Without Gravity logo Without Gravity
Polski Homepage

Privacy policy & cookies

Last updated: 24 September 2026. This notice describes the processing of personal data when you use the Without Gravity website and the CP Studio services and client panel used by Without Gravity.

1. Controller and contact

The controller is Daniel Harłukiewicz, operating under the Without Gravity brand, Fryderyka Chopina 22, 71-450 Szczecin, Poland. For privacy matters, contact us by phone at +48 885 851 950 or by post at the address above. You may also message us through WhatsApp; the provider of that service processes data under its own policies.

2. Personal data we process

  • Website use: technical request data such as IP address, date and time, requested page, browser and device type, and information needed to deliver and secure the website.
  • Messages and enquiries: contact details and the content and context of messages you send by phone, WhatsApp or Instagram.
  • Recruitment applications: depending on the form, your name, email address or telephone number, your contact-consent choice, and information and records connected with the selected recruitment. The form displays its own privacy information before submission.
  • Training services in CP Studio: client identity and contact details, account identifier and login email, assigned groups and sessions, bookings and attendance, packages, purchase and payment details (for example amount, date, method and status), assigned training plans, and operational information needed to serve the client.
  • Administrator and staff accounts: email address, role, account status, and technical login and security information needed to grant and control access.
  • Privacy settings: your choice about optional analytics and the map, stored in your browser’s local storage.

3. Purposes and legal bases

  • Operating, displaying and securing the website and client panel — our legitimate interest in keeping the services secure and working properly, Article 6(1)(f) GDPR.
  • Responding to enquiries and arranging an initial training session — steps taken at your request before entering into a contract, Article 6(1)(b) GDPR; for other correspondence, our legitimate interest in handling enquiries and establishing or defending claims, Article 6(1)(f) GDPR.
  • Handling a recruitment application, client account and training services — steps taken before entering into a contract or performance of a contract, Article 6(1)(b) GDPR. The specific basis, data fields and retention period for an application are shown with the relevant recruitment form.
  • Complying with legal obligations, including applicable financial records — Article 6(1)(c) GDPR.
  • Protecting system security, managing access rights, and establishing or defending claims — our legitimate interest, Article 6(1)(f) GDPR.
  • Loading Google Analytics 4 or an embedded Google Map on the website — your consent, Article 6(1)(a) GDPR and, for storing or accessing information on your device, the consent required by Article 399 of the Polish Electronic Communications Law.

4. Use of the CP Studio application

Without Gravity uses CP Studio to manage recruitments, applications, clients, accounts, bookings, attendance, packages, training plans and settlements. Data entered into the application are available to authorised administrators and staff to the extent needed for their duties. The application does not accept card payments; it stores sale and payment-method information, not card numbers.

CP Studio and providers of infrastructure needed to operate the application, including database, authentication and hosting services, may process data to provide, maintain and secure the service and to provide technical support. This does not mean that client data are made public. Recruitment applications are handled in the Without Gravity panel and are not shared with other studios using CP Studio.

5. Recipients of data

Depending on each provider’s role and only to the extent necessary, data may be entrusted or disclosed to the CP Studio provider and infrastructure providers, in particular Cloudflare (website and API delivery and protection) and Supabase (application database and authentication). After you consent, website requests may also be sent to Google for Analytics or the map. If you open WhatsApp or Instagram, the provider of that service also processes data. Data may also be disclosed to competent authorities where required by law.

Internet service providers may process data in countries outside the European Economic Area. Where such a transfer takes place, it is based on a mechanism provided by law, such as an adequacy decision or standard contractual clauses. You can contact the controller for information about current providers and safeguards.

6. How long we keep data

  • Enquiries — for as long as needed to answer and handle the matter, and afterwards only as needed to document the correspondence or establish or defend claims.
  • Recruitment applications — for the period stated in the privacy information for the relevant form; if the application leads to a client relationship, data needed to serve the client continue to be processed for that relationship.
  • Client account and training records — while you use the services and afterwards for the period needed to meet legal obligations or establish, exercise or defend claims. Financial records are retained for the period required by law.
  • Technical and security logs — for the period needed to operate, protect and troubleshoot the services, in accordance with the infrastructure provider’s configuration.
  • Cookie settings — until you change them or clear local browser storage. The retention period for analytics data depends on the Google Analytics property settings.

7. Your rights and whether data are required

You may request access to your data, rectification, erasure or restriction of processing and, where provided by law, portability or object to processing based on legitimate interests. If processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. You may also lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).

Providing data needed to answer an enquiry, register an application or deliver training is voluntary, but without them we may be unable to respond, accept an application or provide the service. Consent to analytics and the map is optional. You can change your choice at any time using “Cookie settings” in the website footer.

8. Cookies and similar technologies

The website stores your cookie choice in your browser’s local storage so it can remember your preference on a later visit. This setting is needed to remember your choice. The public website does not load Google Analytics or the Google Map before you select “Accept”; selecting “Essential only” keeps these tools disabled.

After acceptance, Google Analytics 4 may be loaded (measurement ID G-FH3ME9WYH1). It uses browser identifiers and technologies and collects information about website use, device and browser to produce statistics. A Google Map may also be loaded, connecting your browser directly to Google’s service. See the Google Privacy Policy and how Google uses cookies.

The CP Studio panel uses essential browser storage mechanisms to maintain your login session and operate your account. Links to WhatsApp, Instagram and Google Maps lead to external services; those providers’ privacy policies apply after you open them.

9. Automated decisions

We do not make decisions about you that produce legal or similarly significant effects solely by automated means, including profiling.