Privacy Policy
General information
We respect the privacy rights of individuals whose personal information we hold, in particular by using appropriate technological and legislative solutions to prevent intrusion into their privacy by unauthorized parties.
The Privacy Policy contains information about what you can expect when we contact you, you contact us, or when you use one of our services, including the brokerage service provided on the www.klubmalucha.edu.pl website.
By reading the following you will learn in particular:
why we process your personal data;
for what purpose we do so;
whether it is mandatory to provide data;
how long we keep the data;
whether there are other recipients of your personal data;
what rights you have.
Our activities related to the collection and processing of any data are aimed at guaranteeing you a sense of complete security and the legality of the processing at a level appropriate to the applicable European Union data protection law, including Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter RODO).
Personal Data Administrator
The entity that decides the purposes and ways of using your data (i.e. the administrator of your data in accordance with the provisions of RODO) is the Non-Public Kindergarten Toddler Club represented by the director Renata Karwowska, based in Minsk Mazowiecki at 22 Nadrzeczna Street (NIP: 8222104804).
There are many ways to contact us, including through:
e-mail: [email protected];
mail to: 22 Nadrzeczna St., 05 - 300 Minsk Mazowiecki.
Security
We are conscientious about protecting the data concerning you and are constantly developing our security systems and processes. The security measures we use include, in particular:
limited physical access to our buildings and user access to our systems - only for those who are authorized;
controls such as firewalls, user verification, strong data encryption, and separation of roles, systems and data.
We also use the highest standards in the industry to support the maintenance of a robust information security management system.
What kind of data do we process?
We collect or process data only to the extent necessary to fulfill the purposes for which they were collected under the law. The scope of the data will vary depending on the purpose of the processing. Most of the personal data we process is provided to us directly because of one of the following reasons:
you are our Partner;
we obtained it directly from you or from a third party authorized to share your data with us;
you have submitted a complaint or inquiry to us;
you have submitted an information request to us;
you use one of our services.
Grounds for processing
Whenever we process your personal data, we must have a so-called “legal basis”. Legal bases are derived directly from the law (Article 6, Article 9 of the RODO), below are the ones we most often rely on:
Consent: you have indicated to us that you consent to the processing of your data for a specific purpose, e.g. to receive marketing messages;
** Legitimate interests:** only if the processing is necessary
to conduct our business and does not interfere with your right to respect for your privacy e.g. for direct marketing of our products or services;Performance of a contract: we need to process your personal data to be able to provide you with one of our products or services, you are party to a contract concluded contract with us;
Legal Claims: when processing is necessary to establish, exercise or defend legal claims to which you are entitled;
Legal Obligation: when we are required by law to process your personal data.
How do we use the personal data we hold?
We only use data for the purpose for which it can be processed in accordance with the law. There are many ways and opportunities to use the personal data concerning you, depending on how you interact with us. For example, if you do not provide us with your data, we will not be able to contact you in this way.
Who may have access to your data?
In addition to Us, a number of entities may have access to your data. These may include service providers we work with who help us provide the products and services you request from Us, or who support Us in Our business. These entities process personal data on our behalf and must meet high security standards. We only share information that allows us to provide services or facilitate the provision of services to you.
In some circumstances, we may also be legally obligated to share personal information, for example, by court order, law or decision of a public authority. In each case, we make sure that we have a lawful basis for sharing information about you, and we document our decisions.
Transfer of data to a so-called third country.
We may transfer your personal data to our suppliers, partners or service providers located outside of the European Economic Area (EEA) in order to fulfill the processing purposes described in the policy. Whenever your data may go outside the EEA, we will inform you.
At the same time, in caring for the security of your data, we strictly adhere to the transfer rules resulting directly from the RODO and only transfer data where the degree of security is guaranteed in accordance with the decisions of the European Commission (e.g. to the USA only to entities on the so-called Privacy Shield list).
How long do we retain your data?
As a rule, we keep your data only for the period of time necessary to fulfill the purposes for which they are processed, strictly defined in the Privacy Policy, regulations or contracts, and in accordance with the law and relevant regulations. We never keep personal data longer than necessary. In most cases, the retention period ends 6 years after the termination of your relationship with us.
Is there an obligation to provide data?
As a general rule, the provision of personal data is completely voluntary, however, it may be necessary to provide specific services or your requests, e.g. for contacting you, entering into a contract, exercising your rights related to processing, etc. Providing data may also be necessary due to applicable laws.
Your rights related to processing
Under data protection laws, you have specific rights depending on the basis for the processing of your data.
Right of access
You have the right to find out if and how we use or store your personal data - the so-called right of access. By exercising this right, you can also ask us for a copy of your data.
Right of rectification
You can question the accuracy of the data we process and ask us to correct it. This is known as the “right of rectification”. If your data
is incomplete, you can also ask us to complete it by, for example, adding new information.
Right to delete data
You can ask us to delete your data at any time, and under certain circumstances we are legally obligated to do so. This right is also known as the so-called “right to be forgotten.” It applies in the following circumstances:
we no longer need your data;
you initially gave your consent to the processing, but have now withdrawn it;
you objected to the use of your data;
we have processed your data unlawfully.
However, this right is not absolute, so we may refuse to delete your data in some cases:
when we are legally obliged to store your data;
storing your data is necessary to establish, exercise or defend legal claims.
Right to limit processing
You have the right to limit the way we use your data, especially if you are concerned about the veracity of the data or how we use it. If necessary, you can also direct a request to delete certain information about you. This right is closely related to your rights to question the accuracy of your data and the ability to object to its use.
Right to object to processing
Under certain circumstances, you have the right to object to the processing (use) of your personal data. If your objection is valid, we must stop using your data for the purpose for which it was originally processed, unless we have reasons to justify the continued use of your data despite the objections directed.
You have the right to object to the use of your data for direct marketing purposes. In this case, if you object, we will absolutely stop using your data for the indicated purpose.
Right to data portability
You have the right to obtain your personal data in a way that can be
readable on a computer, e.g. in csv file format. You also have the right to ask us to transfer your data to another entity - we will do so if the transfer is, according to the provisions of the RODO, “technically feasible.” This right applies only to information you have provided to us, and the processing is done electronically.
Right to withdraw consent
If your data is processed on the basis of your consent, you may additionally exercise the right to withdraw it at any, any time - however, such withdrawal does not affect the compliance of the processing before it was carried out.
The right to file a complaint with the supervisory authority
We work according to high standards in the processing of your personal data.
If you have questions or concerns, please contact us and we will respond promptly.
Should the answer we provide or the manner in which we exercise your right be inconsistent with your expectations, you may file a complaint with the President of the Personal Data Protection Authority.
Exercise of your rights
You may request the exercise of your rights orally or in writing. If you give us your request verbally, we recommend that you also send it in writing or in an email to provide a clear trail of confirmation of your wishes. This will also provide us with a clear confirmation of your actions and allow us to respond according to the content of your request as soon as possible.
We do not charge for the exercise of your rights, and we aim to provide information within no more than a month - if we find that we need more time, we will let you know.
If you wish to ask us about data processing, please contact via:
e-mail [email protected];
mail to: 22 Nadrzeczna St., 05 - 300 Minsk Mazowiecki.
Cookies
Our services may use Cookies which are computer data, in particular text files that are stored on the end device. Cookies usually contain the name of the website they come from, the time they are stored on the terminal device and a unique number.
Usage
Cookies may be used for:
providing services of the website;
facilitate the use of the site while browsing;
later identification in case of reconnection of the service with the device on which they were stored;
creating statistics that help to understand how users use the site, which allows to improve its structure and content;
adapting the content of the website's pages to specific preferences and optimizing the use of the websites, tailored to individual needs;
exchange information with Partners in order to mediate the provision of their services using the service.
Types of Cookies
Within the services we may use the following types of cookies:
“session” - which are stored on the user's terminal equipment
until you leave the website or turn off your web browser;“permanent” - which are stored on the user's end device for the time specified in the parameters of the cookies or until they are deleted by the user;
“performance” - enabling the collection of information about the use of the website's pages;
“functional” - allowing to remember the User's selected settings and personalize the User's interface;
“own” - posted by the website;
“external” - coming from a site external to the service.
Managing browser settings
Web browsing software, i.e. your web browser, usually allows the storage of cookies on your terminal device by default. You can change your settings in this regard.
Your web browser allows you to delete Cookies. It is also possible to block Cookies automatically. Please refer to the help or documentation of the Internet browser you use for details.