This policy describes what personal data we collect through the website ⟨DO UZUPEŁNIENIA: website address⟩, for what purpose and on what legal basis.
Data controller
The controller of your personal data is ⟨DO UZUPEŁNIENIA: registered company name⟩, with its registered office at ⟨DO UZUPEŁNIENIA: address⟩, VAT ID (NIP) ⟨DO UZUPEŁNIENIA⟩, statistical number (REGON) ⟨DO UZUPEŁNIENIA⟩.
Contact in matters concerning personal data: ⟨DO UZUPEŁNIENIA: e-mail address⟩, phone +48 696 300 627.
What data we collect and for what purpose
| Data | Purpose | Legal basis | Retention period |
|---|---|---|---|
| Name, e-mail address, phone number, content of the message | Answering an enquiry sent through the contact form or by e-mail | Article 6(1)(f) of the General Data Protection Regulation (GDPR, known in Poland as RODO) — legitimate interest of the controller | Until the correspondence is closed, no longer than 12 months |
| Course participant details, health declaration | Performance of the contract to deliver training and ensuring safety | Article 6(1)(b) GDPR — performance of a contract; Article 9(2)(a) GDPR — consent, as regards health data | For the period required by law and until claims become time-barred |
| Invoicing details | Issuing and storing accounting records | Article 6(1)(c) GDPR — legal obligation | 5 years from the end of the tax year |
| IP address, server logs | Keeping the site secure and working correctly | Article 6(1)(f) GDPR | In accordance with the hosting provider’s policy |
Cookies
The site does not use analytics or marketing tools that set cookies. We use only cookies necessary for the site to function — those that are essential for providing the service and that do not require the user’s consent under the Polish Electronic Communications Law (ustawa Prawo komunikacji elektronicznej).
Typefaces are served from our own server rather than from external CDNs, so your IP address is not passed on to third parties while you browse the site.
Data recipients
Your data may be passed to entities that process it on our behalf: the hosting provider, the e-mail provider and the accounting office. ⟨DO UZUPEŁNIENIA: name of the hosting provider⟩
In the case of training courses, the data required to issue a certification card is passed to International Diving Federation.
Your rights
You have the right to:
- access your data and receive a copy of it,
- rectify (correct) your data,
- have your data erased,
- restrict processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw consent at any time, without affecting the lawfulness of processing carried out before it was withdrawn.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO) (ul. Stawki 2, 00-193 Warsaw, Poland) if you consider that the processing of your data infringes the GDPR.
Providing data is voluntary
Providing data is voluntary, but it is necessary in order to answer an enquiry, conclude a training contract or take part in a trip. Providing health data is a condition of being admitted to training, for safety reasons.