Information under Art. 13 of Regulation (EU) 2016/679 (GDPR). It applies to principalmode.io, email correspondence and the Principal Mode course. No small print: what I collect, why, for how long and what your rights are.
Kolista s. r. o., Karpatské námestie 7770/10A, 831 06 Bratislava – Rača, company ID 57665311, Slovakia. Contact for data matters: pm@principalmode.io. No data protection officer is appointed — the scale of processing does not require one.
| Situation | Data | Purpose and legal basis | Retention |
|---|---|---|---|
| Email you send us | name, email address, message | replying to you and arranging participation or collaboration — steps prior to a contract at your request (Art. 6(1)(b)) and a legitimate interest in communicating with prospects (Art. 6(1)(f)) | until resolved, at most 12 months after the last message; if you become a participant, then as a participant |
| Order via the website | name, email, phone, address; for a company its name, company ID and tax ID; participant's name and email; the wording of the order, the version of the terms and the consents given, with time; IP address and browser at submission | concluding and performing the contract (Art. 6(1)(b)); proving the content of the contract and consents (legitimate interest, Art. 6(1)(f)); accounting (Art. 6(1)(c)) | for the term of the contract and 10 years from the end of the year in which it ended |
| Withdrawal via the website | name, email, order number, content of the notice, time of submission | handling the withdrawal and refunding payment (Art. 6(1)(b), (c)) | 10 years |
| Course participant | name, email, phone, billing details, our correspondence, information about your project that you give me yourself | performance of the course contract (Art. 6(1)(b)); accounting and tax obligations (Art. 6(1)(c)) | during the course and for as long as you have access to the materials (at least 6 months after the last session); accounting records 10 years by law |
| WhatsApp group of participants | name or nickname, phone number, profile photo and the messages you post — visible to all group members, including participants of earlier and later runs of the course | support and exchange among participants — only if you join; joining is voluntary (Art. 6(1)(a)); the support included in the price is also available by email, phone or video call | while you are in the group; you may leave at any time. Messages you have already sent and details other members have seen remain on their devices, and we cannot delete them |
| Session recordings | video and audio of a live session, your name in the conference | making a session available to whoever missed it — only with your consent (Art. 6(1)(a)); without consent the session is not recorded | 3 months after the last session, then deleted; available only to participants of that run |
| Testimonials on the website | name, photo, role, wording of the testimonial | publication of the testimonial — only with your explicit consent (Art. 6(1)(a)); you may withdraw it at any time | until consent is withdrawn |
| Visiting the website | technical server logs (IP address, time, browser) | operating and securing the website — legitimate interest (Art. 6(1)(f)) | per hosting settings, on the order of weeks |
Your project — what you work on in the course — stays with you: on your computer and in your own Claude or ChatGPT account. The course provider has no ongoing access to it — they cannot see into your account or folder. They see only what you choose to show on screen during a session or send during a consultation; what you post in the participants' group is seen by all its members. Data you put into your project is processed by you under the terms of the AI provider you use.
The site uses Google Analytics (Google Ireland Ltd.) so I can see how many people read it, where they come from and what they look at. Measurement starts only after your consent in the bar at the bottom; without it nothing loads and no Google cookies are set. Google may process data in the USA (EU–US Data Privacy Framework); IP addresses are anonymised. Legal basis is consent (Art. 6(1)(a)); retention in Analytics 14 months. You can withdraw or change consent via cookie settings. Your language, theme and cookie choice are stored only in your browser.
I do not sell or pass on your data to anyone else and make no automated decisions or profiling based on it.
You have the right of access, rectification and erasure, the right to restrict processing, to data portability, to object to processing based on legitimate interest, and to withdraw consent at any time (without affecting processing before withdrawal). Write to pm@principalmode.io; I reply within one month. If you believe I process your data unlawfully, you may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic.
Participant data is needed to conclude and perform the course contract; without it you cannot take part.
Effective from 2026-09-30. Any change will appear here as a new dated version.