Privacy Policy

Definitions
- Personal Data Controller an entity that determines the purpose and means of personal data processing.
  GDPR Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
  Service Website service https://speakpolish.pl/en/.
  User a natural or legal person who uses the service and the contact form contained therein.
  Contact form the form on the Website for sending a question directly to the language school “Let’s speak Polish” run by Małgorzata Sapińska – Bartkowiak.
Who is the Personal Data Controller?
- The Personal Data Controller is Małgorzata Sapińska – Bartkowiak conducting economic activity under the business name LETS SPEAK POLISH Małgorzata Sapińska – Bartkowiak, address: Piotrkowska 152 street, 90 – 063 Lodz, NIP 729 – 23 – 02 – 532, REGON 381042581.
- - Contact details:
    - a. Postal address: Piotrkowska 152, 90-063 Łódź
    - b. E-mail address: margaret@speakpolish.pl
    - c. Phone number: +48 505 069 399.
What types of personal data are collected?
1. The Data Controller collects the following personal data that have been provided in the Contact Form, i.e.
  - a. first name
  - b. surname
  - c. e-mail address
  - d. phone number
2. In addition to the personal data, the following data are collected:
  - a. IP addresses – collected during Internet connections
3. Visitors of the Data Controllers website can view the website without providing their personal data.
What are the purposes of collecting the personal data?
1. The data provided by Users are used for:
  - a. providing the Contact Form service on the Personal Data Controller’s website,
  - b. for marketing purposes, including sending commercial information to the e-mail address, if the User has consented to it by checking the appropriate box in the Contact Form,
  - c. for statistical purposes, including IP addresses for statistical demographic information (e.g. the region from which the connection is made),
  - d. for technical purposes related to server administration.
What is the legal basis for the processing of the personal data?
1. Personal data are processed by the Controller in accordance with the law, including in particular the GDPR, in order to:
  - a. use the Contact Form service to answer a question, pursuant to Article 6(1)(a) of the GDPR,
  - b. offer the Controller’s Services consisting in marketing of own services, pursuant to Article 6(1)(a) and (f) of the GDPR.
2. Providing personal data is voluntary, however, necessary e.g. to provide the Contact Form service.
3. The User should not transfer personal data of third parties to the Controller. If, on the other hand, the User provides such data, he/she shall always declare that the he/she has the appropriate consent of third parties to transfer the data to the Controller.
What are your rights in relation to the processing of the personal data?
1. The User shall be required to provide complete, up-to-date and true data.
2. Each User, whose personal data are processed by the Controller, shall have the right of access to his/her data, the right to rectification, erasure, to restrict processing, the right to data portability, the right to object to the data processing based on the Controller’s legitimate interest.
3. The rights set out in the paragraph above may be exercised by sending an appropriate request to the Controller’s e-mail address, providing the User’s name and e-mail address.
4. The User shall have the right to lodge a complaint with a supervisory authority if he/she believes that the processing of his/her personal data violates the provisions of the GDPR.
5. Consent to the processing of data for marketing purposes and the transmission of commercial information may be withdrawn by sending a request to the Controller’s e-mail address.
How long we are going to store your personal data?
1. Personal data shall be stored only for the period necessary to achieve the purpose for which the personal data were collected, and after the expiration thereof for the period necessary to secure or pursue possible claims or fulfil the Controller’s legal obligations (e.g. resulting from tax or accounting regulations).
2. Personal data processed for the Controller’s legitimate interest, i.e. for marketing the Controller’ own services shall be stored for the period until the participant objects or withdraws consent.
Do we transfer personal data to and to whom?
- The data may be made available to entities authorised to receive it under applicable law, including the competent judicial authorities. Personal data may be transferred to entities processing them on request, i.e. partners providing technical services (development and maintenance of IT systems and websites), entities providing bookkeeping and accounting services. Personal data shall not be transferred to a third country/international organisation.
Security of data collected by the Controller
1. The Controller has applied all technical and organizational measures to ensure the protection of the personal data being processed, appropriate to the risks and categories of data protected, and in particular, secured the data against unauthorized access, removal by an unauthorized person, processing in violation of the Act, as well as a change, loss, damage or destruction in accordance with the provisions of the GDPR.
2. The personal data shall not be processed on automated means by the Controller.
Change of Privacy Policy
1. The privacy policy is subject to change, and the Controller shall inform the Users of any change within 14 days in advance by sending an email.
2. Any questions regarding the Privacy Policy should be sent to the Controller’s address.
3. Date of last modification:

INFORMATION CLAUSE

Under Article 13(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the GDPR, we inform you that the Controller of your personal data is Małgorzata Sapińska – Bartkowiak conducting economic activity under the business name Let’s speak Polish Małgorzata Sapińska – Bartkowiak, address: Pienista 12A street, 94 – 109 Lodz, NIP 729 – 230 – 25 – 32, REGON 381042581, hereinafter referred to as the PDC.
1. For the protection of your personal data, you can contact the PDC at the email address margaret@speakpolish.pl, by phone 505069399 or in writing at the address al. Tadeusza Kościuszki 1, 90-418 Łódź.
2. Personal data obtained by filling in the Contact Form shall be processed for the following purposes:
  1. answering the question sent via the Contact Form,
  2. undertaking actions necessary to conclude a contract,
  3. implementation of the direct marketing service.
3. The legal basis for the processing of your data is:
  1. In the case of a contact via the Service, the necessity to undertake actions at your request before concluding the contract (Article 6(1)(b) GDPR),
  2. In the case of marketing, consent (Article 6(1)(a) GDPR) and necessity for purposes arising from legitimate interests pursued by the Controller (Article 6(1)(f) GDPR).
4. Your personal data shall be transferred to other entities in order to ensure:
  1. the adequate and proper provision of services;
  2. the proper provision of services by our associates and entities cooperating with us;
  3. the performance of obligations under mandatory applicable provisions of law, including the performance of obligations required by competent courts, authorised bodies and institutions.
5. Your data shall not be transferred to third countries.
6. Your data shall neither be processed on automated means nor profiled, based on automated decision-making processing.
7. The period of processing of your personal data shall depend on the purpose for which the data are being processed. The period during which your personal data shall be stored shall be calculated according to the following criteria:
  1. for the period necessary to reply to the message sent in the case of the process of replying to the message sent via the Contact Form;
  2. until you object/withdraw your consent to the processing of your personal data in the case of direct marketing;
  3. after the periods indicated above, for the period in which the law requires the storage of data or for the period of limitation of any claims.
8. 1. You have the following rights:
    - the right of access to the data,
    - the right to request rectification of the data,
    - the right to erasure,
    - the right to restrict processing;
    - the right to object to the processing of data for reasons related to your particular situation, in accordance with Article 21 of the GDPR,
    - to the extent that the processing of your personal data is based on consent given under the GDPR, the right to withdraw such consent.
      The withdrawal of consent does not affect the processing that was carried out before the withdrawal thereof.
  2. To exercise any of the rights described above, please contact the PDC.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw) if you are of the opinion that the processing of your personal data violates the provisions of the GDPR.