Legal
Privacy policy
Last updated: 29 October 2026
Your privacy matters to me. This policy explains what personal data I collect, why, and the rights you have under the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Who is responsible
The data controller is:
Magdalena Korzynietz
Almería, Spain
NIE / EU VAT number: ESY2231765C
Email for privacy requests: info@magdalenakorzynietz.com
I process personal data for my professional activity as a speaking & storytelling coach, facilitator and trainer.
What I collect, why, and for how long
Coaching enquiries
- Data:
- Your name, email address and anything you write in your message to me.
- Legal basis:
- Taking steps at your request before a contract (Art. 6(1)(b) GDPR).
- Kept:
- As long as needed to answer you and follow up on your enquiry. If no booking follows, I delete it when it's no longer needed for that conversation.
Coaching bookings, payments and sessions
- Data:
- Name, email address, billing details, the option you bought, scheduling details and our communication. Card details are handled by Stripe — I never see your full card number.
- Legal basis:
- Performing our contract (Art. 6(1)(b) GDPR).
- Kept:
- For the duration of our coaching relationship, and afterwards only as long as needed to deal with possible claims within the legal limitation periods.
Invoices, accounting and tax
- Data:
- Name, billing details, amounts paid and invoices.
- Legal basis:
- Compliance with legal obligations (Art. 6(1)(c) GDPR).
- Kept:
- For the periods required by Spanish tax and accounting law.
Share Your Story event registrations
- Data:
- Name, email address and payment details when you buy a ticket via Stripe, and your registration details for the Zoom session.
- Legal basis:
- Performing our contract (Art. 6(1)(b) GDPR).
- Kept:
- As long as needed to run the event and deal with any questions about it; payment records are kept for the legally required accounting periods.
StoryMind access & newsletter
- Data:
- The details you enter in the MailerLite sign-up form, such as your name and email address. We use them to email you your StoryMind link and the newsletter.
- Legal basis:
- Your consent (Art. 6(1)(a) GDPR).
- Kept:
- Until you unsubscribe or withdraw your consent.
Storytelling School waitlist
- Data:
- The details you enter in the MailerLite sign-up form, such as your name and email address.
- Legal basis:
- Your consent (Art. 6(1)(a) GDPR).
- Kept:
- Until the School opens and you've been told about enrolment, or until you ask to be removed or withdraw your consent — whichever comes first.
Marketing emails
- Data:
- Your name and email address.
- Legal basis:
- Only with your separate, explicit consent (Art. 6(1)(a) GDPR). Buying coaching or sending an enquiry never signs you up automatically.
- Kept:
- Until you unsubscribe or withdraw consent. Every marketing email includes a way to unsubscribe.
Visiting this website
- Data:
- Technical data such as your IP address, browser and the pages requested, processed by the hosting and security providers.
- Legal basis:
- Legitimate interest in running a secure, working website (Art. 6(1)(f) GDPR).
- Kept:
- Kept by these providers for short periods under their own policies. I don't use analytics or tracking tools.
Personal data is stored securely and kept only as long as needed for the purpose it was collected for, or longer where the law requires it. Unsubscribing or withdrawing consent doesn't affect data I must keep for other legal reasons, such as invoices.
Who helps me process your data
I use these service providers. Each processes data only as needed for its role:
- Stripe — Payments for coaching and event tickets. Stripe also acts as an independent controller for some purposes, such as fraud prevention and its own legal obligations.
- Zoom — Online coaching sessions and Share Your Story gatherings.
- MailerLite — Newsletter and StoryMind access sign-ups, Storytelling School waitlist sign-ups and, where you've consented, emails. MailerLite is based in the EU.
- Namecheap (Private Email) — My business email account, which receives your enquiries and messages.
- WhatsApp (Meta) — Voice messages, only where we've agreed to use it as part of your coaching.
- Lovable and Cloudflare — Building, hosting and protecting this website.
I don't sell your data. I share it with public authorities, such as the tax authorities, only where the law requires it.
International transfers
Some of these providers, including Stripe, Zoom, Namecheap, Meta and Cloudflare, may process data outside the European Economic Area, for example in the United States. Where this happens, transfers rely on the safeguards provided by the GDPR, such as the EU–US Data Privacy Framework for certified companies or the European Commission's Standard Contractual Clauses.
Your rights
You have the right to:
- Access the personal data I hold about you
- Rectify data that is inaccurate or incomplete
- Erase your data where there's no longer a reason to keep it
- Restrict how your data is processed
- Object to processing based on legitimate interest
- Data portability — receive your data in a usable format
- Withdraw consent at any time, without affecting processing that happened before
To use any of these rights, email info@magdalenakorzynietz.com. I'll reply within one month. If you believe your data hasn't been handled properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), C/ Jorge Juan 6, 28001 Madrid — www.aepd.es.
Other information
I don't use your data for automated decision-making or profiling. My services are intended for adults.
The cookies this website uses are described in the Cookie Policy. I may update this policy when my services change; the date at the top shows the latest version.