Privacy Policy

Who we are

The website filipk.eu is operated by Filip Krzyzanowski under the brand FILIP K, based in Barcelona, Spain.

For applicable European data-protection law, Filip Krzyzanowski is the controller of personal information collected directly through this website and the related services described in this policy.

Questions about privacy can be sent to hello@filipk.eu.

Information we may collect

Depending on how you interact with FILIP K, we may collect:

• first name and last name
• email address and phone number
• messages and other information submitted through the contact form or sent directly
• workshop or retreat waiting-list information
• booking, attendance and payment-related information, such as the activity selected, transaction status and billing details supplied to a payment provider
• information reasonably needed to organise and safely deliver a booked experience
• technical information such as IP address, browser or device information, request timestamps, security logs and cookie or similar identifier data where applicable

Please do not include unnecessary sensitive personal information in a general contact-form message. Health information relevant to participation is handled separately where it is genuinely needed and subject to appropriate safeguards.

How information is collected

Information may be collected when you:

• submit the contact form on filipk.eu
• join a From Stressed to Resilient workshop waiting list
• join a TRE® workshop waiting list
• make or begin a retreat, workshop or other activity booking through an external checkout
• contact FILIP K directly by email, phone or another communication channel
• visit pages that use essential security technology, embedded content, or analytics and tracking where these are enabled

We may also receive limited booking or transaction information from the service providers used to operate waiting lists, checkouts and payments.

Why information is used

Personal information may be used to:

• respond to enquiries and provide requested information
• manage workshop and retreat waiting lists
• process and administer bookings and payments
• prepare, communicate about and deliver workshops, retreats and related experiences
• send confirmations, logistical information, service messages and other transactional communications
• send marketing communications only where you have consented or another lawful basis applies
• maintain website security, prevent spam, detect misuse and troubleshoot technical problems
• comply with accounting, tax, consumer-protection and other legal requirements

Legal bases for processing

We process personal information only where a lawful basis applies. Depending on the context, this may be:

• Consent, for example when you choose to join a waiting list or receive marketing communications. You may withdraw consent at any time.
• Performance of a contract or steps requested before entering a contract, for example when you request booking information, make a booking or participate in an activity.
• Legitimate interests, where appropriate, such as responding to relevant enquiries, administering the business, securing the website and preventing fraud or spam. These interests are balanced against your rights.
• Legal obligations, including applicable accounting, tax, safety and consumer-law requirements.

Service providers and third parties

Relevant information may be processed by trusted providers that support the website and business. Depending on the service used, these may include:

• Hostinger, for website hosting, server infrastructure and related email services
• Systeme.io, where used for waiting-list forms, communications, landing pages or booking workflows
• Stripe or another disclosed payment provider, where used to process a payment
• Google services, including reCAPTCHA on the contact form, Google-hosted fonts and embedded Google Maps; analytics services are included only if enabled
• Meta services, including Meta Pixel, only after you grant marketing-cookie consent

The public website uses Google reCAPTCHA for spam prevention and includes Systeme.io waiting-list integrations and embedded Google Maps on relevant retreat pages. Meta Pixel is available only after marketing-cookie consent. Google Analytics is not currently enabled in the public website code.

Providers process information under their own terms and privacy notices and, where they act on our behalf, only for the services they provide. Information may also be disclosed where required by law, to protect legal rights or to address a genuine safety concern.

Payments

Payments are processed through third-party checkout and payment services, such as Systeme.io and Stripe where applicable. Payment-card information is entered directly into the relevant provider's secure checkout, and FILIP K does not need to store full card details directly.

FILIP K may receive limited transaction information needed to confirm and administer a booking, such as your name, contact details, the amount paid, payment status and transaction reference.

Cookies and tracking technologies

The website and its service providers may use cookies, local storage and similar technologies that are necessary for security, forms, preferences, embedded content or checkout functionality. Google reCAPTCHA is used on the contact form to distinguish legitimate submissions from abuse. Embedded services, such as Google Maps or Systeme.io forms, may also process technical information or set their own cookies when loaded or used.

After you grant marketing-cookie consent, we may use Meta Pixel to measure website interactions, advertising attribution and campaign performance, and to create or optimise advertising audiences where permitted. Meta Pixel is not loaded before this consent. Revoking consent stops further Meta tracking on this site; it does not undo data already sent while consent was granted.

We remember your choice using filipk_marketing_consent, containing only "granted" or "denied", for approximately six months. It is shared across filipk.eu and booking.filipk.eu so the same choice can be respected on our booking site. Necessary functionality remains enabled. You can change your choice at any time using Cookie settings in the footer or here. Browser cookie controls are also available, although blocking essential or third-party functionality may affect parts of the site.

Data retention

Personal information is kept only for as long as reasonably necessary for the purpose for which it was collected. Enquiry and waiting-list information may be removed or anonymised when it is no longer needed, when consent is withdrawn, or when you ask to be removed, unless another lawful reason requires retention.

Booking, payment and transaction records may be retained for longer where needed to administer an activity, resolve disputes, establish or defend legal claims, or meet accounting, tax and other legal obligations. Security records are retained only for a proportionate period.

Data security

Reasonable technical and organisational measures are used to protect personal information against unauthorised access, misuse, alteration, loss or disclosure. These include restricted access, secure hosting and transport, server-side form validation, spam prevention and reputable service providers where appropriate.

No internet transmission or storage system can be guaranteed to be completely secure. Please use care when deciding what information to send online.

International data transfers

Some providers may process information outside Spain or the European Economic Area. Where European data-protection law requires it, we rely on a recognised legal mechanism, such as an adequacy decision, standard contractual clauses or other appropriate safeguards.

You may contact us if you would like further information about safeguards relevant to your personal information.

Marketing communications

Marketing emails are sent only where you have consented or where another lawful basis permits them. Transactional messages about an enquiry, waiting-list request or booking are not marketing.

You can unsubscribe at any time by using the link in a marketing message, where provided, or by emailing hello@filipk.eu. Withdrawing consent does not affect processing that was lawful before withdrawal.

Your data-protection rights

Subject to applicable European data-protection law and any relevant conditions or exemptions, you may have the right to:

• request access to your personal information
• request correction of inaccurate or incomplete information
• request deletion of information
• request restriction of processing
• object to processing, including direct marketing
• receive or transfer certain information in a portable format where applicable
• withdraw consent at any time where processing relies on consent

To exercise a right, email hello@filipk.eu. We may need to verify your identity before acting on a request.

You also have the right to complain to a competent supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).

Children's privacy

This website is not directed to children, and we do not knowingly collect personal information from children through general website forms. If an activity is suitable for a person under 18, participation and any required information must be handled with the involvement and authorisation of a parent or legal guardian.

If you believe a child has provided personal information without appropriate authorisation, please contact us so it can be reviewed and deleted where appropriate.

Changes to this policy

This policy may be updated when website features, service providers or legal requirements change. The latest version will be published on this page with a revised "Last updated" date. Material changes will be communicated through an appropriate channel where required.