Privacy policy

1. General Information

1. This policy applies to the website functioning under the URL: twojaszkolajezykapolskiego.com
2. The service operator and Data Controller is: Aleksandra Kossakowska Serena-Sophia Nature Aleksandra Kossakowska, Gdańsk, miejsc. GDAŃSK, GÓRALSKA, nr 7a, lok. 2, 80-292
3. Contact email address of the operator: biuro@twojaszkolajezykapolskiego.com
4. The operator is the Administrator of your personal data provided voluntarily on the website.
5. The website uses personal data for the following purposes:
   • Handling inquiries via the form
   • Presenting offers or information
6. The website gathers information about users and their behavior in the following ways:
   1. Through voluntarily entered data in forms, which are then entered into the Operator’s systems.
   2. By saving cookies on user devices.

2. Selected Data Protection Methods Used by the Operator

1. Login and data entry points are protected at the transmission layer (SSL certificate). This ensures that personal and login data entered on the website are encrypted and can only be read on the target server.
2. Personal data stored in the database are encrypted so that only the Operator with a key can read them, ensuring protection in case of database theft.
3. User passwords are stored as hashes, which is a one-way function, making it impossible to reverse the process. This is the modern standard for storing user passwords.
4. The Operator periodically changes its administrative passwords.
5. For data protection, the Operator regularly creates backups.
6. Regular updates of all software used by the Operator for processing personal data, including programming components, are essential for data protection.

3. Hosting

1. The website is hosted (technically maintained) on servers operated by OVH.
2. The hosting company logs server-level data to ensure technical reliability. Logged data may include:
   • Resources specified by a URL identifier (e.g., pages, files)
   • Time of request
   • Time of response
   • Client station name (identified via HTTP protocol)
   • HTTP transaction errors
   • URL of the previous page visited by the user (referer link), in case the transition to the website occurred through a link
   • Browser information
   • IP address
   • Diagnostic information related to service orders through forms on the site
   • Information about email communication directed to and from the Operator

4. Your Rights and Additional Information on Data Use

1. In certain situations, the Administrator has the right to transfer your personal data to other recipients if it is necessary to fulfill a contract or to meet legal obligations. This includes:
   • Hosting providers on a contractual basis
   • Authorized employees and collaborators using data for the site’s operation
   • Marketing service providers for the Administrator
2. Your personal data is processed no longer than necessary for the purposes specified by legal regulations (e.g., accounting). Marketing data is not processed for more than three years.
3. You have the right to request:
   • Access to your personal data
   • Correction of your data
   • Deletion of your data
   • Restriction of data processing
   • Data portability
4. You have the right to object to data processing for legitimate interests pursued by the Administrator, including profiling, unless there are compelling legal grounds for processing that override your rights.
5. You can file a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
6. Providing personal data is voluntary but necessary for the website’s operation.
7. Automated decision-making, including profiling, may be carried out to provide services under the contract or for direct marketing.
8. Personal data is not transferred outside the European Union.