications.
4.2. The Customer has the right to request the restriction of the use of personal data in the following cases:
4.2.1. when they contest the accuracy of their personal data, in which case the Controller restricts its use for the time needed to verify the accuracy of the data, but no longer than 7 days;
4.2.2. when the processing is unlawful and, instead of erasure, the Customer requests restriction of its use;
4.2.3. when the personal data is no longer necessary for the purposes for which it was collected or used, but the Customer needs it for the establishment, exercise or defence of legal claims;
4.2.4. when the data subject has objected to the processing of their data, pending verification of whether the legitimate grounds of the Controller override the grounds of the data subject’s objection.
5. The right to request access to their personal data from the Controller and to receive a copy:
5.1. The Customer has the right to obtain confirmation from the Controller as to whether it processes their personal data and, if so, the Customer has the right to:
5.1.1. access their personal data;
5.1.2. obtain information about the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of that data, the planned period of storage of the Customer’s data or the criteria used to determine that period (where it is not possible to specify the planned period), the Customer’s rights under the GDPR and the right to lodge a complaint with a supervisory authority; where the personal data was not collected from the data subject, any available information about its source; information about automated decision-making, including profiling referred to in Article 22(1) and (4) GDPR, and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject; and information about the safeguards applied in connection with the transfer of personal data outside the European Union;
5.1.3. obtain a copy of their personal data. The right to obtain a copy must not adversely affect the rights and freedoms of others.
6. The right to rectification (correction) of data:
6.1. The Customer has the right to request that the Controller rectify inaccurate personal data concerning them without undue delay. Taking into account the purposes of processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement, by sending a request to the email address given in § 6 of this Privacy Policy.
7. The right to data portability:
7.1. The Customer has the right to receive the personal data they have provided to the Controller and then transmit it to another data controller of their choice. The Customer also has the right to request that the personal data be transmitted by the Controller directly to such a controller, where technically feasible. In this case, the Controller will send the Customer’s personal data as a file in csv format, which is a commonly used, machine-readable format that allows the data to be transmitted to another data controller.
8. The right to lodge a complaint with a supervisory authority:
8.1. The Customer has the right to lodge a complaint with the President of the Personal Data Protection Office (Poland) regarding a breach of their rights to the protection of personal data or other rights granted under the GDPR.
9. When a Customer exercises any of the above rights, the Controller fulfils or refuses the request without undue delay, and in any event within one month of receiving it. However, if, due to the complex nature of the request or the number of requests, the Controller is unable to fulfil the request within one month, it will do so within a further two months, having first informed the Customer, within one month of receiving the request, of the intended extension and the reasons for it.
10. The Customer may submit complaints, enquiries and requests to the Controller regarding the processing of their personal data and the exercise of their rights.
§ 6 Changes to the Privacy Policy
1. This Privacy Policy may be amended, and the Controller is not obliged to give notice of such changes.
2. Please send any questions relating to this Privacy Policy to: a.sztrauch@yahoo.co.uk
3. Date of last modification: 24 June 2026.