Privacy policy

Privacy policy
revision of 10.06.2025.
IE Elena Ko
Kwk nummer 66840791
Torenlaan 5B
1402 AT Bussum
Nederland
movewithelena@gmail.com
hello@movewithelena.online

Data Controller

IE Elena Ko

Kwk nummer 66840791

Torenlaan 5B

1402 AT Bussum

Nederland

movewithelena@gmail.com

What is this policy about?
The Policy contains information about how the Data Controller processes your personal data and ensures their security and confidentiality.
Resources – electronic resources, including social networks, services, platforms, instant messengers, channels registered in his name, website.
You will learn from the Policy what personal data the Data Controller receives and how it uses it.
The Data Controller processes your personal data in accordance with the requirements of the General Data Protection Regulation (hereinafter referred to as the GDPR) and other regulatory legal acts in the field of personal data protection and processing, as well as internationalми standards and Acts.
When processing personal data, the Data Controller adheres to the principles of legality, fairness, transparency, data processing without prejudice to the dignity of the data, limiting the purpose, minimizing the data, authenticity and accuracy of the data, limiting the data retention period and data security.

What is personal data?
Personal data is any information about a person (the subject of personal data) by which it can be determined.
The Data Controller processes only those personal data that are listed in the Policy and that characterize you as a user of Resources.
You can consent to the processing of personal data when using Resources, filling out feedback forms on Resources, and using other methods provided for in the Policy.

Confidentiality commitment:
The Data Controller undertakes to:

keep your data safe and sound.
do not use your data in an illegal way.
provide you with complete information regarding the use and processing of your personal data.

On what basis does the Data Controller process personal data?
The Data Controller processes personal data on the following legal grounds:

Consent of the personal data subject (GDPR Article 6(1) (a) - applies to the processing of data transmitted when using Resources, filling out feedback forms, subscribing to newsletters, publishing reviews, using cookies and other similar cases.
Provision of services, performance of contractual obligations (GDPR Article 6 (1) (b – - applies to the processing of data necessary for the provision of services to the User, as well as when entering into a service contract with him.
Fulfillment of legal obligations imposed on the Data Controller that are mandatory for compliance with the law (GDPR Article 6 (1) (c) applies to the processing of personal data necessary to meet the requirements of legislation, including tax accounting, accounting statements, and compliance with government regulations.
Protection of the Data Controller's legitimate interests (GDPR Article 6 (1) (f) applies when processing data to ensure site security, prevent fraud, protect the Data Controller's rights in case of disputes, as well as when transferring data to third parties to provide necessary services (for example, payment services).

What rights do you have?
Along with the Data Controller's commitment to confidentiality, your privacy is guaranteed by GDPR. According to this рregulation, you can request information from us regarding the use of your personal data. You can get the following information:

what information is processed in relation to you;
purpose of processing your data;
legal basis for data processing;
how the data was processed.
where this data is transmitted.
is the submission of data mandatory or voluntary, if mandatory – the legal consequences of refusing it

At any time when the Data Controller has your personal data, you can exercise the following rights:

Right to receive information	You can request from the Data Controller information about the processing of your personal data, including information about what data is being processed, for what purpose, on what legal basis, how it is collected, to whom it is transmitted, and on what grounds
Right of access	You have the right to request a copy of the personal data that you have Data Controller
Right to correct, update, supplement	You can ask the Data Controller to correct, update or supplement inaccurate or incomplete personal data
Right to block, delete or destroy personal data	You can request the deletion of data that the Data Controller has about you if they are incompleteе, inaccurateе, outdatedе or collected in violation of the law for except in cases where the Data Controller is required to store this data by law
Right to revoke	At any time you can withdraw your consent to data processing
Right to appeal	If you believe that the Data Controller processes your personal data in violation of legal requirements or otherwise violates your rights, you have the right to file a complaint with the Personal Data Protection Service or to the court

You can contact the Data Controller if you want to clarify the procedure for exercising other rights provided for in the GDPR.

How does the Data Controller process personal data?
The Data Controller processes personal data both digitally (using automatic and semi-automatic means) and manually (using non-automatic means). In this case, the Data Controller is limited to the following actions:

collecting
record
systematization
accumulation
keeping
clarification (update, change)
extract
usage
transfer (provision, access)
blocking it
removal
destruction of personal data

For what purposes does the Data Controller process your personal data?

Purpose	Personal data	Category	Legal basis	Processing period	Destruction procedure
Website operation	IP address, location data, cookies	normal	GDPR Article 6 (1) (a, b, f)	before the goal is achieved or consent to processing is withdrawn	deletion from the Data Controller's database
Processing of an application for services and period of service provision	FULL name, e-mail, mobile phone number, Instagram id, account details	usual	GDPR Article 6 (1) (b)	before achieving the goal or withdrawing consent to processing	deletion from the Data Controllerr's database
Conclusion and execution of the contract	FULL name, e-mail, mobile phone number, account details, passport data	usual	GDPR Article 6 (1) (b)	until the goal is achieved or consent to processing is withdrawn	deletion from the Data Controller's database
Advertisements and newsletters	FULL name, e-mail, mobile phone number	regular	GDPR Article 6 (1) (a, f)	until the goal is achieved or consent to processing	deletion from the Data Controller's database
Publication of reviews/marketing goals	FULL name, e-mail, Instagram id	regular	GDPR Article 6(1) (a, f)	before achieving the goal or revoking consent to processing	deletion from the Data Controller's database

What are cookies?
Cookies are small text files containing letters and numbers that are downloaded to the user's device when they visit certain websites. They allow sites to identify the user's device and ensure the correct functioning of the services.
To ensure the correct operation of the site and provide a personalized interaction experience, the Data Controller uses cookies. These cookies allow you to recognize the user during repeated visits, save their preferences, and adapt the services provided to meet individual requests.
The information stored in these cookies transmitted and stored on the aforementioned metric services (We use third-party analytics tools (such as Google Analytics, Facebook Pixel) to understand usage patterns and improve our services. These tools may use cookies or similar technologies to collect data). By visiting website, you consent to the Data Controller's processing and transfer of data to metric services.
You can block metric services. However, when metric services are blocked, some functions of the website may not be available.

Does the Data Controller transfer your personal data to third parties?
The Data Controller uses the services of third parties, which help to provide certain solutions for the high-quality provision of services by the Data Controller. For this purpose, the user's personal data may be transferred to the following recipients:

payment service providers that can receive (depending on the payment method and flow, for example, phone number, e-mail, address, cardholder name, card expiration date, etc.) for payment processing. The Data Controller does not collect or store payment information. The information is exclusively and directly transmitted to the relevant payment processor
persons who provide legal protection to the Data Controller or third parties in case of violation of their rights or threat of violation of their rights, including violation of laws or regulatory documents
persons who provide users with access to Resources

Any other personal information not specified above (browsing history, browsers used, operating systems used, etc.) is subject to secure storage and non-distribution.

Cross-border data transfer
The transfer of personal data outside the EEA is possible only if there are appropriate guarantees provided for in art. 46 GDPR (for example, standard contractual provisions / SCC).

How does the Data Controller ensure the security of personal data?
The Data Controller protects the personal data that it stores from disclosure, complete or partial loss, as well as unauthorized access by third parties.
To do this, the Data Controller uses all necessary technical and organizational measures to ensure security and confidentiality, and constantly updates them with the latest technical developments.
If personal data is leaked, the Data Controller will:

Analyzes the incident and assesses the risks for the personal data subject,
Notifies the Netherland supervisory authority, Autoriteit Persoonsgegevens (AP), within 72 hours, providing information on the nature of the leak, the volume of affected data, possible consequences and measures taken.,
If necessary, notify the personal data subject if the leak creates a significant risk of violation of their rights.

What does the Performer not check?
The Data Controller cannot verify and therefore trusts you that you:

reached the age of a 16 years (We do not knowingly collect personal data from individuals under the age of 16 without parental consent)
provided your own reliable personal data

How do I contact the Performer?
If you have any questions regarding the processing of personal data, please contact the Data Controller by e-mail movewithelena@gmail.com
When contacting us, enter your name and contact details for feedback.
The Data Controller will respond to your request no later than 10 business days after receiving it.

Changing the Policy
The Data Controller can update the Policy terms based on the following:

Changes in legislation
Introduction of new technologies or methods for processing personal data
Changes in the Data Controllers structure or business processesИсполнителя
Introduction of new products or services that require updating approaches to personal data processing
Feedback from users or changes in the privacy policy of the Data Controller's partners

The Data Controller will send notifications about changes to the Policy if such changes are significant, using available methods.