This Privacy Policy describes how Kiweto, operating at Wały Jagiellońskie 8, 80-853 Gdańsk, Poland, and reachable at [email protected], processes personal data in connection with the kiweto.info website and the online course it offers. This policy is prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation, commonly referred to as GDPR), as well as the Polish Act on Personal Data Protection of 10 May 2018 (Ustawa z dnia 10 maja 2018 r. o ochronie danych osobowych). Reading this document will help you understand what data we collect, why we collect it, how long we keep it, and what rights you hold as a data subject.
1. Who is the Data Controller
The data controller for all personal data processed through kiweto.info is Kiweto, with its registered address at Wały Jagiellońskie 8, 80-853 Gdańsk, Poland. You may contact us regarding any data protection matter by writing to [email protected] or by calling +48 790 880 228. We are responsible for determining the purposes and means of processing your personal data in connection with this website and the educational services described on it.
2. What Personal Data We Collect and Why
When you use the contact form on this website, we collect the information you voluntarily submit: your name, email address, telephone number, the subject of your enquiry, and the content of your message. This data is collected for the sole purpose of responding to your enquiry. The legal basis for this processing is Article 6(1)(b) of the GDPR, which permits processing necessary for taking steps at the request of the data subject prior to entering into a contract, and Article 6(1)(f), which permits processing based on our legitimate interest in responding to communications directed to us.
When you browse the website, certain technical data may be processed automatically by the web server infrastructure, including IP addresses and browser information. This processing is technically necessary for the website to function and is based on Article 6(1)(f) of the GDPR. If you have consented to analytics or marketing cookies through our cookie consent mechanism, additional data may be processed by third-party services in accordance with their own privacy policies. You may withdraw cookie consent at any time through the cookie settings accessible at the bottom of any page.
3. How Long We Retain Your Data
Personal data submitted through the contact form is retained for the period necessary to handle your enquiry and, where applicable, to fulfill any subsequent contractual relationship. After that purpose is fulfilled, data is deleted or anonymized unless a longer retention period is required by applicable Polish or European Union law, including accounting and tax regulations that may require certain records to be kept for up to five years. Cookie consent preferences are stored in your browser for up to twelve months, after which you will be asked for consent again.
4. Your Rights Under GDPR
As a data subject residing in the European Union or the European Economic Area, you hold a set of rights under the GDPR that we are obligated to honor. You have the right to access the personal data we hold about you and to receive a copy of it. You have the right to rectification if any data we hold is inaccurate or incomplete. You have the right to erasure, sometimes called the right to be forgotten, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent on which processing was based. You have the right to restriction of processing in circumstances defined by Article 18 of the GDPR. You have the right to data portability where processing is based on consent or contract and carried out by automated means. You have the right to object to processing based on legitimate interests under Article 6(1)(f). To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month of receiving your request, as required by Article 12 of the GDPR.
5. Transfers Outside the EEA
We do not routinely transfer personal data outside the European Economic Area. Where any third-party service provider used in connection with this website processes data outside the EEA, such transfers are conducted under appropriate safeguards as required by Chapter V of the GDPR, including Standard Contractual Clauses approved by the European Commission or adequacy decisions applicable to the recipient country.
6. The Right to Lodge a Complaint
If you believe that the processing of your personal data by Kiweto infringes the GDPR or applicable Polish data protection law, you have the right to lodge a complaint with the Polish supervisory authority, the Urząd Ochrony Danych Osobowych (UODO), headquartered at ul. Stawki 2, 00-193 Warsaw, Poland. Information about how to submit a complaint is available on the UODO website at uodo.gov.pl. You may also seek a judicial remedy before a competent court in Poland.
7. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in applicable law, our data processing practices, or the services we offer. The date at the top of this document indicates when it was last revised. Material changes will be communicated through a notice on the website. Continued use of kiweto.info after any revision constitutes acknowledgment of the updated policy. We encourage you to review this page periodically.