§1 Who is the Administrator of your personal data?
The Administrator of your data is Learning Space Sp. z o.o., with registered in Białystok, NIP (Tax ID): 9662145759, REGON: (Company ID): 387780334, registered in the National Court Register (KRS) under the number: 0000875891, with a share capital of PLN 8,150.00. You may contact the Administrator by sending an email to: rodo@learningspace.app
The Administrator ensures the security of personal data: confidentiality, availability, integrity and accountability of its operations. To ensure transparency in our data processing activities, this Privacy Policy outlines the key information regarding the processing of personal data by the Administrator under the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as „GDPR”).If you do not agree with the Privacy Policy, please discontinue using the Service and the products we offer. Providing any personal data is voluntary but necessary for the proper performance of services by the Administrator. At any time, the customer has the right to access and correct his/her data.
§2 For what purpose do we collect your data and how long do we retain it?
We may process your data for the following purposes:
- Communication with you, including responding to questions submitted via contact form, email, etc…;
Your data will be processed based on the Administrator’s legitimate interest in communicating with website Users (Article 6(1)(f) GDPR). Your data will be processed no longer than until you object or the business purpose ceases. Providing this data is voluntary, but necessary for communication with you. Data may also be processed during the archiving process for internal purposes based on the Administrator’s legitimate interest (Article 6(1)(f) GDPR), until you object or the business purpose ceases. - Contract conclusion and execution (Order placement);
- Establishing, defending and asserting claims;
- Compliance with legal obligations imposed on the Administrator (including obligations such as tax-related duties, issuing and storing invoices, and archival requirements);
The data necessary for the conclusion and performance of the contract will be processed for the duration of the contract, including the time required to exercise rights arising from the contract, such as warranty (Article 6(1)(b) and (f) GDPR). Provision of this data is voluntary but necessary to conclude and execute the contract.
Additional data provided in order to, among other things, facilitate the execution of the contract, will be processed no longer than until you raise an objection or the business purpose ceases, based on legitimate interest in the form of customer service (Article 6(1)(f) GDPR).
Afterward, data will be processed for the period of the statute of limitations for claims, based on the Administrator’s legitimate interest in defending against claims, as well as for the purpose of establishing and asserting claims (Article 6(1)(f) GDPR).
If the data are necessary to fulfill legal obligations incumbent upon the Administrator (such as issuing and storing invoices) – the data will be processed for this purpose for no longer than six years, in compliance with archiving obligations related to accounting documents, unless a longer period is required by law (Article 6(1)(c) GDPR).
Data may also be archived for internal and statistical purposes until you object or the business purpose ceases, based on the Administrator’s legitimate interest (Article 6(1)(f) GDPR). - Providing marketing information (including newsletter mailing and information about services, products, promotions, free content through other tools, e.g. chatbot, phone);
The data will be processed based on the legitimate interest of the Administrator, in the form of marketing the Administrator’s products and services (Article 6(1)(f) GDPR). Data will be processed no longer than until you object or the business purpose ceases – whichever occurs first. Providing data is voluntary, but necessary to receive marketing or commercial information. Pursuant to Article 10 of the Electronic Services Act we require your consent to maintain commercial and phone communication. You may withdraw your consent at any time by clicking on the link in the footer of the email or by contacting to us, at the address provided above. - Administration and management of the page and groups on social media platforms (including Facebook (Meta), Instagram, LinkedIn, YouTube, among others), when processing data on social media platforms, including communication and targeting of marketing content; The data will only be processed if you choose to: like the page / join a group / select the „Follow” option, or otherwise provide your data on the platform managed by us (e.g., by posting a comment or entry). The data will be processed for the period of existence of the website/group or until you object, which can be done by unliking the page, unfollowing, removing a comment/entry, or using any other option provided by the platform/page or by contacting us directly. Please be advised that the rules relating to the page/fanpage/group, are set by the Administrator, while the rules of use of the social network on which the page/fanpage/group is placed, are determined by the entity managing these portals.
- Analytical and statistical; The processing of data for analytical and statistical purposes consists, in particular, in the analysis of data automatically collected during the use of the website, including cookies. The data is processed based on the legitimate interest of the Administrator, in the form of adapting the content of the Website to the User’s preferences and optimizing the use of the Website; creating statistics that help understand how Users use the Website, which allows improving its structure and content (Article 6(1)(f) GDPR). Data may also be archived for internal and statistical purposes based on the Administrator’s legitimate interest (Article 6(1)(f) GDPR), until you object or the business purpose ceases.
- Recovering abandoned shopping carts; In the event that you do not complete your order, you will receive a reminder of an order that has been started but not finalized. The data will be processed based on the Administrator’s legitimate interest in servicing potential and actual customers (Article 6(1)(f) GDPR).). These data will be processed for as long as necessary to achieve business purposes or until you object to the processing.
- Posting comments;
The data visible on our website alongside a posted comment are processed by us for the administration and management of the website, as well as for communication with you based on the Administrator’s legitimate interest (Article 6(1)(f)). These data will be processed for as long as necessary to achieve business purposes or until you object to the processing. - Promotion and marketing;
- If you provide us with your data, in particular in the form of an opinion regarding a product or service, including data related to your image, they will be processed based on the legitimate interest of the Administrator for marketing purposes, to improve the quality of services and products, as well as to promote the Administrator’s services and products. These data will be processed for the period necessary to achieve business purposes or until you object to the processing. Providing these data is voluntary.
§3 To whom may we share your data?
We share your data with other entities only when necessary for the purposes of the processing referred to in §2 and only to the extent necessary to achieve this purpose. As a general rule, we only collect and process data that you have provided to us, with the exception of data collected automatically (such as cookies). You can find more about cookies in §7.
If necessary, your data may be shared with entities we cooperate with in achieving the aforementioned goals, including, but not limited to a hosting company, an IT company/website management services, accounting and bookkeeping services providers, invoicing software providers, newsletter services providers, cloud services providers, CRM providers, marketing services providers, administrative services providers, entities auditing our operations, banks in case we need to conduct settlements, consulting services, subcontractors, lawyers, couriers or postal operators, training platform providers, social networking platform, customer service platform, appointment platform, platform for providing products or services, other entities that support the Administrator in achieving the purposes of processing. As a general rule, data will not be transferred outside the EEA, except as described below. In other cases, if data will be transferred outside the EEA, it will be based on your consent, standard contractual clauses or based on other safeguards provided for in the GDPR, after compliance with, among other things, the informational obligation.
Services provided by Google or Facebook (META) are generally performed by entities based in the European Union. However, due to the global nature of the operation of these entities, your data may be transferred to the US, in connection with its storage on US servers (in whole or in part). Regardless, Google and Facebook have implemented safeguards in accordance with the requirements of the GDPR to protect your personal data, through the use of standard contractual clauses. For more information on how the aforementioned providers process data, please refer to each entity’s Privacy Policies.
§4 What rights do you have?
In the GDPR, you have the right to access your personal data, rectify your personal data, erase your personal data, restrict the processing of your personal data, object to the processing of your personal data, transfer your personal data, withdraw your consent to the processing of your data. The withdrawal of consent does not affect the lawfulness of the processing performed before its withdrawal. Detailed information about the aforementioned rights can be found in the GDPR regulation, i.e. Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
If you believe that your personal data is being processed in violation of applicable law, you have the right to complain to the President of the Office for Personal Data Protection. In such a case, however, we encourage you to contact us in advance to clarify your concerns.
§5 Are your data being profiled?
The Administrator analyzes personal data by automated means, using tools provided by software providers (e.g. by means of statistics, history), only to the extent that it has no legal effect on you or does not materially affect your situation, including your guaranteed rights and freedoms. The purpose of processing data by automated means is to learn about Users’ preferences (for more information on the analysis see §7 Cookies Policy).
§6 Polityka plików cookies
The website does not automatically collect any information, except for information contained in cookies. Thiese data are collected in a way that prevents the identification of the User, the so-called „anonymous data”.
Cookies (also known as „cookies”) are IT data, in particular text files, which are stored on the website User’s terminal equipment and are intended for use on the website. Cookies usually contain the name of the website from which they originate, the time they are stored on the end device, and a unique number.
Cookies are used to: customize the content of the Website to the User’s preferences and to optimize the use of the Website, as well as to create statistics that help understand how Users use the Website, which allows improving its structure and content.
You can make your own changes in the settings regarding cookies. In many cases, your web browser allows cookies to be stored on your end device by default. Detailed information about the possibility and methods of handling cookies is available in the settings of your software (web browser). If you do not agree to cookies, you may limit the operation of certain functionalities on the Website.
The Administrator uses technologies that track the actions taken by the User on the Website:
– Facebook (META) Conversion Pixel, provided by Meta Platforms Ireland Limited – for the purpose of managing ads on Meta and conducting remarketing activities; Facebook Pixel is a piece of code published on the website that allows you to reach your target audience based on the data of people who have used the website. As part of the Facebook Pixel function, it is therefore possible, to display published advertisements on Meta-owned portals only to portal users who have shown interest in products or services or have common factors to the aforementioned people. This data is processed based on the legitimate interest of the Administrator (Article 6(1)(f) GDPR). For detailed information on the Facebook Pixel, please visit the Facebook (Meta) Privacy Policy.
– Google tools, including Google Analytics, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The data collected through these tools are used for analyzing the website’s statistics. Google Analytics uses its own cookies to analyze the activities and behaviors of Website users. These cookies are used to store information, e.g. from which page the User came to the current website. They help to improve the Website. This data is processed based on the Administrator’s legitimate interest (Article 6(1)(f) GDPR). Detailed information about Google Analytics can be found on the Google tools usage policies page.
Use of the Website involves sending queries to the server on which the Website is hosted. Each query sent to the server is recorded in the server logs. The logs include, among other things, the User’s IP address, the date and time of the server, and information about the Internet browser and the operating system used by the User. Logs are saved and stored on the server. The data stored in the server logs are not associated with specific individuals using the Website and are not used by the Administrator to identify the User. The server logs are solely an auxiliary material used to administer the Website, and their contents are not disclosed to anyone other than those authorized to administer the server.
§7 Social plugins
The Website uses plugins, widgets and other social tools provided by portals such as: Facebook (Meta), Instagram, YouTube, LinkedIn. The rules regarding the processing of personal data are described directly on the pages of the aforementioned service providers.
§8 Co-administration
The data processed for the purposes of statistics collected by Facebook (Meta) Platform, are co-managed by the Administrator and Meta Platforms Ireland Limited, with its registered office at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, hereinafter referred to as the Co-Administrator. Detailed rules regarding the data co-management, including information about your rights, are described on the Privacy Policy page.
Data processed on the LinkedIn platform are co-administered by the Administrator and LinkedIn Ireland Unlimited Company, address: Legal Dept. (Privacy Policy and User Agreement), Wilton Place, Dublin 2, Ireland, hereinafter referred to as the Co-Administrator. Detailed rules on data co-management, including information on your rights, are described on the Privacy Policy page.
The Administrator processes data based on the Administrator’s legitimate interest in conducting analyses of Users’ activities, as well as their preferences, in order to improve the functionalities used and services provided. In matters relating to personal data, you can contact both the Administrator and the Co-Administrator.