We respect privacy and the protection of personal data, therefore we provide this Privacy Policy so that everyone with whom we enter into a relationship knows:

• who is the data controller,
• to what extent and for what purpose personal data is processed by us,
• to whom it is disclosed and how it is protected.

We want everyone to be able to consciously and freely decide whether they want to provide us with their data or whether and to what extent they will use our services.

We make every effort to protect the personal data we collect in accordance with national regulations and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L No. 119/1) - referred to as "GDPR".

We encourage you to familiarize yourself with the information provided.

1. Scope of the privacy policy. Who does it concern?

The Privacy Policy contains information regarding the processing by Konsorcjum doradczo-szkoleniowe S.A. of personal data of current, former and potential Clients, persons representing our business Clients, and all visitors and users of our company website www.e-learning.pl.

This policy may be detailed by information provided at the time of collecting personal data for individual services, subscriptions (newsletter), contact forms (contact request, offer inquiry, room reservation, course participant registration, training, negotiation school, competition, promotional campaign, event).

2. Data Controller. Contact point.

We process your personal data as their controller. The company's registered office is located in Warsaw at ul. Równoległa 4A, 02-235 Warsaw.

To supervise matters related to data protection, we have designated a special contact point operated by our employee (hereinafter: Designated Person for Personal Data Protection). You can contact the Designated Person for Personal Data Protection at twojedane@houseofskills.pl.

3. What personal data do we collect?

According to GDPR, personal data is information about an identified or identifiable natural person. When you enter into a relationship with us, depending on its nature, we may collect and process all or some of the following categories of personal data:

- Your name and surname, the company with which you are associated and your position;

- Your contact information, such as the name and address of your company or the company you represent, phone numbers and email addresses that you provide to us;

- Your participation in our events such as training and courses, symposia, congresses, seminars, etc.;

- our communication with you;

- Your interest in our products or services.

Providing your personal data is not a statutory requirement. However, please remember that refusing to provide it may prevent you from using our services. In a situation where you want to be informed about our offer, news and discounts, providing data is completely voluntary.

We process your data to the minimum extent necessary to achieve one or more purposes. We do not go beyond the scope of data specified in a given form (newsletter, contact form, registration form, etc.).

4. For what purpose do we collect and process your personal data?

We process your personal data only on the bases indicated in GDPR. They may be processed for the following purposes and depending on the nature of our relationship or the services you will use, are using or have already used:

- implementation and management of contacts with the company with which you are associated;

- managing our relationships;

- communication with you;

- sending newsletters about our products and services (commercial information), if you have expressed such a wish and given us consent;

- performance of a contract or actions taken before concluding a contract, if for example you use or intend to use our training services, courses, e-learning, negotiation school, etc.

- ensuring compliance with all legal obligations, e.g. to meet the requirements of the Accounting Act or tax laws;

- statistical analyses. We use automated tools to conduct statistical research on general trends regarding our services and products and interest in our services and products. To conduct our research, we may combine and analyze various types of the above data. In such a situation, we use only aggregated data and do not use names, email addresses or other information allowing direct identification.

5. Newsletter services - individual clients

If we have asked you for consent to process personal data for the purposes of providing newsletter services (which means sending commercial information about our products and services electronically) - you can withdraw consent at any time using a special link contained in each message or by telephone contact. We collect the data you provide to us for the implementation of newsletter services based on the provisions of the Act of 18 July 2002 on the provision of electronic services (consolidated text: Journal of Laws of 2017, item 1219, as amended).

6. Newsletter services - business clients

If you act on behalf of a company or institution you represent, you are our client, contractor or other business partner, please note that we may direct information about our products and services to your organization at the correspondence or email address you provided, based on our legitimate interests. However, we treat data provided by you as a company representative through the newsletter service as your private data. Respecting our mutual relationships, we provide you with the option to opt out of receiving this information in the same way as for individual clients, i.e. through a special link contained in each message or by contacting us by phone. By exercising this right, the company or institution you represent will be unsubscribed from the newsletter service and your data will be deleted. However, our offer of products and services may reach your organization in connection with the implementation of our legally justified interests and may be related to another form of our cooperation.

7. Contact forms

If you want to establish cooperation with us, use our services or products, or ask us a question, you can provide us with your personal data through contact forms available on our websites.

We do not then require consent to process your data, as we process it based on our legitimate interests, which are to provide an answer to the question asked, marketing of our products and services (for example, if you want to receive an offer from us) or actions leading to the conclusion of a contract (in a situation where you intend to sign up for our course, training, e-learning, negotiation school, etc.).

8. On what legal basis do we process your data?

We process your personal data based on the following legal bases to fulfill the legal obligations imposed on us by GDPR and national regulations:

- based on your consent

If we process your personal data based on your consent, you have the right to withdraw this consent at any time by following detailed instructions regarding processing or instruments allowing its withdrawal (e.g. through a link in the message you received) or by telephone contact.

- based on our legitimate interests or the interests of third parties

When processing your personal data based on our legitimate interests or the interests of third parties, we will take appropriate measures to protect you from possible harm. Our legitimate interests may include, for example, marketing purposes (promotion of our products and services). To learn more about the indicated interests, pay attention to the purposes for which we process personal data listed in point 4.

- based on a concluded contract for the purpose necessary for its performance or based on actions leading to its conclusion

This basis applies when you sign up for a course, training, e-learning, negotiation school, etc.

9. How do we collect your data?

Most of the data we process is information that you have voluntarily provided to us. However, in some sporadic cases, especially if you use our specific services, we may process personal data that we are able to infer about you based on other information you provide to us and which we obtain in the course of our relationship with you. This data will not be processed longer than necessary or will be deleted immediately.

10. Where is your data processed?

We process your personal data locally in the territory of Poland. However, many of our business activities may also be carried out (e.g. to achieve greater efficiency) in the future through processing or consolidation of information about you in specialized or centralized databases and systems located in selected locations. In particular, this applies to subcontractor services that we use or will use in the future (hosting). As a result, some of your data may be transferred to other entities. However, each of our partners to whom we entrust the processing of your personal data will process it based on a data processing agreement or other legal instrument. We will exercise due diligence to ensure that the collection, receipt, use, sharing or other operations on your personal data take place in accordance with applicable law, this privacy policy and our internal policies, procedures and standards. At Konsorcjum doradczo-szkoleniowe S.A., we have rigorous standards regarding access to and processing of data. Only a group of authorized employees of Konsorcjum doradczo-szkoleniowe S.A. will have access to your data due to the necessity of having such access (IT administrators, sales and marketing personnel, accounting).

As a rule, we do not transfer your personal data to anyone outside Konsorcjum doradczo-szkoleniowe S.A. However, we may transfer your personal data to trusted third parties that perform business functions for us or provide us with other services (drivers, couriers, postal service, etc.). Such third parties will be obliged to adequately protect your personal data, based on contracts that meet the requirements of applicable law in this regard or based on appropriate laws. Your personal data may also be transferred to appropriate public authorities when required by law (for example, to prevent crime or fraud or to comply with a court order or other legal obligation of a Polish or EU body or court).

11. How do we secure your data?

Konsorcjum doradczo-szkoleniowe S.A. undertakes to properly protect your personal data in accordance with adopted internal policies, procedures and standards so that personal data is protected against unauthorized use or access, unlawful modifications, loss or destruction. Your personal data will not be stored longer than necessary for the purpose for which it was collected, including the need to maintain compliance with legal and tax obligations (e.g. Accounting Act) and to resolve disputes, pursue claims or defend against them.

12. How long do we process your data?

The time for processing your personal data varies depending on the purpose for which the data is collected and used by us:

- when we process your data based on consent given by you, we store it until it is withdrawn;

- if we do this to conclude a contract with you, and then to perform it - until its expiration or performance, however, according to GDPR, this data may be processed after the expiration of the contract if it is justified, for example for the purpose of pursuing claims or for settlement purposes. Data provided for the performance of a contract will never be stored for longer than necessary;

- data processed for the implementation of our legitimate interest will be processed until you submit a justified objection.

13. International transfer of personal data

Your personal data will not be transferred to countries outside the European Economic Area where the law may not provide the same level of protection for your data.

14. What are your rights?

- Right of access to personal data

At your request, we will inform you whether we process your personal data. We are also obliged, upon a separate request, to provide more detailed information regarding: the purposes of processing, categories of personal data, recipients of data or their categories, the period of storage of personal data or criteria for determining it, the source of data acquisition, automated processing of personal data and the consequences of such data processing for you. In the case of transferring personal data to a third country, we will also inform you about the safeguards applied.

- Right to request a copy of processed personal data

At your request, we will prepare a copy of your personal data. It will be made available to you in a popular computer file format. The first copy will be made available free of charge. However, for each subsequent one we may charge a fee in an appropriate amount, which we will determine based on the provisions of GDPR.

- Right to rectification and erasure of personal data

If it turns out that your personal data is incorrect, we will remove the inaccuracies. We will do this on our own initiative - or, if you bring it to our attention - at your request.

If you do not wish your personal data to be processed, we will delete it from our databases. However, please remember that deletion of some data may prevent us from providing services to you - this applies to those services in connection with which it is necessary to process the personal data that has been made available. For example, we will not be able to provide services related to a user account if you request deletion of your email and login. Despite your request for deletion, we may still process some personal data on the terms specified in GDPR.

- Right to restriction of processing of personal data

In cases provided for by GDPR, at your request we will restrict the processing of your personal data. Simply put, restriction of processing of personal data prevents their use beyond storage. In such a case, any other actions on data subject to restriction of processing may be performed only with your consent.

- Right to request transfer of processed personal data

On the terms provided for in GDPR, you may request the transfer of personal data saved in a standard machine-readable file format. If your goal is to transfer them to another controller, we will send a file containing your personal data directly to them.

- Right to object

In some cases, even if we process personal data in accordance with the law, without your consent, you may request us to cease processing personal data by submitting an objection. It will be justified if you demonstrate that our lawful actions nevertheless violate your interests, rights or freedoms.

- Right to withdraw consent to the processing of personal data

Once given, consent to process information is not given forever. If for any reason you change your mind, you can withdraw it. In such a situation, if we do not have a separate basis for processing your personal data, we will cease using it for the purpose for which consent was expressed. However, please remember that withdrawal of consent may sometimes result in failure to provide you with content or information of interest. You can withdraw consent at any time by clicking on the link in the message sent to you or by contacting us at twojedane@houseofskills.pl.

Withdrawal of consent does not affect the lawfulness of processing that we performed before its withdrawal.

- Right to lodge a complaint with a supervisory authority

In connection with the entry into force of GDPR and the adaptation of Polish law to the new reality, the supervisory body in Poland for respecting your rights regarding the processing of personal data is the President of the Office for Personal Data Protection. If you believe that our actions related to the processing of personal data have violated your rights, you may file a complaint with the President of the Office for Personal Data Protection (ul. Stawki 2, 00-193 Warsaw).

15. Cookies

Like many other websites, ours also uses Cookies. Cookies are nothing more than files located on your devices that contain information in the form of unique data identifying your device and statistical data regarding actions you take within our website.

Why do we need Cookies? Thanks to the information contained in them, we can compile our statistics, thanks to which we have information about the number of users visiting us and what content was most popular. Also thanks to them, we know what consents you have given and what options you have selected on our website.

Data contained in Cookies does not allow direct identification of a natural person. They only allow identification of the device you are using.

If you do not want any Cookies to be saved on your device, you can change this in the settings of your web browser. You can also completely delete data saved in the form of Cookies in this way.

16. How do we maintain the Privacy Policy?

This privacy policy came into force on 25.05.2018.

The last update took place on 14.02.2019.