Privacy Policy

1. General Information

This policy applies to the website located at www.oliedu.pl
The website operator and the controller of personal data is: the Civic Education Foundation.

Email contact address: [email protected]

The operator is the controller of your personal data with respect to the data you provide
voluntarily.

The website uses personal data for the following purposes:

• Sending the newsletter
• Managing event registrations
• Presenting our own and our clients’ offerings
• Providing information
  The website collects information about users and their behavior in the following
  manner:
• Through voluntarily entered data that is entered into the Operator’s systems
  and activities within the Operator’s system
• By storing cookies on end-user devices.
• By storing data of individuals who make payments via the website.

2. Selected data protection methods used by the Operator

The areas where personal data is entered are protected at the transmission layer (SSL certificate). Thanks to
this, personal data and login credentials entered on the website are encrypted on the user’s
computer and can only be decrypted on the destination server.

Personal data stored in the database is encrypted in such a way that only the
Operator, who possesses the key, can decrypt it. This ensures that the data is protected in the event of a database
theft from the server.

User passwords are stored in hashed form. The hashing function is
one-way—it cannot be reversed—which is currently the industry standard for
storing user passwords. The website periodically changes its administrative passwords.
Backups are performed regularly to protect the data.

An essential element of data protection is the regular updating of all software
used to process personal data, which specifically means regular
updates to software components.

3. Hosting

The website is hosted (technically maintained) on Soft4Net servers

4. Your Rights and Additional Information on How Your Data Is Used

In certain situations, the Controller has the right to transfer your personal data to other recipients,
if this is necessary to fulfill the contract concluded with you or to fulfill the obligations
incumbent upon the Administrator. This applies to the following groups of recipients:

• a hosting company acting as a processor
• payment service providers
• operators of online chat solutions
• authorized employees and associates who use the data to fulfill the purpose
  of the website’s operation
• companies providing technical and marketing services to the Controller
  Your personal data will be processed by the Controller no longer than is necessary to perform
  the related activities specified by separate regulations (e.g., accounting regulations). With
  regard to marketing data, the data will not be processed for longer than 3 years from the moment of
  your last activity on the Website.
  You have the right to request from the Controller:
  
• access to your personal data,
• its rectification,
• deletion—which you can request yourself by contacting [email protected]
• restriction of processing,
• and data portability.
  You have the right to object to the processing of your personal data
  for the purpose of pursuing the Controller’s legitimate interests, including
  profiling, however, the right to object cannot be exercised if there are
  valid, legally justified grounds for processing that override your interests, rights,
  and freedoms, in particular the establishment, exercise, or defense of legal claims.
  You may file a complaint regarding the Controller’s actions with the President of the Personal Data Protection Office, located at
  Stawki 2, 00-193 Warsaw.
  Providing personal data is voluntary but necessary for the operation of the Website.
  Automated
  decision-making, including profiling, may be used in relation to you for the purpose of providing services under the concluded contract and for
  the purpose of the Controller conducting direct marketing.
  Personal data is transferred to third countries as defined by personal data protection regulations
  . This means that we transfer it outside the European Union.

5. Information in Forms

The Website collects information voluntarily provided by the user, including personal data, if such data is
provided.

The website may store information about connection parameters (timestamp, IP address).
In some cases, the website may store information that facilitates linking the data in the form
to the email address of the user filling out the form. In such cases, the user’s email address
appears within the URL of the page containing the form. The data provided in the form is
processed for the purpose specified by the function of the specific form, e.g., to process
a service request or sales inquiry, register for services, etc. In each case, the context and
description of the form clearly explain its purpose.

6. Administrator Logs

Information regarding user behavior on the website may be logged. This data is used for the administration of the website.

7. Relevant Marketing Techniques

The operator uses statistical and qualitative analysis of website traffic via Google Analytics (Google
Inc., headquartered in the U.S.) and HotJar. The operator does not transfer personal data to the provider of this service, but
only anonymized information. The service relies on the use of cookies on the user’s
end device. Regarding information about user preferences collected by the
Google advertising network, users can view and edit information derived from cookies using
the following tool: https://www.google.com/ads/preferences/

The Operator uses remarketing techniques that allow advertising messages to be tailored to
the user’s behavior on the website, which may give the impression that the user’s personal data is
being used to track them, however, in practice, no personal data is transferred from the Operator to advertising providers. The technical prerequisite for these activities is that cookies are enabled.

The Operator uses the Facebook Pixel. This technology allows Facebook
(Facebook Inc., headquartered in the U.S.) to know that a person registered with Facebook is using the Website. In this case,
relies on data for which it is the controller; the Operator does not transfer
any additional personal data to Facebook. The service relies on the use of
cookies on the user’s device.

The Operator uses a solution that analyzes user behavior by creating heat maps and
recording behavior on the website. This information is anonymized before it is sent to
the service provider, so that the provider does not know which individual it pertains to. In particular, passwords and other personal data are not
recorded.

The operator uses a solution that automates the Website’s operations with respect to users, e.g.,
which may send an email to a user after they visit a specific subpage: 1. for
marketing purposes, provided the user has consented to receiving commercial communications from the Operator, and 2.
for purposes related to the Operator’s business activities within the scope of a legitimate interest.

8. Information about cookies

Cookies are IT data, specifically text files, which
are stored on the Website User’s end device and are intended for use with
the Website’s web pages. Cookies typically contain the name of the website they come from,
the duration of their storage on the end device, and a unique number. The entity that places
cookies on the Website User’s end device and accesses them is
the Website operator.
Cookies are used for the following purposes:

• to maintain the Website user’s session (after logging in), so that the user does not have to
  re-enter their username and password on every subpage of the Website;
• to provide the user with information necessary to use the Website and to manage
  the user experience;
• to achieve the purposes specified above in the section “Significant Marketing Techniques”;
  The Website uses two main types of cookies: “session” cookies
  and “persistent” cookies. "Session" cookies are temporary files that are stored on
  the User’s end device until the User logs out, leaves the website, or
  closes the software (web browser). "Persistent" cookies are stored on
  the User’s end device for the period specified in the cookie parameters or until they are
  deleted by the User.
  Web browsing software (web browser) typically allows
  the storage of cookies on the User’s end device by default. Website Users
  can change their settings in this regard. The web browser allows you to delete
  cookies. It is also possible to automatically block cookies. Detailed information on this
  topic can be found in the web browser’s help section or documentation.
  Restrictions on the use of cookies may affect certain features available on
  the Website’s web pages.
  Cookies placed on a Website User’s device may also be used
  by entities cooperating with the Website operator; this applies in particular to the following companies: Google
  (Google Inc., headquartered in the U.S.), Facebook (Facebook Inc., headquartered in the U.S.), and Twitter (Twitter Inc.,
  headquartered in the U.S.).

9. Managing cookies—how do you give and withdraw consent in practice?

If you do not wish to receive cookies, you can change your browser settings. Please note that disabling cookies necessary for authentication, security, and maintaining user preferences may hinder, and in extreme cases may prevent you from using websites
To manage your cookie settings, select the web browser you use from the list below and follow the instructions:

• Edge
• Internet Explorer
• Chrome
• Safari
• Firefox
• Opera

Mobile devices:

• Android
• Safari (iOS)
• Windows Phone