PRIVACY AND COOKIES POLICY
date of publication: 15.11.2019
date of last update: 16.07.2026
For the legally binding Polish version, click HERE.
Good to see you here!
We treat your data and its protection responsibly and seriously. We kindly ask you to read the document prepared for you. It contains the rules of processing personal data and the use of cookies and other tracking technologies in connection with using this website.
Our business will keep developing. Together with it, this website and the document you are currently reading will also develop. In view of the above, we encourage you to regularly check the tab where it is placed.
For your convenience, at the beginning of the document we provide information about the update of the privacy and cookies policy.
BASIC INFORMATION
1. The controller of personal data is the company Aga & Justyna Spółka z ograniczoną odpowiedzialnością, with its registered office in Katowice, ul. 3 Maja 22 / 2C, registered by the District Court Katowice-Wschód in Katowice, 8th Commercial Division of the National Court Register under number: 0001042482, NIP (Tax ID): 6343024842, REGON (Statistical Number): 525606650.
2. You can contact us regarding your personal data by writing to the e-mail address: [email protected]
3. Remember that by contacting us via e-mail, entering into an agreement with us, purchasing an e-book, or signing up for the newsletter, you provide us with your personal data, for example your name and e-mail address.
4. We ensure that we exercise all due diligence to keep the provided data secure.
5. Wherever the processing of data requires the involvement of external providers, we guarantee that we consciously select the entities we work with in order to ensure an appropriate standard of security for the data entrusted to us.
APPLICABLE RULES
1. Use of this website is voluntary. You are not forced in any way to provide personal data. However, not providing certain information may mean that it is not possible to perform a given service and achieve a specific purpose, e.g. contacting us via e‑mail, concluding an agreement, or signing up for the newsletter.
2. This website, like many others, uses cookies in order to function properly. Further on, we indicate exactly how cookies work and what significance this has for you.
3. We use analytical tools that collect anonymous information about visits to this website, e.g. the time spent on the site or the tabs viewed. You will find details in this document.
PROTECTION OF PERSONAL DATA
1. We know that personal data is a valuable asset. We are also aware of the risks arising from the processing of personal data through the use of the Internet.
2. However, we make every effort to ensure a proper way of protecting your data.
3. Already at this stage we want to inform you that not all rights will be available to you unconditionally and in respect of all activities related to the processing of personal data. This does not result from our ill will, but from the provisions of law.
PURPOSES AND LEGAL BASES FOR THE PROCESSING OF PERSONAL DATA:
Contact with you
e-mail address (first and last name), data contained in the content of the message
phone number
other data provided by you in the content of the correspondence
The legal basis for such processing is Article 6(1)(a) GDPR, which allows us to process data on the basis of consent in order to respond to your message, and Article 6(1)(f) GDPR, which allows us to pursue our legitimate interest, which is ensuring efficient and effective communication between the website controller and the user.
Placing an order and performing a sales agreement/agreement for the provision of digital content/service
first and last name
address
e-mail address
residential address
phone number
technical data (IP address, data from cookie files, and information about the partner whose link the person arrived from).
additionally:
NIP (Tax ID)
data on the business activity conducted
country of residence
transaction identifier received from Stripe
Providing data is voluntary but necessary for the fulfilment of the order/e-book sales agreement.
The legal basis for such processing is Article 6(1)(b) GDPR, which allows data to be processed in order to take steps aimed at concluding an agreement and to perform an agreement concluded by placing an order.
Issuing an invoice and fulfilling legal and tax obligations
first and last name
address
optionally
data regarding the business activity conducted
NIP (Tax ID)
The legal basis for such data processing is primarily Article 6(1)(c) GDPR, which allows personal data to be processed if such processing is necessary for the controller to comply with a legal obligation.
Handling complaints, withdrawals from the agreement, and reports regarding the non-conformity of digital content with the agreement
e-mail address
first and last name
data contained in the content of the complaint/withdrawal/report
bank account number
residential address
phone number
The legal basis for such data processing is, firstly, Article 6(1)(b) GDPR, which allows personal data to be processed if it is necessary for the performance of an agreement or to take steps aimed at concluding an agreement, and secondly, Article 6(1)(c) GDPR, which allows personal data to be processed if such processing is necessary for the controller to comply with a legal obligation. The data will be processed for the time necessary to carry out the complaint procedure, the withdrawal procedure, or reports regarding the non-conformity of digital content with the agreement. Complaints, reports, and statements of withdrawal from the agreement may also be archived in order to be able to demonstrate, in the future, the course of the complaint or withdrawal process. In the case of data provided in the process of filing a complaint, report, or withdrawal from the agreement, some of the rights will not always be available to you under all conditions.
Marketing purpose within the Newsletter service and marketing in Meta Ads services (Custom Audiences)
e-mail address
first name
The legal basis for such data processing is primarily Article 6(1)(a) GDPR, i.e. your consent to receive commercial information and marketing content from us and to the transfer of data to Meta Platforms Ireland Limited within the Facebook Custom Audiences product, and Article 6(1)(f) GDPR, which allows personal data to be processed if in this way the controller pursues its legitimate interest (in this case, this interest is the marketing purpose of its own services and products).
Contact with you via the ManyChat tool
identification data (first and last name, e-mail address),
publicly available information in social media profiles,
linked pages and accounts,
telecommunications data (IP addresses, geographic location, usage data, cookie data, browser data),
data from chat history and content,
information about chatbot usage,
other electronic and personal data, the scope of which is determined and controlled by the controller in accordance with the features available within the ManyChat service.
In order to provide you with informational or educational content without providing you with commercial information, the controller processes your data in connection with the pursuit of direct marketing addressed to you on the basis of Article 6(1)(f) GDPR, i.e. its legitimate interest as controller.
In order to present you with commercial information about products or services, the controller processes your data on the basis of Article 6(1)(a) GDPR, i.e. your consent given before such information is sent via ManyChat.
In order to enable subscription to the controller, i.e. receiving informational and educational content as well as commercial information about the controller's services and products, the controller processes your data on the basis of Article 6(1)(a) GDPR, i.e. your consent to the subscription given before such information is sent via ManyChat.
In order to perform an obligation in respect of certain content, the controller processes your data on the basis of Article 6(1)(b) GDPR with regard to the informational content sent, depending on the content of the message sent as part of using the ManyChat tool.
Archival and evidentiary purpose, for the purposes of securing information that may serve to demonstrate facts
all data intended to demonstrate the conclusion and performance of the agreement, visits to the website and profiles on social media and other portals, and use of our services
The legal basis for such data processing is Article 6(1)(f) GDPR, which allows personal data to be processed if in this way the controller pursues its legitimate interest (in this case, the controller's interest is having personal data that will allow it to prove facts related to the use of the website, the performance of the agreement, and the processing of data on a justified legal basis).
Establishment, pursuit, or defence against claims
all of the above-mentioned data, related primarily to the conclusion and performance of the agreement and order, the use of our services and the purchase of the products offered, as well as our other activity in interaction with you.
The legal basis for such data processing is Article 6(1)(f) GDPR, which allows personal data to be processed if in this way the controller pursues its legitimate interest (in this case, the controller's interest is having personal data that will allow it to establish claims, pursue claims, or defend against claims of persons using the website or third parties or customers).
Managing the website, using tools that improve the website and analyse data related to the use of the website
IP
behaviour on the website
The legal basis for such data processing is Article 6(1)(f) GDPR, which allows personal data to be processed if in this way the controller pursues its legitimate interest (in this case, the controller's interest is action aimed at optimising the website, including the content presented on the website, to the needs of users, and improving the controller's offer).
Use of cookies on the website
IP
user behaviour on the website
The legal basis for such data processing is Article 6(1)(a) GDPR, which allows personal data to be processed with your consent. You give consent during your first visit to the website.
Managing the controller's profiles on social media
data related to the use of a given social media platform
The basis for processing is the controller's entitlement exercised on the basis of Article 6(1)(f) GDPR, i.e. the controller's legitimate interest in managing its profile on a given platform, and your consent (Article 6(1)(a) GDPR), which you express, for example, by joining a group created by the controller on a given platform.
Fulfilling obligations in the field of personal data protection (e.g. the obligation to create registers and records)
the scope of data is determined by the provisions of law and varies depending on the content of the given legal obligation incumbent on the controller
The basis for processing is Article 6(1)(c) GDPR, i.e. it takes place on the basis of legal provisions that require the processing of personal data.
Posting comments/reviews on the website
first name
e-mail address
The basis for processing is Article 6(1)(a) GDPR, i.e. your consent, which you express in order to add a comment on our website.
DATA STORAGE PERIOD
We store personal data processed in connection with participation in courses and the sale of e-books for the duration of the agreement and for 12 months after its termination, while accounting data is stored for the period required by law (currently 5 years).
We store personal data processed in connection with the establishment, pursuit, and defence against claims for the duration of the performance of the agreement and until the expiry of the limitation period for claims (as a rule 6 years, for consumer claims – in accordance with the relevant provisions). Personal data collected for a purpose related to the consent given by you is processed until it is effectively withdrawn. Withdrawal of consent does not affect the lawfulness of processing during the time when the consent was still valid.
COOPERATION WITH PARTNERS (INTERMEDIARIES)
As part of promoting our courses, we cooperate with selected partners (intermediaries) who direct users to our registration page. We do not transfer any personal data to them. We only record an anonymous identifier in the link (e.g. „partner=XYZ”), which allows us to count the effectiveness of the cooperation.
The sale of our e-books takes place via the Easycart platform, available within the Easy.tools service. The service is run by Easytools sp. z o.o., with its registered office in Warsaw, at al. Rzeczypospolitej 10/46, 02-972 Warsaw, entered into the register of entrepreneurs by the District Court for the Capital City of Warsaw, 13th Commercial Division of the National Court Register under KRS number: 0001002028, NIP: 9512554309, REGON: 523659062, share capital: PLN 5,000.00. Purchasing e-books requires creating a user account on the Easytools platform. Payments are handled by Stripe Payments Europe Limited, with its registered office in Dublin (Ireland). The detailed rules for the sale of e-books are set out in a separate E-book Sales Terms and Conditions, available at: https://easypolish.org/ebooks-regulamin-sprzedaży-pl With regard to maintaining a user account on the Easycart platform, the processing rules set out in the Easytools privacy policy apply, available at: https://www.easy.tools/pl/polityka-prywatnosci.
YOUR RIGHTS
1. The GDPR grants the following rights related to the processing of personal data:
a) Right of access to information and the information obligation – means that every person whose data is processed has the right to know what is happening with their personal data. Among other things, it is for this purpose that this privacy policy, which you are currently reading, was created.
b) Right of access to personal data – means that if, as the controller of your data, we receive a request from you for access to your data, we are obliged to provide you with such information. We are required, as data controller, to fulfil our obligations in this regard without undue delay, no later than within a month. If this is not possible within this period, we are obliged to inform you at least whether we are processing your data, and we may then extend the deadline for a complete response to your request by two months.
c) Right to rectification of personal data – means that you may request that the controller of your data rectify inaccurate data or complete incomplete data.
d) Right to erasure of personal data, right to be forgotten – means that you may demand that we, as the controller of your personal data, erase it, and inform the person to whom your data was transferred about its erasure. You also have the right to demand that your data, which we have made public, be erased by other controllers as well. As the controller of your data, we are also obliged, at your request, to inform you which recipients your data subject to erasure was transferred to.
e) Right to restriction of the processing of personal data – means that you may demand a restriction of the processing of your personal data. This happens, for example, when you contest the accuracy of the data being processed or when you consider that you no longer need the data for the purposes of processing.
f) Right to object to the processing of personal data – means that you may object to your data being processed by the controller.
g) Right to data portability – means that, subject to certain conditions being met, you may demand that your data be transferred directly to another controller you indicate.
h) Right to lodge a complaint – means that as soon as you consider that our processing of your data infringes the provisions of law, you may lodge a complaint with the President of the Personal Data Protection Office (ul. Stanisława Moniuszki 1A, 00-014 Warsaw). Details regarding lodging complaints can be found on the website: https://uodo.gov.pl/pl/526/2464.
2. Remember that not every one of these rights will be available to you always and in every case. This is not a manifestation of ill will, but the nature of the provisions of law.
With regard to data processed in the Meta Custom Audiences service and in connection with profiles on social media and other portals, you may direct your requests both to us and directly to Meta, LinkedIn, Tik-Tok, Spotify – through the privacy settings of your account in these entities' services or the contact indicated in their privacy policies.
RECIPIENTS OF PERSONAL DATA
1. Your personal data may be transferred to third parties whose services we use in connection with running the website and the sale and provision of the services offered.
2. We ensure, however, that we carefully select the entities we cooperate with or whose services we use, and we are always guided by ensuring appropriate protection of data.
3. Due to the use of Google or Facebook services, your data may be transferred to the United States of America (USA) and Canada. We inform you, however, that these entities guarantee an appropriate level of protection of personal data required by European provisions.
4. For the purpose of organising the entities whose services we use, they have been divided into two groups. The first group consists of entities processing data within the European Union. The second group consists of entities processing data outside the European Economic Area.
a) Entities processing data in the European Economic Area:
STRATO AG – a service providing IT system maintenance, e-mail, and hosting services, for the purpose of storing personal data on a server;
Easy Languages GmbH – an entity co-administering the website and social media profiles and providing technical support;
MailerLite UAB - provider of the automatic e-mail message sending service;
AJL-System sp. z o.o. – a company performing accounting services for the purpose of issuing an accounting document for the service and product provided, executing payments, and keeping accounting records;
PayPal (Europe) S.à r.l. et Cie, S.C.A. - a platform through which you can make payments for our services;
Stripe Payments Europe Ltd. – a payment platform handling online payments (cards, instalments), for the purpose of processing transactions for courses and products;
Fakturownia Sp. z o.o. – a company providing services of issuing and sending VAT invoices in connection with the purchase of courses and products;
Entities cooperating in the provision of services related to running language courses (tutors and customer support)
b) Entities processing data outside the European Economic Area:
Google LLC – for the purpose of using e-mail;
YouTube by Google LLC – embedding audiovisual materials on our pages;
Squarespace Inc. – provider of the system on which the website is built and of a marketing tool;
ManyChat Inc. - a tool used for efficient communication with the community and for pursuing marketing purposes, enabling the sending of automated messages on the META platform within the Instagram and Facebook social networking services;
Airtable Inc. – a platform used to store and organise students' data and to automate administrative processes;
Typeform S.L. – a service enabling the creation and handling of course registration forms;
Zapier Inc. - a tool enabling the automation of administrative processes and connections between forms on our website and our mailing program;
Celonis, Inc. - the owner of the Make.com platform, which we use to automate administrative processes;
Calendly LLC – a website enabling the scheduling and booking of interviews and online meetings;
10. Zoom Video Communications, Inc. – with regard to the provision of the videoconferencing service used to conduct online courses; the processing rules are set out in Zoom's privacy policy.
All entities process data solely for the purpose of providing services for Easy Polish and in accordance with the provisions of the GDPR.
If you purchase an e-book while staying in a third country, your data may be processed in that country in accordance with local laws. Regardless of your place of residence, the controller applies the protection standards arising from the GDPR to your data.
5. As part of the activity conducted by the controller, plugins for social media have also been embedded on the website. The purpose and scope of the collection of data and its further processing and use by service providers have been described in the privacy policies indicated below:
a. Facebook – https://www.facebook.com/privacy/explanation,
b. Instagram – https://help.instagram.com/519522125107875?helpref=page_content,
c. YouTube – https://support.google.com/youtube/answer/7671399,
d. Tik-Tok – https://www.tiktok.com/legal/page/eea/privacy-policy/pl
e. Spotify - https://www.spotify.com/pl/legal/privacy-policy/
f. Linkedin - https://pl.linkedin.com/legal/privacy/eu?
COOKIES AND TRACKING TECHNOLOGIES
1. This website, like many others, uses cookies.
2. During your first visit to the website, information about the use of cookies is displayed.
3. Cookies are short pieces of text information saved on the device you use while browsing websites.
4. They may be read by us („own cookies”, which we use to ensure the proper functioning of this website), as well as by systems belonging to other entities whose services we use („third-party cookies”).
5. Remember that you have the right to change your cookie settings from within your browser or to delete them.
6. This website uses the following tracking technologies:
a) social media plugins, such as: Facebook, Instagram, YouTube, Spotify, Tik-Tok, LinkedIn;
b) analytical and marketing tools, such as META Pixel, ManyChat, Google Analytics, and those provided by Squarespace Inc.
7. We use the Google Analytics tool provided by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland), which is used to analyse traffic on the website. Google Analytics collects data anonymously, including information about the number of visits, time spent on the website, and the source of entry. This data is processed on the basis of the user's consent (Article 6(1)(a) GDPR). The user may withdraw their consent at any time by changing the cookie settings in their browser or in the cookie banner on our website. Details of Google's privacy policy: https://policies.google.com/privacy
8. Our website uses the Meta Pixel tool provided by Meta Platforms Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). This tool allows us to analyse the effectiveness of advertisements on Facebook and to conduct remarketing activities, i.e. to target advertisements to people who have visited our website. The data collected by Pixel does not allow Easy Polish to identify the user, but Meta may combine it with data from the Facebook account and process it in accordance with its own privacy policy: https://www.facebook.com/privacy/policy. Data processing takes place on the basis of the user's consent (Article 6(1)(a) GDPR), which can be withdrawn by changing the cookie settings in the browser or in the cookie banner. The user may change their cookie preferences at any time using our cookie banner.
MANYCHAT
We use ManyChat, i.e. a tool that improves communication with you on social media (e.g. Instagram) as part of our marketing activities. ManyChat allows us to send you messages with content determined by us. Some of the data in connection with the use of this tool may be obtained by us from the META platform and from your public profiles existing within the META platform.
We may use the ManyChat tool in several ways.
Sending content without commercial information or direct marketing.
In order for us to be able to send you a message of an educational or informational nature, it is enough for you to use a „keyword” in a comment on our content published as part of our channel on social media, including within the Instagram platform.
We may then send you messages of such a nature for 24 hours. After this time, the conversation window will no longer be current and we will not write automated messages to you.
If you do not want to receive messages from us, it is enough that you do not use a „keyword”. After receiving a message from us, you may at any time raise an objection or withdraw the consent given, depending on the basis for processing the data.
Sending commercial information and direct marketing.
In order for us to be able to send you messages containing commercial information or direct marketing via ManyChat, we need your consent.
You may give such consent with the first message sent to you after you use a „keyword”, which is sent by us to you using the ManyChat tool.
Using the keyword activates the ManyChat tool. If you do not want to receive messages of this nature from us, do not give us consent and do not enter the „keyword” indicated under each of our pieces of content in which we use automation.
We may send you a message containing commercial information only within 24 hours from the moment you enter the „keyword” and give consent. You may withdraw the consent given at any time. In order for us to be able to send you commercial information, messages containing direct marketing regarding our products or services, we need your consent. The same applies to the use of the subscription option within the ManyChat tool.
Send you content containing commercial information, direct marketing, and enable you to subscribe within the ManyChat tool.
With a subscription, we may send you messages for longer than 24 hours.
If you do not want to receive messages from us, it is enough that you do not use the „keyword” and do not give consent to sending messages.
In each of the situations listed above, you may withdraw the consent given at any time.
We conduct marketing activities and activities serving to contact you through the ManyChat tool because it is an official Meta Inc Business Partner, i.e. an entity trusted and verified by Meta Inc. According to ManyChat's declarations, it complies with Meta's security guidelines, including Meta's data security requirements and Meta's Privacy Policy. As part of the Meta Business Partner requirements, ManyChat is subject to periodic audits of compliance with Meta's guidelines.
ManyChat, as a marketing tool or a tool for communicating with our community, plays two roles in the processing of data:
it may act as a data controller, usually in respect of our data, and
it is a processor, usually in respect of your data.
The data that ManyChat may process as a processor is your identification data (first and last name, e-mail address), publicly available information in your social media profiles, your linked pages and accounts, telecommunications data (IP addresses, geographic location, usage data, cookie data, browser data), and others.
In addition, if we communicate with you via ManyChat or enter data into this service, your identification data, publicly available information about your social media profile (photo, first name, date of birth, gender, geographic location), chat history and content, information about chatbot usage, and other electronic data sent, stored, sent, or received by you, and other personal data, the scope of which is determined and controlled by us and in accordance with the features available within the ManyChat service, are also processed, of which we will inform you before processing such data, if this is the case.
The source of obtaining the data indicated above is the process of registering for the ManyChat service and using this service both by us and by you, in particular communication with you and the integration of applications (e.g. Facebook, Instagram, Telegram, Zapier) and other applications specified on the website http://www.apps.manychat.com/.
An integral part of our agreement with ManyChat (Terms of Use: https://manychat.com/legal/tos) is an annex regarding data processing, which sets out the rules for the processing of data by ManyChat. You can read more here: https://manychat.com/legal/dpa.
ManyChat, as a processor, processes data until the termination of the agreement with us, and as a controller, also until you cancel receiving marketing communications and the expiry of the data storage period required by law, including until the limitation period for claims.
In connection with the use of ManyChat, personal data may be transferred outside the European Economic Area on the basis of Standard Contractual Clauses.
According to ManyChat's declaration, it also applies appropriate security measures for data processing. Detailed information about the security measures used by ManyChat can be found at the link: https://manychat.com/legal/dpa.
ManyChat also uses sub-processors, which means that your data may be transferred to these entities as part of using the ManyChat service. ManyChat cooperates with the following entities:
a) processing subcontractors for the purpose of providing the ManyChat Service, located in the countries listed below:
Amazon Web Services, Inc. - Cloud service provider for hosting and data storage - USA
Hotjar Limited - Cloud software logging - Malta, EU
Rollbar, Inc. - Cloud error logging software - USA
Sentry LLC - Cloud error logging software - USA
Snowflake, Inc. - Cloud solutions provider - USA
Twillio, Inc. - Cloud SMS, MMS, and e-mail service provider - USA
b) service providers acting on behalf of ManyChat (service providers act either as processors on behalf of ManyChat or as separate controllers), located in the countries listed below:
Google LLC - E-mail services and file storage software - USA
Hotjar Limited Cloud software logging for the Manychat product Malta, EU
Impact Tech, Inc. - Affiliate marketing - USA
InMoment, Inc. (Wootric) - Marketing (NPS) - USA
Interkom, Inc. - Cloud-based CRM platform - USA
PartnerStack, Inc. - Affiliate marketing - USA
Stripe, Inc. - Billing and payment gateway - USA
The Rocket Science Group LLC d/b/a Mailchimp - Ad hoc e-mail communication with the Client - USA
Zoom Video Communications, Inc. - Videoconferencing system - USA
Usercentrics GmbH - Consent management service – Germany
Meta, Inc. Product authentication provider and service provision USA
TikTok Pte. Ltd. Analytical and advertising purposes Singapore, Malaysia, and the United States
Braze, Inc. Cloud-based CRM platform USA
SideGuide Technologies, Inc. operating as Firecrawl Supporting access to publicly available online content in connection with user accounts on the Manychat platform. USA
AppsFlyer Ltd. Mobile attribution analysis and marketing services. Israel
Catamorphic, co. Product feature management and session observation services for debugging and application behaviour analysis purposes. USA
Raintank, Inc. operating as Grafana Labs Real-time monitoring, visualisation, and notification services regarding infrastructure and application performance data. USA
Cloudflare, Inc. Content delivery network (CDN) and cybersecurity provider USA
TYPEFORM SL Survey and form platform for user research and feedback Spain
c) ManyChat partners:
Manychat, Inc. - Services and support - USA
OctoHub LLC - Services and support - Armenia
ManyChat, SL - Services and support – Spain
Manychat Adria doo Services and support Serbia
Manychat NL BV Services and support Netherlands
Manychat Brazil LTDA Services and support Brazil
These entities may change, so you can regularly check here as well as at https://manychat.com/legal/service-providers.
You can learn more about the processing of data by ManyChat and the security measures applied by clicking on the links below:
https://manychat.com/legal/dpa
https://manychat.com/legal/privacy
https://manychat.com/legal/service-providers
SERVER LOGS
1. Using the website involves sending queries to the server on which our website is located.
2. Every query directed to the server is saved in the server logs, which include, for example: the IP address, the date and time on the server, and information about the web browser and operating system you are using.
3. The data saved in the server logs is not associated with specific persons using the website and is used as auxiliary material for administrative purposes.
4. Its content is not disclosed to anyone other than persons authorised to administer the server.
NEWSLETTER SERVICE
1. The Newsletter is a free service consisting of the periodic sending, to the e-mail address you provide, of commercial and educational information about our products and services, in particular about new courses, e-books, promotions, and events.
2. Signing up for the newsletter takes place through:
A. filling in the registration form available on the website and providing your e-mail address and first name and ticking the required consents, or
B. ticking the appropriate box when purchasing an e-book or course.
Additionally, when signing up for the newsletter, you may consent to sharing your e-mail address with Meta Platforms Ireland Limited for the purpose of conducting advertising activities in Meta Ads services.
3. We consciously select the service providers we use, so as to ensure you the highest level of protection of your data.
4. The provider of the newsletter service is MailerLite Limited, 38 Mount Street Upper, Dublin 2, D02 PR89 Ireland.
5. Your data will not be transferred to a Third Country outside the European Union for the purpose of sending the newsletter.
6. Your data, i.e. your first name and your e-mail, provided in the newsletter sign-up form, will be processed for the purpose of sending the newsletter.
7. Providing your data in the newsletter sign-up form is voluntary but necessary to send you the newsletter on the basis of the consent given by you, as well as in order to send you information about the marketing of our own products or services on the basis of our legitimate interest as controller (i.e. Article 6(f) GDPR), and in order to pursue any possible claims in connection with the sending of the newsletter.
8. We guarantee that your data will be processed until you withdraw the consent given, unsubscribe from the newsletter, or raise an objection.
9. The mechanism for unsubscribing from the newsletter service is not complicated and consists of clicking the active link with the information I am unsubscribing from the newsletter.
10. After you exercise this right and unsubscribe from the newsletter, your data regarding the subscription to this service will be stored for the period necessary for defence against potential claims. This is our legitimate interest as data controller.
11. Personal data provided when signing up for the newsletter may be transferred to the following entities: a service providing IT system maintenance and hosting services, an e-mail service provider, and a newsletter service provider.
12. As in every case when we process your data, you have the right of access to the content of your data, to receive copies of it, the right to rectification, erasure, restriction of its processing, the right to data portability, the right to object, and the right to withdraw consent at any time.
13. Remember, however, that in the event of withdrawal of consent to the processing of data, this fact will not affect the lawfulness of the processing of data carried out on the basis of your consent before its withdrawal.
14. You also have the right to lodge a complaint with the President of the Personal Data Protection Office as soon as you consider that our processing of your data infringes the provisions of law. Your data will be processed in an automated manner, but will not be subject to profiling.
MARKETING IN META ADS SERVICES (CUSTOM AUDIENCES)
1. If, when signing up for the newsletter or in another form made available by us, you gave consent to the transfer of data to Meta, we may share your e-mail address with Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), for the purpose of us conducting advertising activities in Meta Ads advertising services. In particular, this concerns the creation of audience groups (so-called Custom Audiences) and the targeting of personalised advertisements on Facebook and Instagram. Information regarding the processing of personal data by Meta can be found at: https://www.facebook.com/privacy/policy.
2. With regard to the operation of sharing the e-mail address and matching it in the Custom Audiences service (statistical and advertising purposes), together with Meta Platforms Ireland Limited we act as joint controllers within the meaning of Article 26 GDPR. The rules of joint controllership are set out in Meta's Custom Audiences Controller Addendum, available at: https://www.facebook.com/legal/terms/customaudience. In accordance with these rules:
A. We are responsible for obtaining a valid legal basis for processing and for fulfilling the information obligation towards the data subject;
B. Meta is responsible for fulfilling the rights of data subjects with regard to the processing of data on Meta's side, including for ensuring the security of processing and responding to requests related to the rights under Articles 15–22 GDPR.
3. Regardless of the division of responsibility, you may exercise your rights arising from the GDPR against each of the joint controllers.
4. After the data is matched, Meta processes it as a separate controller for the purposes of providing its advertising services, including for analytical and optimisation purposes, on the terms set out in Meta's privacy policy at: https://www.facebook.com/privacy/policy.
Meta Platforms Ireland Limited may transfer data to Meta Platforms, Inc. based in the United States. According to Meta's statement, your data is secure. You can read more about this at: https://www.facebook.com/business/help/1001186684640957 and in the Addendum regarding the transfer of European data by META at: https://www.facebook.com/legal/EU_data_transfer_addendum/update here.
Your e-mail address is shared with Meta and used in the Custom Audiences service for the duration of the advertising campaigns conducted by us, no longer than until you withdraw your consent. After withdrawing consent, we immediately remove your address from the active audience group created in Meta Ads.
You may withdraw your consent at any time, without giving a reason and without incurring any costs. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal. After withdrawing consent, you may still receive general Meta advertisements not related to our Custom Audience – their display is regulated independently of us, by Meta and the privacy settings of your account in Meta services. You may withdraw your consent by sending a statement to the e-mail address: [email protected]
You may at any time direct requests related to the rights arising from the GDPR directly to Meta Platforms Ireland Limited, in particular through the account settings on Facebook/Instagram or the contact indicated in Meta's privacy policy.
Giving the consent referred to in this section is entirely voluntary. Not giving this consent does not affect the possibility of entering into an agreement with us, participating in a course, or purchasing an e-book.
The operation of the feature covers only new subscribers who gave consent after the implementation of the relevant checkbox in the sign-up form. The e-mail addresses of persons who signed up for the Newsletter before the implementation of this mechanism are not used in the Custom Audiences service without first obtaining separate consent.
With regard to advertising activities in Meta Ads services, Meta may use advertising profiling techniques – these rules are set out in Meta's privacy policy.
SQUARESPACE ANALYTICS SERVICE
1. This website uses analytical tools provided by Squarespace, Inc. These tools allow the analysis of online services and activities.
2. Details regarding this service are available by clicking the link: https://support.squarespace.com/hc/en-us/articles/206544167-Squarespace-Analytics
3. Squarespace, Inc. uses so-called „Cookies”, text files that are saved on the computer and enable the analysis of the use of the website.
4. You have the option to disable the saving of cookies through the appropriate settings in your browser software. However, there is a risk that this may lead to a situation in which it will not be possible to fully use all the features of this website.
5. We use Squarespace, Inc. in order to analyse the use of this website and improve it in accordance with user preferences. Thanks to the statistics obtained, we can, for example, adjust our offer.
6. The information obtained by the cookie file regarding the way this website is used is usually transferred to a Squarespace, Inc. server in the USA and saved there.
Details regarding data protection by Squarespace, Inc. are available at the link: https://www.squarespace.com/privacy
SOCIAL MEDIA
1. The website you are using contains plugins for the following social networking services: Facebook, Instagram, Tik-Tok, Spotify, and LinkedIn.
2. Through the plugin, you can connect directly with a profile on the indicated services. The services may then obtain information that you are visiting the site from your IP address.
3. We inform you that if you visit our website while also being logged in to your social media profiles, information about your visit will be recorded in these social networking services. Even if you are not logged in, social networking services are able to obtain information about your IP address.
4. In order to obtain additional information regarding privacy on social networking services, we suggest contacting the services directly and reading their privacy policies, which have been linked in this document.
5. If you do not want social networking services to obtain information regarding your visits to our website, we recommend logging out of social networks beforehand.
INFORMATION CLAUSE FOR PERSONS VISITING OUR FACEBOOK FANPAGE
1. The personal data of persons visiting our fanpage will be processed in accordance with the requirements of the Act of 10 May 2018 on the protection of personal data and in accordance with the requirements set out in the Regulation of the European Parliament and of the Council of 27 April 2016 („GDPR”).
2. We obtained this data from Facebook Inc. and from your public profile on the Facebook online platform.
3. We process the personal data of persons who:
· Subscribed to the fanpage by clicking the „Like” or „Follow” icon
· Used the chat option in order to contact the Controller
· Published their comment under any of the posts placed on the fanpage;
4. Personal data will be processed for the following purposes:
· in order to manage this fanpage on the Facebook social networking site and to use it to inform about our activity, promote various events, campaigns, and actions that we organise, as well as our brand, products, and services, to build and maintain a community connected with us, and also for the purpose of communication via the available features of the Facebook service (comments, chat, messages), which is our legitimate interest (basis under Article 6(1)(f) GDPR),
· for statistical purposes regarding analyses of the functioning, popularity, and manner of use of the fanpage, which is our legitimate interest (basis under Article 6(1)(f) GDPR),
· for the purpose of the possible establishment, pursuit, or defence against claims, which is our legitimate interest (basis under Article 6(1)(f) GDPR)
· in order to take steps aimed at concluding an agreement due to interest in our services (basis under Article 6(1)(b) GDPR).
5. We will process the following categories of Users' personal data:
· basic identification data (first and last name) to the extent published by Users on their own/private profile on the Facebook social networking site,
· other data published by Users on their Facebook profile, including their image (profile picture – if embedded),
· other data published by Users during a conversation conducted via the Messenger application, anonymous statistical data regarding Users visiting the fanpage, collected through cookies, each of which contains a unique User code that can be linked to the connection data of Users registered on Facebook, and which is collected and processed at the moment the fanpage is opened.
6. The data processing period is related to the purposes and bases for its processing. As a result:
· data processed on the basis of the Controller's legitimate interest will be processed until an effective objection is raised or that interest ceases,
· data processed for the purpose of pursuing or defending against claims will be processed for a period equal to the limitation period for those claims,
· personal data collected by Facebook, i.e. post history, activity history in the Messenger application, and activity history via the Instagram application, is subject to retention on the terms set out in Facebook's terms and conditions;
· statistical data regarding persons visiting the fanpage, available through the „Facebook Insights” feature, will be processed for the time this data is available in the Facebook service;
7. Personal data may be transferred to third parties processing data on behalf of the Controller.
8. The entities referred to above process data on the basis of an agreement with the Controller and solely in accordance with the Controller's instructions, and the processing of personal data will take into account the necessary security measures.
9. You have the right of access to data, the right to request its rectification, its erasure, or the restriction of its processing, as well as the right to object.
10. You also have the right to lodge a complaint with the supervisory authority dealing with the protection of personal data (the President of the Personal Data Protection Office).
11. We inform you that you will not be subject to a decision based solely on automated processing which would produce legal effects concerning you or similarly significantly affect you.
12. Bearing in mind the international nature of the flow of data within the Facebook platform, the Facebook service may transfer data outside the European Economic Area in accordance with the rules set out by Facebook in its privacy policy. However, do not worry that your data will be processed contrary to applicable law. Facebook has stated that it has implemented standard contractual clauses between processing entities, which, according to Facebook's statement, means that your data is secure. You can read more about this at:https://www.facebook.com/business/help/1001186684640957 and in the Addendum regarding the transfer of European data by META at: https://www.facebook.com/legal/EU_data_transfer_addendum/update
SHARING VIDEO MATERIALS
1. We place audiovisual materials from YouTube and Vimeo on our website. Cookies from Google LLC are used for this purpose.
2. Cookies are generated automatically when playing audiovisual materials from the above-indicated services.
3. If you do not consent to this, do not play the video material.
FINAL PROVISIONS
1. The content placed on this website and on the social media services we operate is a manifestation of our own intellectual creativity. Accordingly, it constitutes the subject of our copyright.
2. We do not consent to the copying of content in whole or in part without our express, prior consent.
3. Using the shared content beyond permitted personal use may result in the risk of criminal and civil liability.
4. You are obliged to use our website in a manner consistent with the law and good practice, bearing in mind respect for the personal rights and intellectual property rights of third parties.
5. If you have any doubt regarding the legal nature of the content shared (or how you may lawfully use it), write us a message (the e-mail address indicated at the beginning of this document), and we will provide you with a comprehensive answer.
6. Remember also that the content shared is educational in nature and does not constitute and does not replace individual expert advice.
7. Finally, we remind you that the content of this Privacy Policy may change, e.g. when we change a service provider or the scope of functionality on the website. For your convenience, the update date of the Privacy Policy is given at the beginning of the document.
Thank you for your time!
Aga & Justyna
Previous versions: