Privacy policy

Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (RODO), we would like to inform you about the manner and purpose for which we process your personal data (hereinafter referred to as ‘data’), as well as about your rights related to data protection.

1. The administrator of your personal data is Tomasz Stempek carrying out business activities under the name Tomasz Stempek GLOSSA with its registered office in Krakow 31-031, Dietla 103 Street, tel: info@glossa.pl

2. We will process your personal data in order to:

  • performing the contract on the basis of Article 6(1)(b) RODO for the duration of the contract and until the expiry of the time limits for claims;
  • resolving complaints and claims on the basis of Article 6(1)(c) of the RODO for the duration of the time limits and for 1 year after the expiry of the time limits or settlement of the claim;
  • setting up, pursuing and defending against claims related to the concluded agreement on the basis of Article 6(1)(f) RODO, where the legally justified purpose is to pursue, defend against claims until the legal conclusion of proceedings including enforcement proceedings or the statute of limitations for claims;
  • archiving billing documents on the basis of Article 6(1)(c) of the DPA until the expiry of the statute of limitations for tax liabilities;
  • conduct marketing activities of our own products and services without the use of electronic communications on the basis of Article 6(1)(f) RODO, where the legitimate purpose is to conduct marketing activities promoting the business conducted, until you raise an objection.
  • If you have given your consent, also for the purpose of carrying out marketing activities for your own products and services using electronic communication means, on the basis of Article 6(1)(f) RODO and the provisions of other laws requiring consent for such activities, until you withdraw your consent for such activities or lodge an objection, depending on which event supersedes first.
  • For statistical purposes on the basis of Article 6(1)(f) RODO, where the legitimate purpose is to have information on the statistics of our activities which allows us to improve our business, until we have an additional other legal basis for processing – in the event that the basis is lost, the data are anonymised.

3. Your personal data may be transferred to other recipients, i.e.:

  • entities carrying out postal or courier activities;
  • entities enabling us to carry out payment operations;

    • – banks, where it is necessary to carry out settlements; and

  • banks, if necessary for the purpose of carrying out settlements;

    • – state authorities or other entities authorised on the basis of law.

  • governmental authorities or other entities authorised by law;

    • – entities supporting us in our business.

  • entities that support us in our operations on our behalf, in particular providers of external systems to support our operations, entities that will provide tax, legal, IT services to us, teachers, language schools with which we cooperate abroad



4. Personal data may be transferred to recipients in countries outside the European Union (‘third countries’):

  • if this is necessary for the performance of a contract or for taking steps prior to the conclusion of such a contract for the purpose of concluding it;
  • in the context of the GLOSSA school’s use of IT infrastructure (cloud computing, email).

5. The provision of data is voluntary and necessary for the performance of the contract, the processing and fulfilment of warranty, guarantee and indemnity claims, including the defence against claims.

6. You have the following rights in relation to the processing of personal data and automated decision-making.

  • the right to withdraw consent to data processing,
  • the right to access your personal data,
  • the right to request rectification of personal data,
  • right to request erasure of personal data,
  • the right to request the restriction of the processing of personal data,
  • the right to object to the processing of data due to a particular̨ situation – in cases of data processing based on the legitimate interest of the Administrator,
  • the right to personal data portability, i.e. the right to receive personal data from the Controller, in a structured, commonly used IT format suitable for machine reading. Employees have the right to data portability only in respect of those data that the Administrator processes on the basis of a contract with the employee or on the basis of the employee’s consent

7. Based on the personal data provided by Customers, the Personal Data Administrator will not make automated decisions, including decisions resulting from profiling. (Profiling means any form of automated processing of personal data which involves the use of personal data to evaluate certain personal factors of an individual, in particular to analyse or forecast aspects relating to that individual’s performance, economic situation, health, personal preferences, interestś, reliability, behaviour, location or movement̨).

Masz pytania?
Skontaktuj się z nami!