Last updated: 1 September 2026

This Privacy Policy applies to the following websites:
  • igormroz.com
  • zerobs.pl
  • antifragile.pl
  • kursy.zerobs.pl

This Privacy Policy also applies to personal data processed by ISM Igor Mróz outside the websites listed above, particularly in connection with training, consulting, mentoring and email communication.

We collect and process your data when:
  • You register for a training event, purchase a course, e-book or ticket, create an account on our course platform or request an offer for our services.
  • You attend training sessions, workshops or other events organised by us, such as meetups and conferences, or participate in our mentoring and consulting activities.
  • You subscribe to one of our newsletters: the Zero BS Management Bulletin or the antifragile.pl Newsletter.
  • You browse our websites – in which case we use cookies and server logs.
  • You contact us by email or through a contact form.

We do not sell your personal data. However, we may entrust its processing to trusted service providers that support us in running our business, operating our websites, sending newsletters, handling correspondence and managing our accounts. Some data, such as information contained in accounting documents, must be retained for the period required by law. If you are unsure how to exercise your rights, contact us. Below you will find detailed information about the data we process and the purposes for which we use it.

The controller of your personal data is:

ISM Igor Mróz
ul. Lea 12b/15
30-048 Kraków
Poland
Tax identification number: PL899-251-49-17
REGON statistical number: 121868970

For matters concerning your personal data, contact us at: team@zerobs.pl

In the remainder of this Privacy Policy, we use the terms “we”, “us” and “Zero BS” to refer to the business operated under the Zero BS Management brand. The formal data controller remains ISM Igor Mróz.

In connection with the processing of your personal data, you have the following rights:

  • the right to request access to your data and to have it rectified, erased or its processing restricted,
  • the right to object to the processing of your data,
  • the right to data portability,
  • the right to withdraw your consent where the processing is based on consent,
  • the right to lodge a complaint with the President of the Personal Data Protection Office in Poland or another competent data protection authority.
Your personal data may be processed by:
  • Hosting provider: YOURCX Sp. z o.o., ul. Murarska 59, 54-125 Wrocław, Poland – hosting our websites, databases, backups and server logs.
  • Email notifications, newsletters and post-training email support: The Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, United States, and MailerLite Limited, 88 Harcourt Street, Dublin 2, D02 DK18, Ireland.
  • Invoicing and accounting: inFakt Sp. z o.o., ul. Kącik 4, 30-549 Kraków, Poland – providing the system used to generate and send invoices for our training and consulting services.
  • Google services: Google Ireland Limited and other Google group companies – providing Google Workspace, Google Analytics and Google reCAPTCHA. Depending on the service, the data processed may include correspondence, attachments and documents, as well as technical information concerning your device, browser, approximate location and activity on our websites.

Some service providers or their subprocessors may process data outside the European Economic Area. In such cases, data is transferred on the basis of an adequacy decision issued by the European Commission, Standard Contractual Clauses or other safeguards provided for under the GDPR.

Cookies:

The websites listed above use cookies and similar technologies. Cookies are small pieces of information stored on your device, such as a computer, tablet or mobile phone. They may be accessed by our systems and by the providers of tools used on our websites.

You can block or delete cookies in your browser settings. Restricting certain cookies may affect the operation of some website features. Instructions for blocking and deleting cookies are available in your browser’s help section.

We use cookies for the following purposes:

  • creating statistics that help us understand how visitors use our websites and enable us to improve their structure and content,
  • maintaining a user session after login so that the user does not have to enter their login details again on every page,
  • protecting forms against spam and other abuse.

Our websites use two basic types of cookies: session cookies and persistent cookies. Session cookies are temporary and remain on your device until you log out, leave the website or close your browser. Persistent cookies remain on your device for the period specified in their settings or until you delete them.

For more information about how Google processes personal data, please see the Google Privacy Policy.

What data we process and why:
  1. Purchasing training, courses, e-books and tickets: When placing an order, you provide us with the data required to fulfil it, particularly your first name, surname and email address. The legal basis for processing this data is the performance of a contract or taking steps at your request before entering into a contract.
  2. Issuing invoices: If you request an invoice, you provide us with the information required to issue it, such as your company name, address and tax identification number. The legal basis for processing this data is the legal obligation imposed on the Controller to maintain tax and accounting records.
  3. Newsletter: When subscribing to a newsletter, you provide us with your email address. This enables us to send you information about new articles, materials, training and other events. The legal basis for processing your data is your consent.
  4. Enquiries and contact: When you contact us by email or through a contact form, we process your email address and any other data included in your message so that we can respond and continue our correspondence. The legal basis for this processing is the legitimate interest of the Controller in responding to enquiries and communicating with clients. If your enquiry is intended to lead to a contract, the legal basis is taking steps at your request before entering into that contract.

We retain data connected with a contract for the duration of the contract and subsequently until the relevant limitation period for potential claims expires. We retain accounting documentation for the period required by law. Newsletter data is retained until consent is withdrawn or the subscription is cancelled. Correspondence is retained until the matter has been concluded and for any additional period necessary to establish, pursue or defend potential claims.

Server logs:

Using our websites involves sending requests to the server on which each website is hosted. Every request sent to the server is recorded in its logs. These logs may include your IP address, the date and time of the request, and information about your browser and operating system. We do not use log data to identify individual visitors. Server logs are used to administer our websites and ensure their security. Access is limited to authorised persons and the hosting provider to the extent necessary to provide its services.

Disclosure of data:

Data may be entrusted to the service providers identified in this Privacy Policy and disclosed to authorised public authorities where required by law. We do not sell personal data or disclose it to other organisations for their own marketing purposes.

We hope everything is clear. If you have any questions, please contact us.