Last updated: 25 September 2026
This policy explains what personal data I handle on kozdrach.com and in Biurko, why, and what your rights are. I keep it short and plain.
Who I am
Patrycja Kozdrach, a sole trader based in Haarlem, the Netherlands. I am the controller for the personal data described here. Contact: info@kozdrach.com.
What I collect
- Enquiries. When you use the contact form or email me: your name, email address, subject and message.
- Biurko account. When you create an account or use Practice: name, email address, company, industry, team size, and your practice sessions (answers, scores, progress).
- Payments. If you subscribe, payment is handled by Stripe. I receive your subscription and payment status, not your full card details.
- Technical data. Like any website, the hosting server processes your IP address, browser type and the pages you request, to deliver the site and keep it secure. Biurko uses a necessary session cookie to keep you signed in. The site stores small preferences (such as your language choice) in your own browser.
- Analytics. None. This site does not load analytics, tracking or advertising scripts.
Fonts are loaded from Google Fonts, so your browser connects to Google's servers when a page opens.
Why, and on what legal basis
- Replying to your enquiry: legitimate interest, or steps before a contract at your request.
- Providing your Biurko account, Practice and subscription: contract.
- Keeping invoices and payment records: legal obligation (Dutch tax law).
- Security and preventing abuse (server logs): legitimate interest.
- Anything optional, such as a newsletter: only with your consent, which you can withdraw at any time.
How long I keep it
- Enquiries: up to 12 months after our last contact.
- Biurko account and practice data: while your account is active, and up to 12 months after you close it. Ask me to delete it sooner and I will.
- Invoices and payment records: 7 years, as Dutch tax law requires.
- Server logs: for a short period, as set by the hosting provider.
Who else handles it
I do not sell your data. I use a few service providers who process data on my behalf:
- Hosting: Hostnet, in the Netherlands.
- Payments: Stripe.
- Fonts: Google Fonts.
Where a provider processes data outside the European Economic Area, this happens under the safeguards the GDPR requires, such as standard contractual clauses.
Your rights
Under the GDPR (in Dutch: AVG) you can ask me for:
- access to your data;
- rectification of incorrect data;
- erasure;
- restriction of processing;
- data portability;
- and you can object to processing based on legitimate interest.
Email info@kozdrach.com and I will reply within one month. You can also file a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Contact
Patrycja Kozdrach, Haarlem, the Netherlands. info@kozdrach.com