Privacy Policy

Privacy Policy

§1. Personal data administrator

  1. The administrator of personal data within the meaning of art. 4 point 7 of Regulation (EU) 2016/679 (GDPR) is Joanna Bandurska running a business under the name Akademia Metamorfoz Joanna Bandurska at the address of 1 Maja 94 street, 40-240 Katowice, NIP: 6282226510, REGON: 123230207.
  2. Data administrator’s e-mail address: bandurska.szkolenia@gmail.com.
  3. The administrator applies appropriate technical and organizational measures to prevent accidental or unlawful destruction, loss, modification, unauthorized disclosure or unauthorized access to personal data.
  4. Providing personal data by the customer is voluntary, but necessary in order to conclude a contract with the data administrator.
  5. The data controller processes personal data to the extent necessary to perform the contract or provide services to the data subject.

§2. Purpose and basis for processing personal data

The administrator processes personal data for the following purposes:

  • preparation of a commercial offer (Article 6(1)(f) of the GDPR);
  • concluding and implementing contracts with customers (Article 6(1)(b) of the GDPR);
  • provision of electronic services via websites (Article 6(1)(b) of the GDPR);
  • handling the complaint process (Article 6(1)(c) of the GDPR);
  • accounting related to the issuance and acceptance of settlement documents (Article 6(1)(c) of the GDPR);
  • archiving data for possible determination, investigation or defense against claims (Article 6(1)(f) of the GDPR);
  • contact by phone or via e-mail (Article 6(1)(f) of the GDPR);
  • marketing (Article 6(1)(f) or Article 6(1)(a) of the GDPR).

§3. Data recipients. Data transfer to third countries

  1. The recipients of personal data may be entities cooperating with the data controller when necessary to perform the contract.
  2. The recipients may also be subcontractors – accounting offices, law firms, entities providing IT services (including hosting services).
  3. The data controller may be required to provide personal data on the basis of applicable law to authorized authorities or state institutions.
  4. Personal data may be transferred to entities based outside the European Economic Area (e.g., Google LLC) with standard contractual clauses as safeguards.

§4. Personal data storage period

  1. Data is stored for the duration of the contract and after its termination for pursuing claims, but no longer than the limitation period.
  2. Data in billing documents is stored as per tax and accounting law requirements.
  3. Data for marketing purposes is stored for up to 10 years, but no longer than until consent is withdrawn.
  4. Data for other purposes is stored for one year, unless consent is withdrawn earlier.

§5. Rights of the data subject

Each data subject has the right to:

  • Access – obtaining confirmation whether personal data is being processed (Article 15 of the GDPR);
  • Receive a copy of the data – the first copy being free of charge (Article 15(3) of the GDPR);
  • Rectification – request rectification of incorrect personal data (Article 16 of the GDPR);
  • Deletion – request to delete personal data when no longer necessary (Article 17 of the GDPR);
  • Limitation of processing – request to limit processing (Article 18 of the GDPR);
  • Data portability – receiving data in a machine-readable format (Article 20 of the GDPR);
  • Object – to object to the processing for legitimate purposes (Article 21 of the GDPR).

The data subject has the right to lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office in Warsaw.

§6. Profiling

  1. Personal data may be processed automatically – including in the form of profiling, consisting in evaluating selected information for the purpose of analyzing and forecasting personal preferences.
  2. Automatic data processing does not have any legal consequences for the data subject. The data subject may object at any time.

§7. Google Analytics

  1. The administrator uses Google Analytics, a web analytics service provided by Google Inc.
  2. Google Analytics uses cookies that enable an analysis of the use of the website.
  3. The data will not be used to identify any natural person.
  4. The user can prevent the storage of cookies through browser settings.
  5. At any time, the user may object to the collection and processing of data by downloading the browser plug-in at: https://tools.google.com/dlpage/gaoptout?hl=en.