Privacy Policy – Boogie Szkolenia
This Privacy Policy sets out the rules for processing the personal data of users of the strzelajzboogiem.com website and of individuals using the services of Boogie Szkolenia.
1. Data Controller
The data controller is Boogie Szkolenia Bogusław Pietruczuk, ul. Armii Krajowej 1, 05-220 Zielonka, Poland, NIP (Tax ID): 5241675699 (hereinafter: the "Controller").
Contact for data protection matters: kontakt@strzelajzboogiem.com
2. Scope of Data and Voluntary Provision
We obtain personal data (including your first and last name, phone number, email, and, when carrying out training, any data required by the regulations of the given shooting range) directly from you: through the contact form, email, phone, the online booking system (LatePoint), and when organising a training session or event.
Providing your data is voluntary, but necessary in order for us to respond to you, make a booking, carry out a service, or issue a receipt/invoice.
3. Purposes, Legal Bases, and Retention Periods
- Responding to enquiries (form, email, phone), Art. 6(1)(f) GDPR (legitimate interest) - until the communication is concluded, no longer than 12 months
- Booking and delivering training, vouchers, photoshoots, and events (including via the LatePoint online booking system) Art. 6(1)(b) GDPR (contract) - for the duration of our cooperation plus 6 years (statute of limitations for claims)
- Issuing receipts/invoices and settlements, Art. 6(1)(c) GDPR (legal obligation) - 5 years from the end of the tax year
- Compliance with shooting range regulations and firearms legislation Art. 6(1)(c) GDPR (legal obligation) - in accordance with the given range's regulations; this data is administered separately by the range's operator
- Image rights (photos/videos from training sessions and events) and their publication, Art. 6(1)(a) GDPR + Art. 81 of the Polish Copyright Act (consent) - until consent is withdrawn
- Analysing website traffic (Google Analytics 4) Art. 6(1)(a) GDPR (consent given via the cookie banner) - until consent is withdrawn, max. 14 months in GA4
- Establishing, pursuing, or defending against legal claims Art. 6(1)(f) GDPR (legitimate interest) — until the claims become time-barred
4. Image Rights
During training sessions and events, we take photos/recordings, which may be published on the website and on social media only with the separate, voluntary consent of the person depicted. Consent can be withdrawn at any time - this does not affect the lawfulness of any publication that took place before the withdrawal. If you do not wish to give consent, please let us know before the session/training.
5. Recipients of Data
We only share data with trusted entities, to the extent necessary:
- our website hosting provider
- LatePoint - the plugin handling the online booking system on our website; booking data (first name, last name, email, phone number, selected service, and date)
- Google LLC – in connection with Google Analytics 4 (Site Kit), Google reCAPTCHA, which protects our contact form against spam, and Google Calendar, to which we manually transfer booking data (first name, last name, contact details, date) for the purpose of scheduling sessions
- shooting range operators only the data required for entry in the range's logbook; in this respect, the range operator acts as a separate data controller
- our accounting office – when issuing invoices.
These entities process data under data processing agreements concluded with us, in accordance with our instructions.
6. Transfer of Data Outside the EEA
Google Analytics 4 and Google Calendar (to which we manually transfer booking data) may transfer data to Google LLC in the USA. This takes place on the basis of standard contractual clauses approved by the European Commission, which form part of Google's terms of service.
Data in the LatePoint booking system is stored in our website's database and is not automatically transferred to external servers outside the EEA.
The Facebook, Instagram, and TikTok icons in the website footer are simple links to our profiles and do not transfer any data - they do not load any scripts or cookies from those services.
7. Cookies
We collect and manage cookie consent using the Complianz plugin,displayed as a banner on your first visit to the site.
- Necessary - required for the website to function, do not require consent.
- Analytics - Google Analytics 4, activated only after consent is given in the banner. You can withdraw your consent at any time in the cookie settings available on the website.
You can also manage cookies directly in your browser settings, including blocking or deleting them.
8. Automated Decision-Making
We do not make decisions about you in a fully automated manner, nor do we profile you in a way that produces legal effects.
9. Your Rights
You have the right to: access your data and obtain a copy of it, rectification, erasure, restriction of processing, object to processing based on our legitimate interest, data portability, and to withdraw your consent at any time (without affecting the lawfulness of processing carried out before the withdrawal).
To exercise these rights, please contact us (see point 1). You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).
10. Changes to this Policy
This Policy may be updated from time to time, in particular in the event of changes in the law or in the scope of our services. The current version is always available on this page.
Last updated: 28 August 2026
