Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Karolina Bednarova
KB Performance Nutrition

Email: hello@karolinabednarova.com

2. General Information

Personal data is processed on this website only where necessary to provide the website and our services, communicate with prospective and existing clients, fulfil contractual obligations, or comply with applicable legal requirements.

Personal data means any information relating to an identified or identifiable natural person.

3. Website Hosting

This website is hosted by:

IONOS SE
Elgendorfer Str. 57
56410 Montabaur
Germany

When you access this website, technical information may be processed as part of the hosting service. This may include information such as the requested website or file, referrer, browser type and version, operating system, device type and time of access.

The processing is carried out for the purpose of securely, reliably and efficiently providing this website.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and technically reliable operation of our website.

Where IONOS processes personal data on our behalf, such processing is governed by the applicable data processing arrangements pursuant to Art. 28 GDPR.

4. Contact by Email or Contact Form

If you contact KB Performance Nutrition by email or through the contact form on this website, we process the information you provide. This will generally include your name, email address, message and any additional information you voluntarily submit.

Where your enquiry concerns entering into or performing a contract, processing is based on Art. 6(1)(b) GDPR.

For other enquiries, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is responding to enquiries concerning KB Performance Nutrition and its services.

The information will be deleted when it is no longer required for the purpose for which it was collected, unless statutory retention obligations require longer storage.

Please do not submit medical records, laboratory results, diagnoses or other sensitive health information through the general website contact form.

5. Appointment Booking via Calendly

We use Calendly to allow prospective and existing clients to schedule appointments online.

The provider is:

Calendly LLC
115 E Main Street, Suite A1B
Buford, GA 30518
USA

When you schedule an appointment through Calendly, the information you provide is processed for the purpose of arranging and managing the appointment. Depending on the booking form, this may include your name, email address, appointment information and other information you voluntarily provide.

Where the appointment relates to entering into or performing a contract, processing is based on Art. 6(1)(b) GDPR.

Where Calendly is embedded into this website and the integration involves technologies requiring consent, the relevant content or technologies will only be activated after consent has been provided. The legal basis in this case is Art. 6(1)(a) GDPR in conjunction with Section 25 TDDDG where applicable.

Calendly is based in the United States. Personal data may therefore be processed outside the European Economic Area. Transfers of personal data are subject to the safeguards required under Chapter V GDPR.

6. Instagram

KB Performance Nutrition maintains a presence on Instagram, a service provided by Meta Platforms.

When you follow a link from this website to Instagram, you leave this website and the subsequent processing of personal data is subject to Meta’s applicable privacy terms.

If Instagram content is embedded directly into this website, information may be transmitted to Meta when such content is loaded. Where this requires consent, the embedded content will only be activated after consent has been provided.

The legal basis for consent-based processing is Art. 6(1)(a) GDPR in conjunction with Section 25 TDDDG where applicable.

7. Cookies and Consent Management

This website uses cookies and similar technologies.

We use WPConsent as our consent management system. WPConsent is integrated directly into our WordPress installation and is used to manage visitors’ cookie and privacy choices.

Technologies that are strictly necessary for the operation of the website or for providing a service expressly requested by you may be used without prior consent where permitted by Section 25(2) TDDDG.

Technologies used for analytics, marketing, tracking or non-essential third-party services are only activated after consent where such consent is legally required.

Where processing is based on consent, the legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG where applicable.

Your consent choices are stored so that the website can remember your preferences. If consent logging is enabled, records of consent may also be stored within our WordPress database for the purpose of documenting compliance with applicable data protection requirements.

You can withdraw or change your consent at any time through the cookie settings available on this website. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

8. Analytics and Marketing Technologies

We currently do not intentionally use Google Analytics, Meta Pixel or comparable advertising tracking technologies on this website.

If analytics, advertising or tracking services are introduced in the future, this Privacy Policy and the website’s consent configuration will be updated accordingly before such technologies are activated where prior consent is required.

9. Nutrition Coaching and Health Data

When you become a client of KB Performance Nutrition, additional personal data may be processed in connection with the provision of nutrition coaching and related services.

Depending on the service, this may include information concerning nutrition, training, physical performance, lifestyle and health.

Health information constitutes a special category of personal data within the meaning of Art. 9 GDPR and is subject to additional legal protection.

Where the processing of health data is based on your explicit consent, the legal basis is Art. 9(2)(a) GDPR.

You may withdraw your consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Detailed information concerning the processing of client and health data may be provided separately before a coaching relationship begins.

10. Service Providers and Recipients

We may use external service providers where necessary to operate our website and business, including providers of hosting, IT services, communication, appointment scheduling and administrative services.

Where a provider processes personal data on our behalf, appropriate contractual arrangements pursuant to Art. 28 GDPR are implemented where required.

Personal data is otherwise disclosed to third parties only where there is an applicable legal basis or legal obligation.

11. International Data Transfers

Some service providers may process personal data outside the European Union or European Economic Area.

Where personal data is transferred to a third country, the requirements of Chapter V GDPR apply. Depending on the recipient and destination country, the transfer may be based on an adequacy decision of the European Commission or appropriate safeguards such as Standard Contractual Clauses.

12. Data Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected.

Longer retention periods may apply where required under tax, commercial or other statutory retention requirements.

After the relevant purpose and applicable retention periods cease to apply, personal data will be deleted or anonymised.

13. Your Rights

Subject to the applicable requirements of the GDPR, you have the right to:

• obtain information about and access to your personal data under Art. 15 GDPR;
• request correction of inaccurate data under Art. 16 GDPR;
• request deletion under Art. 17 GDPR;
• request restriction of processing under Art. 18 GDPR;
• receive your data in a portable format where Art. 20 GDPR applies;
• object to processing under Art. 21 GDPR; and
• withdraw consent at any time where processing is based on consent.

You also have the right to lodge a complaint with a competent data protection supervisory authority pursuant to Art. 77 GDPR.

14. Data Security

We use appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, alteration, disclosure and unauthorised access.

This website uses HTTPS encryption to protect data transmitted between your browser and our website.

15. Changes to this Privacy Policy

We may update this Privacy Policy where our website, services, data processing activities or applicable legal requirements change.

Last updated: September 2026