Last updated: 16 de septiembre de 2026
Who processes your data
- Controller: Katarzyna Joanna Batlle
- Tax ID (NIF): Y3705726A
- Address: No se publica en la web por privacidad. Se facilita a las personas usuarias y a las autoridades que lo soliciten en kasia@kbfit.es.
- Contact for anything about your data: kasia@kbfit.es
What data we collect, why, and on what basis
| Data | Source | Purpose | Legal basis |
|---|---|---|---|
| Name | Contact form | Replying to your enquiry | Consent (art. 6.1.a GDPR) |
| Email address | Contact form | Replying to your enquiry and sending you a confirmation of receipt | Consent |
| Phone number | Contact form | Contacting you if you ask for it | Consent |
| Message content | Contact form | Understanding and handling your enquiry | Consent |
| IP address and date of submission | Contact form | Preventing automated submissions (spam) and evidencing consent | Legitimate interest (art. 6.1.f GDPR) |
| Name, email and chosen time | Booking calendar (Cal.com) | Scheduling the 15-minute call and sending you the confirmation and reminder | Pre-contractual steps at your request (art. 6.1.b GDPR) |
| Chosen language and cookie preferences | Technical cookies | Site operation | Legitimate interest; no consent required |
Health data. We do not intend to collect health data through the form on this website: please do not include information about diagnoses, medication or symptoms in your message. We talk about that on the first call and, if you decide to hire a service, it is collected in a separate process with its own information and your explicit consent. If you nevertheless include health data in your message, it will be used only to reply to you and deleted within the period stated below.
How long we keep your data
- Enquiries that do not lead to a contract are deleted 12 months after the last contact.
- The IP address associated with each submission is deleted after 30 days.
- If you hire a service, your data is kept for as long as the relationship lasts and, afterwards, for the period required by applicable tax law (generally between four and six years) and health regulations.
- After that period, the data is deleted or irreversibly anonymised.
Who we share it with
Data is not passed on to third parties except where required by law. The following providers act as processors, under the corresponding contract or terms of service:
- Hostinger International Ltd. (Cyprus, European Union): hosting of the website and of the kasia@kbfit.es mailbox.
- Cal.com: management of appointments booked through the site. It only receives your data if you open the calendar and book; nothing from this provider is loaded before that.
- CookieYes Ltd.: cookie consent management (see the cookie policy).
Where your data is processed from
The controller provides her services online and may do so from Spain or from New Zealand. New Zealand has an adequacy decision from the European Commission (Decision 2013/65/EU), so processing your data from that country offers a level of protection equivalent to that of the European Union. The website and email remain hosted in the European Union.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent you have given, at any time by writing to kasia@kbfit.es and stating which right you wish to exercise. We will reply within one month at most.
If you believe the processing does not comply with the law, you can lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (www.aepd.es), or with the authority in your country of residence.
Minors
KB Fit’s services are not aimed at minors. We do not knowingly collect data from anyone under 16.
Security
Reasonable technical and organisational measures are applied to protect your data against unauthorised access, loss or alteration. The site is served entirely over an encrypted connection (HTTPS), fonts are served from our own domain, and no external service is loaded until you ask for it, so simply opening the page does not pass information about you to third parties.