SOL
Privacy policy
Effective from 18 August 2026.
1. Data controller
The controller of your personal data is WINNERS Magdalena Grzywa, VAT ID (NIP) 9441757240, Aleja Rzeczypospolitej 27/11, 02-972 Warsaw, Poland.
Contact for data protection matters: kontakt@sol-world.pl.
2. Scope and purposes of processing
We process the data you provide in the contact or booking form (name, e-mail address, phone number, message content, any billing details and information relevant to safe participation, e.g. dietary preferences).
Purposes and legal bases:
- replying to your enquiry and staying in touch — Art. 6(1)(b) and (f) GDPR (steps prior to entering into a contract and our legitimate interest),
- concluding and performing the retreat participation agreement — Art. 6(1)(b) GDPR,
- accounting and tax settlements, including invoices — Art. 6(1)(c) GDPR,
- establishing or defending legal claims — Art. 6(1)(f) GDPR,
- publishing your image in brand materials — solely on the basis of your voluntary consent, Art. 6(1)(a) GDPR.
3. Retention period
Correspondence data is kept until the matter is closed and for the limitation period of possible claims. Accounting data is kept for 5 years from the end of the tax year. Data processed on the basis of consent is kept until the consent is withdrawn.
4. Recipients of the data
Data may be entrusted to entities supporting us organisationally and technically: our accounting office, e-mail and hosting providers, the accommodation venue to the extent necessary to deliver the stay, and the teachers leading the sessions. We do not sell data and we do not transfer it outside the EEA without appropriate safeguards.
5. Your rights
You have the right to access your data, rectify it, erase it, restrict processing, data portability, object to processing based on legitimate interest, and withdraw consent at any time (without affecting the lawfulness of processing carried out before withdrawal).
To exercise your rights, write to kontakt@sol-world.pl. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
6. Providing data is voluntary
Providing data in the form is voluntary but necessary for us to reply and to handle your booking. Consent to the publication of your image is entirely voluntary and does not affect your ability to take part in a retreat.
7. No profiling, no transfers outside the EEA
We do not take automated decisions about you and we do not profile your data. As a rule, data is not transferred outside the European Economic Area; where a service provider (e.g. an e-mail provider) processes data outside the EEA, this takes place on the basis of standard contractual clauses approved by the European Commission.
8. Security and cookies
We apply organisational and technical measures protecting data against unauthorised access, including an encrypted connection (HTTPS) and restricted access to mailboxes.
This website uses only cookies strictly necessary for it to work properly — we do not use analytics, marketing or tracking tools, which is why we do not ask for cookie consent. You can change cookie settings in your browser.
9. Changes to this policy
We may update this policy, for example if the controller's details or the scope of our services change. The current version is always available on the website, and we inform the people we are in contact with about material changes.