Privacy Policy

Last updated: June 2026

1. Who we are

BonaMente Consulting, operated by Mikhail Lvovskii, is the data controller for this website. We are based in Wrocław, Poland and work with clients across EMEA. For any data-related question, contact mikhail.lvovskii@bonamente.org.

2. What we collect

We collect only what we need:

• Contact details you give us voluntarily — for example when you book a conversation or email us.
• Website usage data through analytics cookies, and only with your consent.
• Technical data such as IP address and browser type, for security and reliability.

3. How we use it

To respond to your enquiry, arrange and deliver our services, keep the site secure, and — where you have consented — understand how the site is used so we can improve it. We do not sell your data, and we do not share it with third parties without your consent, except where required by law.

4. Data from QurumQ sessions

During a QurumQ simulation, behavioral observations are gathered under a separate written agreement with the corporate client. Individual participant data is anonymized in reports unless explicit consent is given. These observations are offered as mirrors and hypotheses for development, not as assessments or verdicts.

5. Legal basis (GDPR Art. 6)

We process personal data on the basis of your consent (analytics, marketing), our legitimate interest (site security and service improvement), and contractual necessity (delivering a service you have asked for).

6. Your rights

Under the GDPR you may access, correct, erase, restrict or port your data, object to processing, and withdraw consent at any time. To exercise any of these, write to mikhail.lvovskii@bonamente.org. You also have the right to lodge a complaint with the Polish supervisory authority (UODO).

7. Cookies

We use essential cookies for the site to function and, with your consent, analytics cookies. You can manage your choice via the cookie banner. See our Cookie Policy for detail.

8. Retention and security

We keep personal data only as long as necessary for the purpose it was collected, then delete it. We apply appropriate technical and organizational measures to protect it.