POLISH LANGUAGE COURSESGDPR
PERSONAL DATA PROCESSING INFORMATION
Privacy Information
Pursuant to Article 13(1) and Article 13(2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “GDPR”), we hereby inform you about the processing of your personal data.
Personal Data Controller
The controller of your personal data is Między Słowami Spółka z ograniczoną odpowiedzialnością, with its registered office in Kraków, at ul. Św. Filipa 23, 31-150 Kraków, hereinafter referred to as the “Controller”.
Purposes and Legal Basis for Processing Personal Data
Your personal data are processed for the purpose of taking steps at your request prior to entering into a contract and for the conclusion and performance of a contract for language school services to which you are a party, pursuant to Article 6(1)(b) GDPR.
The provision of your personal data is necessary for us to enter into and perform the contract and to provide the agreed services.
Your personal data may also be processed for archiving purposes, including to preserve information that may be necessary to demonstrate facts or defend against potential claims. Such processing is based on the legitimate interest of the Controller pursuant to Article 6(1)(f) GDPR.
In addition, your personal data may be processed for the purpose of the establishment, exercise or defence of legal claims, which constitutes a legitimate interest of the Controller pursuant to Article 6(1)(f) GDPR.
Recipients of Personal Data
Your personal data may be disclosed to entities cooperating with or providing services to the Controller, including entities belonging to the Controller’s group, where such disclosure is based on appropriate and lawful cooperation agreements or personal data processing agreements.
All processors processing your personal data on behalf of the Controller are required to comply with applicable data protection regulations and the data protection policies applicable at Między Słowami Spółka z ograniczoną odpowiedzialnością.
Your personal data will not be disclosed to any other entities except where such disclosure is permitted or required by applicable law.
Transfers of Personal Data to Third Countries or International Organisations
The Controller does not transfer your personal data outside Poland, the European Union or the European Economic Area (EEA).
Personal data contained in electronic correspondence are protected using appropriate technical and organisational measures in accordance with applicable data protection and information security standards.
Data Retention Period
Your personal data processed in connection with the provision of language school services, including the conclusion and performance of a contract, compliance with legal obligations and the pursuit of the Controller’s legitimate interests, will be stored for the duration of the contractual relationship.
After the termination or expiry of the contract, your personal data may be retained for the period necessary to:
-
comply with applicable legal obligations, including tax and accounting obligations;
-
establish, exercise or defend against potential claims; and
-
protect the legitimate interests of the Controller.
After the expiry of the applicable retention period, your personal data will be securely deleted or anonymised, unless further processing is required or permitted by law.
Your Rights
In accordance with the GDPR, you have the following rights in relation to the processing of your personal data:
-
The right of access to your personal data and to obtain a copy thereof;
-
The right to rectification of inaccurate or incomplete personal data;
-
The right to erasure of your personal data, where the conditions specified in the GDPR are met;
-
The right to restriction of processing where the conditions specified in the GDPR are met;
-
The right to object to the processing of your personal data where the processing is based on the legitimate interest of the Controller;
-
The right to data portability, where the conditions specified in the GDPR are met;
-
The right to lodge a complaint with the competent supervisory authority, in particular with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych – UODO) in Poland; and
-
The right to withdraw consent at any time, where the processing of your personal data is based on your consent. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Voluntary Nature of Providing Personal Data
Providing your personal data is voluntary; however, certain personal data may be necessary for us to enter into and perform a contract with you and to provide the requested language school services.
Failure to provide the required personal data may prevent us from entering into a contract or providing the requested services.
