privacy policy

Dear User!

This Privacy Policy is intended to provide you with information on how your data is processed during your visits to our website, as well as when you contact our company and purchase training services included in our offer. It serves to provide you with the information referred to in Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“GDPR”). The Privacy Policy is for informational purposes and does not impose any obligations on you (it is not a regulation or contract).

Who is the administrator of your personal data?

The administrator of your personal data is Marta Głowacka who conducts business activity under the name Contrea Marta Głowacka, 1 Maja Street 13 lok. 3 floor, 10-117 Olsztyn, NIP: 6941571258, REGON: 524826929. In all matters relating to data protection you can contact us by email at: contact@contrea.eu or by mail to: Contrea Marta Głowacka, ul. 1 Maja 13 lok. 3 floor, 10-117 Olsztyn.

How do we keep your personal data safe?

1. Your personal data is processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“GDPR”) and other currently applicable data protection laws.

2. We use, as required by national and EU laws, technical and organizational measures to ensure the protection of processed personal data and to secure personal data against unauthorized access, acquisition by unauthorized persons, processing in violation of the law, and alteration, loss or destruction.

3. The provision of personal data is voluntary, but necessary for use of the Website’s functionalities that require it, including the establishment and maintenance of a Customer Account and the placement and execution of an order.

4. Where the basis for the processing of personal data is consent, its absence will prevent us from taking the action to which the consent relates. You may withdraw your consent at any time, however, this will not affect the legality of our processing of your personal data, which we performed on the basis of consent before its withdrawal.

For what purpose and on what basis do we process your personal data and how long will we keep it?

Your personal data may be processed for different purposes and on different legal bases, depending on which functionality of the Website you use. In particular, we process your personal data for the purpose of providing services electronically under the Terms and Conditions, including primarily for the purpose of maintaining a Customer Account, as well as for the purpose of placing and processing orders on the Website. Your personal data may be processed by us for:

1. The Customer Account and other services provided electronically

Your personal data provided by you in connection with the creation of a Customer Account, as well as other data collected in connection with your use of the functionality of the Website (in particular: first and last name, address [street, building number, premises number, city, country], e-mail address, telephone number, delivery address, if different from the customer’s address, and in the case of entrepreneurs, also the name and address of the company and NIP), are or may be processed by us for the following purposes and on the following legal bases:

a. maintaining a Customer Account and providing other services electronically, as specified in the Terms and Conditions, based on the contract for the provision of services electronically, which you conclude by creating a Customer Account and accepting the Terms and Conditions, as well as taking action, at your request, prior to the conclusion of the aforementioned contract (Article 6(1)(b) of GDPR),

b. possible establishment, investigation or defence against claims that may arise in connection with your use of the Website, as well as other purposes (e.g., archival for the purpose of proving facts), which constitute our legitimate interest (Article 6(1)(f) of GDPR).

We will process your personal data for the duration of the maintenance of your Customer Account or for the duration of the provision of any other electronic service, unless further retention is justified by the statute of limitations on claims or by generally applicable law or is justified by our overriding interest arising from the pursuit of legitimate interests. In each case, the longer term of personal data storage shall be decisive.

2. Placing an order on the Website

Your personal data provided by you in connection with placing an order on the Website (in particular: first and last name, address [street, building number, apartment number, city, country], e-mail address, telephone number, delivery address, if different from the customer’s address, payment method, payment number, order number, order date, order value, and, in the case of entrepreneurs, also company name and address and Tax Identification Number), are or may be processed by us for the following purposes and on the following legal grounds:

a. Fulfilment of your order placed on the Website and performance of the contract thus concluded, as well as taking action, at your request, prior to its conclusion (Article 6(1)(b) of the GDPR),

b. Possible establishment, investigation or defence against claims that may arise in connection with your use of the Website, as well as other purposes (e.g., archival for the purpose of proving facts), which constitute our legitimate interest (Article 6(1)(f) of the GDPR),

c. issuance and storage of accounting documents and processing of any complaints and withdrawal statements, in accordance with applicable regulations (Article 6(1)(c) of the GDPR).

We will process your personal data for the period of performance of the contract, unless further data storage is required by generally applicable laws (e.g. tax, accounting regulations) or justified by the statute of limitations on claims, or justified by our overriding interest arising from the realization of legitimate interests. In each case, the longer term of personal data storage is decisive.

3. Email or telephone contact

Your personal data provided by you in connection with email or telephone contact (i.e. data necessary to establish and maintain contact), as well as collected in the course of further communication, are or may be processed by us for the following purposes and on the following legal grounds:

a. Responding to your contact by email, telephone or online chat, which is our legitimate interest (Article 6(1)(f) of the GDPR),

b. to take pre-contractual action at your request, if that is what the communication will be about (Article 6(1)(b) of the GDPR),

c. possible establishment, investigation or defense against claims that may arise in connection with your use of the Website, as well as other purposes (e.g., archival for the purpose of proving facts), which constitute our legitimate interest (Article 6(1)(f) of the GDPR).

We will process your personal data up to the time of correspondence, unless further storage is justified by the statute of limitations for claims, or by generally applicable law, or is justified by an overriding interest of the Administrator arising from the pursuit of legitimate interests. In any case, the longer term of personal data storage shall be decisive.

4. Newsletter

Your personal data provided by you in connection with subscribing to the Newsletter, is or may be processed by us for the following purposes and on the following legal grounds:

a. Provision of the Newsletter service under the Terms and Conditions, which consists in sending commercial information to the e-mail address you provide (Article 6(1)(b) of the GDPR),

b. Possible establishment, investigation or defense against claims that may arise in connection with your use of the Website, as well as other purposes (e.g. archival for the purpose of proving facts), which constitute our legitimate interest (Article 6(1)(f) of the GDPR).

We will process your personal data for the period of your Newsletter subscription, unless further data storage is justified by the statute of limitations for claims, or by generally applicable law, or is justified by our overriding interest arising from the exercise of legitimate interests. In each case, the longer term of personal data storage shall be decisive.

5. Social media

Your personal data that you leave by visiting our social media profiles (comments, likes, shares) are or may be processed by us for the following purposes and on the following legal grounds:

a. maintaining social media profiles and conducting marketing and promotional activities within these profiles, which is our legitimate interest (Article 6(1)(f) of the GDPR),

b. Possible establishment, investigation or defense of claims that may arise in connection with your use of our social media profiles, as well as other purposes (e.g., archival for the purpose of proving facts), which constitute our legitimate interest (Article 6(1)(f) of the GDPR).

We will process your personal data until the aforementioned purposes have been fulfilled or until you object, unless further storage is justified by the statute of limitations for claims or by generally applicable law or justified by the overriding interest of the Administrator arising from the pursuit of legitimate interests. In each case, the longer term of storage of personal data is decisive. Information collected by social networks in this way may be used by these networks for their own purposes, which you can learn more about in their privacy policies. Social networks may be independent controllers of this data, or they may act as joint-controllers.

What are cookies?

1. Our website uses cookie technology. Cookie files are stored on the final device of the person visiting the website.

2. Cookies are IT data, in particular text files, which are stored on the end device of the person visiting the website and are intended for use of the website. Cookies usually contain the name of the website they come from, the time they are stored on the end device and a unique number.

3. Cookies are used by us to the extent that is necessary to ensure proper operation of the website. In this regard, cookies are used on the basis of Article 399.3.2 of the Electronic Communications Law.

What rights do you have?

In connection with our processing of your personal data, you have a number of rights. You can exercise each of your rights by contacting us by email at: contact@contrea.eu or by letter to: Contrea Marta Głowacka, ul. 1 Maja 13 lok. 3 floor, 10-117 Olsztyn.

You are entitled to:

a. Access to your personal data and the right to request their rectification, erasure and restriction of processing. To the extent that the basis for processing is the premise of our legitimate interest, you have the right to object to the processing of your personal data,

b. to the extent that the basis for the processing of your personal data is consent, you have the right to withdraw consent. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal,

c. to the extent that the basis for the processing of your personal data is consent or contract, you also have the right to portability of your data, i.e. a request to receive your personal data from us, in a structured, commonly used format,

d. file a complaint with the President of the Personal Data Protection Office (Stawki 2, 00-193 Warsaw), whenever you consider that the processing of your personal data violates your rights.

Who do we share your personal data with?

1. Your personal data may be transferred to entities entitled to obtain personal data under the law, as well as to entities to whom we entrust data on the basis of contracts.

2. In order to implement the agreement concluded through the Website and to ensure the proper functioning of the Website, we share your personal data in particular with entities that provide the following services: electronic payment, accounting, hosting, IT and software delivery.

3. The data of trainees (first and last name) may be visible to other trainees. The visibility of this data to other participants is limited to organizational purposes and results from the legitimate interests of the administrator, which is to ensure the proper conduct of the training. By ordering the Training Service, the Customer accepts that his/her name will be visible to other training participants for organizational purposes.