PRIVACY POLICY

PRIVACY POLICY 
London School of English Wrocław sp. z o.o.
with its registered seat in Wrocław

§1
Personal data controller

1. The controller of Personal Data at the London School of English is London School of English Wrocławspółka z ograniczonąodpowiedzialnością with its registered seat in Wrocław, ul. Stalowa 80, registered in the business register of the National Court Register under KRS number 0000967694, whose registration files are kept by the District Court for Wrocław-Fabryczna in Wroclaw, 6th Commercial Division of the National Court Register, NIP 8943185649, with share capital of PLN 50,000.00,hereinafter referred to as “Controller” or “London School of English”.
2. The Controller can be contacted in writing, by post or by e-mail at: info@lse-poland.pl.

§2
Personal data

1. This Privacy Policy sets out the rules for the Controller's processing of the personal data of current, former and prospective customers of London School of English services and London School of English students and all visitors to and users of our language school website: lse-poland.pl,collectively referred to as "Clients".
2. On the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as "RODO", and on the basis of the provisions of the Act of 10 May 2018 on the protection of personal data, hereinafter referred to as "the Act", the Controller collects the data of the Clients necessary for the provision of the language teaching services. The collected data enable:
   1. providing services in the form of language courses,
   2. conducting language examinations,
   3. performance of activities related to the conclusion of agreements for the provision of services in the form of language courses, including customer service, also by means of electronic communication, dealing with complaints, issuing invoices, collecting payment for language courses, possible debt recovery, quality control of the services provided.
3. In order to provide the services indicated in section  2 of this paragraph, in particular the following personal data of Clients may be collected and processed:
   • name and surname,
   • address of residence and correspondence address,
   • PESEL number,
   • e-mail address,
   • telephone number,
   • invoicing data,
   • interest in our services,
   • device IP address or browser ID
4. The provision of data is always voluntary, but the failure in provision may result in the London School of English not being able to provide its services.  The legal basis for the processing of Clients’ personal data is:
   1. Article 6 section 1 letter b) RODO - the necessity to perform a contract to which the Client is a party, or to take action at the Client 's request prior to entering into an agreement, or
   2. Article 6 section 1 letter c) of the RODO –the necessity to fulfil the Controller's legal obligations, or
   3. Article 6 section 1 letter f) RODO - the Controller's legitimate legal interest in establishing, pursuing or defending claims until they have become time-barred, or until the relevant proceedings, if any, have been concluded within that period, or
   4. Article 6 section 1 letter a) of RODO, i.e. the Client's consent to the processing of personal data for specific purposes, where no other legal basis for processing personal data exists.

§3
Principles of personal data processing

1. Accordance with the principle of minimisation, we process only those categories of personal data which are necessary to achieve the purposes referred to in §2 of the Privacy Policy.
2. Clients' personal data shall only be processed for the period necessary to achieve the purposes referred to in §2 of the Privacy Policy. However, personal data may be processed for a longer period, i.e. the period of the statute of limitations for claims or the completion of relevant proceedings, if they have been initiated within the period of the statute of limitations.
3. Personal data may be transferred by the Controller to a third country within the meaning of the provisions of RODO. The Controller shall apply the safeguards referred to in Chapter V of RODO in this regard.
4. Personal data shall not be subject to profiling by the Controller within the meaning of the provisions of RODO.
5. The Client, on the basis of the provisions of RODO, has the right to:
   1. to be informed of the processing of personal data as referred to in Article 12 of RODO,
   2. to access his/her personal data as referred to in Article 15 of RODO,
   3. to correct, complete, update, rectify personal data as referred to in Article 16 of RODO,
   4. delete of data (right to be forgotten) as referred to in Article 17 of RODO,
   5. restriction of processing referred to in Article 18 of RODO,
   6. data portability as referred to in Article 20 of RODO,
   7. to object to the processing of personal data as referred to in Article 21 of RODO, by directing a message by e-mail to the Controller’s e-mail address indicated in §1 section 2 of the Privacy Policy.
6. Each identified security breach shall be documented, and in the event of the occurrence of one of theof the situations set out in the provisions of the RODO or the Act, the data subjects and, if applicable, the PUODO shall be informed of such a breach of data protection legislation.
7. In the case of data processing by the Controlleron the basis of §2 section 4 letter d. of the Privacy Policy, the Clients shall have the right to withdraw consent to the processing of personal data. In such a situation, the existing processing of such Client’s personal data on the basis of the previously granted consent shall comply with the provisions of the RODO.

§4
Recipients of personal data

Recipients of Clients’ personal data may be in the first placeemployees and associates of London School of English, the hosting provider and service providers to London School of English. 

§5
Final provisions

In matters not regulated by this Privacy Policy, the relevant provisions of generally applicable law shall apply accordingly.