Privacy Policy

Who is responsible for your data

Sofia Sherocka (Sofia Balance Method), Zagreb, Croatia. For any privacy question, get in touch through the form on the Contact page.

What we collect and why

• Private coaching application. Name, e-mail, phone or WhatsApp number, age, gender, where you'd like to train, goals and experience, information about injuries, pain or health conditions (for example pregnancy), and anything else you write. We use it to assess your application, adapt your program and arrange sessions. The legal basis is your consent (Art. 6(1)(a) of the General Data Protection Regulation, GDPR), your explicit consent for health data (Art. 9(2)(a)) and steps taken at your request before entering into a contract (Art. 6(1)(b)).
• Contact form. Name, e-mail and your message, so we can reply. The legal basis is your consent.
• Workshop booking. Name, e-mail, your mobile number if you give it, the workshop you are coming to and your note. They are used to organise the workshop, the payment and news about it. The legal basis is the steps we take at your request before entering into a contract (Art. 6(1)(b)) and your consent.
• Free PDF, workshop waitlist and e-mails. Your e-mail address (and name, if you enter it), to send the PDF, workshop announcements and occasional e-mails. The legal basis is your consent. Every e-mail has a one-click unsubscribe link.
• Website statistics, only with your consent. If you accept Google Analytics in the cookie notice: the pages you open, how you arrived, your type of device and browser and your approximate location. We use them to see what visitors read and to improve the site. The legal basis is your consent (Art. 6(1)(a)). Details are on the Cookies page.

We don't sell your data or pass it on to others for their marketing. We don't make automated decisions or profile you.

How long we keep it

• Coaching applications, workshop bookings and contact messages: up to 70 months after you send them, then they are deleted.
• If you become a client, the data needed for our work together is kept while it lasts, and invoices for as long as accounting and tax law require.
• Your e-mail address for the PDF, waitlist and e-mails: until you unsubscribe.
• Google Analytics statistics: data that can be linked to your browser for 14 months, after which only totals remain.

Who processes data for us

For some tasks we use trusted service providers (processors), who may only process data on our instructions:

• Website hosting: Cloudflare, Inc., USA. Transfers to the USA rely on the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.
• Applications and contact messages: stored in our own database on a web hosting provider's server in the EU.
• E-mail: Zoho Corporation B.V., the Netherlands (EU). For each new application or message, a short notice with your name and e-mail address arrives in our inbox. Your answers stay only in the database.
• Website statistics: Google Ireland Limited, Ireland (EU), only if you accept Google Analytics. Google may also process the data in the USA; such transfers rely on the EU-US Data Privacy Framework.
• E-mails and lists: UAB “MailerLite”, Lithuania (EU).

The videos at the top of the About and Online Community pages load from YouTube when the page opens, and YouTube videos in blog articles only load when you press play, both through youtube-nocookie.com (Google).

The online community runs on Skool (Skool, Inc., USA). If you join, the data you enter there is processed by Skool under its own privacy policy.

Security

The site only works over an encrypted connection (HTTPS). Only Sofia has access to applications and messages.

Your rights

You have the right to request access to your data, its correction or erasure, restriction of processing and data portability, and to object to processing. You can withdraw your consent at any time. This does not affect processing that took place before. Just get in touch, and we will reply within one month at the latest.

If you believe your data is being processed unlawfully, you can lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr, or with the data protection authority in your country.

Cookies

This website uses Google Analytics cookies only if you allow it, and no cookies for advertising. You can change your answer at any time with Cookie settings at the bottom of every page. See the Cookies page.

Changes

If we change how we process data, we will update this policy and the date at the top of the page.