Impact Heroes Foundation
Last updated: 10 September 2026
This policy explains what personal data Impact Heroes Foundation collects through this website, why it is processed, who it is shared with and what rights you have.
The controller of your personal data is:
For any question about how your data is processed, or to exercise the rights described in section 11, write to the address above.
This policy applies to the website at impactheroes.eu, including:
Impact Heroes Foundation provides organisational consulting, team coaching and leadership development. The services described on this website are not psychotherapy, medical treatment, clinical diagnosis or crisis intervention.
Through the qualification call form:
Through ordinary use of the website:
| Purpose | Legal basis | Retention |
|---|---|---|
| Responding to your enquiry and arranging the 30-minute call | Art. 6(1)(b) GDPR — steps taken at your request before entering a contract | Until the enquiry is closed, and no longer than 12 months from the last contact |
| Email correspondence and scoping an engagement | Art. 6(1)(f) GDPR — legitimate interest in conducting business communication | Until the correspondence ends, then for the period of protection against claims |
| Entering into and performing an engagement | Art. 6(1)(b) GDPR | For the duration of the engagement, then as required by law |
| Accounting and tax obligations | Art. 6(1)(c) GDPR | As required by applicable law |
| Website security, availability and error diagnosis | Art. 6(1)(f) GDPR — protecting the website and its users | According to hosting provider settings, no longer than necessary |
| Measuring website traffic with Google Analytics 4 | Art. 6(1)(a) GDPR — your voluntary consent | User-level and event data up to 2 months; aggregated reports may be kept longer |
| Establishing, pursuing or defending claims | Art. 6(1)(f) GDPR | Until the relevant limitation period expires |
Basis: Art. 6(1)(b) GDPR — steps taken at your request before entering a contract
Retention: until the enquiry is closed, no longer than 12 months from the last contact
Basis: Art. 6(1)(f) GDPR — legitimate interest
Retention: until correspondence ends, then the period of protection against claims
Basis: Art. 6(1)(b) GDPR
Retention: duration of the engagement, then as required by law
Basis: Art. 6(1)(c) GDPR
Retention: as required by applicable law
Basis: Art. 6(1)(f) GDPR
Retention: according to hosting provider settings
Basis: Art. 6(1)(a) GDPR — voluntary consent
Retention: user-level and event data up to 2 months; aggregated reports may be kept longer
Basis: Art. 6(1)(f) GDPR
Retention: until the limitation period expires
Impact Heroes Foundation does not run advertising or remarketing on this website. No advertising cookies are set, and advertising storage remains disabled even after analytics consent is given.
Providing data is voluntary. Your name, work email and organisation are needed to reply to your request and arrange a call. Your role and the description of your situation are optional.
Not providing the required fields means Impact Heroes Foundation cannot respond, but has no other consequences for you.
When you submit the form, the information is sent to two service providers at the same time:
Both providers act on behalf of Impact Heroes Foundation. Providers may be Netlify, Inc., Google Ireland Limited or another entity within those groups.
See: Netlify Privacy Policy · Netlify GDPR information · Google Privacy Policy · Google Cloud Data Processing Addendum.
This website runs on Netlify infrastructure. To display the site, keep it secure and diagnose errors, Netlify may process technical information including your IP address, the time of the request, the address of the page visited and details about your device.
Technologies strictly necessary to display the website, keep it secure and handle actions you request may be used without additional consent.
Analytics is different. Google Analytics 4, loaded through Google Tag Manager, is not loaded at all until you accept analytics. Before you make a choice, and after declining, analytics and advertising storage remain set to denied and no analytics cookies are written or read.
Analytics helps Impact Heroes Foundation understand how many people visit, where they come from and which parts of the page are used, including whether the qualification call form was submitted. Your name, email address, organisation and the content of the form are never sent to analytics.
Your choice is stored locally in your browser under the key impactheroes.analytics-consent. It is a setting on your device, not an identifier shared with anyone.
Declining does not restrict any part of the website, including the form. You can change your choice at any time using the Cookie settings button in the footer. Withdrawing consent does not affect the lawfulness of processing carried out beforehand.
Google Analytics 4 and Google Tag Manager are provided by Google Ireland Limited or another entity within the Google group. See: Google Privacy Policy · Data protection in Google Analytics.
Data is shared only with parties that need it for the purposes described above:
Processors acting on behalf of Impact Heroes Foundation are bound to confidentiality and appropriate security measures.
Some IT providers may process data outside the European Economic Area, in particular in the United States. Where this happens, the transfer relies on mechanisms provided for by the GDPR, such as an adequacy decision of the European Commission, the EU–US Data Privacy Framework where the provider is certified, the European Commission's standard contractual clauses, or additional safeguards where required.
Depending on the basis and circumstances of processing, you have the right to:
Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, write to fundacja@impactheroes.eu.
You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw.
Data submitted through the form is not used to make decisions producing legal effects concerning you based solely on automated processing. Whether a diagnostic or a development process makes sense is decided in conversation, based on individual judgement.
Impact Heroes Foundation applies organisational and technical measures appropriate to the nature of the data and the level of risk, in particular an encrypted HTTPS connection, restricted access granted only to authorised people, use of secured service providers, minimising the scope of data collected, and periodic review of access and retention rules.
This policy may be updated if the law, the website, the contact form or the providers used change. The current version is published on this page together with the date of the last update.