TYLZA CORPORATION
Privacy policy
Effective from 6 October 2026.
1. Data controller
The controller of your personal data is TYLZA CORPORATION sp. z o.o., registered office in Warsaw, ul. Kartograficzna 58c/12, 03-290 Warszawa, Poland, KRS 0001235720, NIP (VAT) 5243071095, REGON 544520474 (the “Controller”).
For anything related to personal data, write to biuro@tylza.pl.
2. What data and why
We only collect data you enter yourself in a form on this site, and we use it only to handle your request.
| Source | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| “Book an online session” form | full name or nickname, email, phone/WhatsApp, chosen service, date and time, message | arranging and holding the session (consultation, mixing, mastering) and contacting you about it | Art. 6(1)(b) (steps prior to entering into a contract and its performance) and Art. 6(1)(a) (your consent) |
| Contact form | name, email, subject, message | replying to your message | Art. 6(1)(a) (your consent) and Art. 6(1)(f) (legitimate interest: correspondence) |
| Every visit | IP address, browser type, time of visit (server logs) | site security and abuse prevention | Art. 6(1)(f) (legitimate interest) |
If a contract is concluded, data needed for billing is also kept to meet tax and accounting obligations (Art. 6(1)(c) GDPR).
Providing data is voluntary, but without it we cannot book a session or reply to you. We do not make automated decisions about you or profile you.
3. Who receives the data
We do not sell data or share it for marketing. Only the technical service providers we use, acting on our behalf, have access to it:
- Cloudflare, Inc.: website hosting, form handling and sending form emails,
- Google Ireland Ltd. / Google LLC: email and calendar (Google Workspace), where booked dates are saved,
- CallMeBot and WhatsApp (Meta Platforms Ireland Ltd.): notifying the Controller of a new booking (the booking summary is sent to the Controller’s WhatsApp).
Some of these providers may process data outside the European Economic Area, in particular in the USA, on the basis of the European Commission’s adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses approved by the European Commission.
4. How long we keep data
- booking data: as long as needed to arrange and hold the session; if a contract is concluded, for the limitation period of claims and the period required by tax law (usually 5 years from the end of the tax year),
- contact form messages: until the conversation ends, then for no more than 12 months,
- server logs: according to the hosting provider’s settings, usually no longer than a few days.
If you withdraw consent or successfully object, we will delete the data earlier unless the law requires us to keep it.
5. Your rights
You have the right to:
- access your data and receive a copy,
- rectify your data,
- erase your data,
- restrict processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).
To exercise these rights, write to biuro@tylza.pl. You may also lodge a complaint with the President of the Polish Personal Data Protection Office (PUODO, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).
6. Cookies
This site does not use advertising, analytics or tracking cookies, and does not embed third-party content that would set them. That is why we do not show a consent banner.
Only files strictly necessary for the site to work and stay secure may be used (e.g. bot protection by the hosting provider Cloudflare). The /admin editing panel, used only by the Controller, stores sign-in data in the browser. Such files do not require consent under Polish electronic communications law. You can block them in your browser settings, but some features may then stop working.
7. Changes
If we change how we process data, we will update this page and the date at the top.