Privacy Policy

I. Definitions

The terms used in this Policy shall have the following meanings:

  • Data Controller (hereinafter: the “Controller”) – means YELLOW HOUSE EDUCATION SPÓŁKA AKCYJNA with its registered office in Kraków, Podole 60, 30-394 Kraków;
  • Client – means a client to whom the Controller provides services.
  • Polityka – oznacza niniejszą politykę prywatności;
  • GDPR – means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation);
  • Service – means the website available at: https://bilingers.com/;
  • User – means a natural person using the website.

II. Controller

The Controller of personal data is YELLOW HOUSE EDUCATION SPÓŁKA AKCYJNA, with its registered office in Kraków, Podole 60, 30-394 Kraków. For matters relating to the processing of personal data, you may contact us at info@bf.team or by traditional mail sent to the correspondence address indicated above.

III. Legal Basis and Purposes of Processing Personal Data in the Service

The Controller processes Personal Data for the following purposes:

  • for the purpose of providing electronic services, including making content available to Users within the Service; the legal basis for processing is the necessity of processing for the performance of a contract – Article 6(1)(b) GDPR;
  • for the purpose of handling enquiries and conducting correspondence; the legal basis for processing is the legitimate interest of the Controller, consisting in responding to enquiries addressed to the Controller – Article 6(1)(f) GDPR;
  • for the purpose of improving the Service and adapting its content to User preferences; the legal basis for processing is the legitimate interest of the Controller, consisting in developing the Service and tailoring its content to User preferences – Article 6(1)(f) GDPR;
  • for the purpose of ensuring security and pursuing claims; the legal basis for processing is the legitimate interest of the Controller, consisting in ensuring the security of Service Users and asserting the Controller’s rights – Article 6(1)(f) GDPR.

IV. Duration of Processing Personal Data

The duration of Personal Data processing by the Controller depends on the purpose for which the data is processed. Personal Data is processed for the period of service provision, until the withdrawal of consent, or until an effective objection to processing is submitted in cases where the legal basis for processing is the legitimate interest of the Controller.

Once the primary purpose of processing ceases, Personal Data may continue to be stored where processing is necessary for the establishment, exercise or defence of potential legal claims. After the applicable storage period has expired, the Personal Data is deleted.

V. Recipients of Personal Data and Transfers Outside the EEA

The Controller may transfer the processed Personal Data to entities providing services on its behalf under data processing agreements, or may make it available to such entities as independent controllers. The transfer or disclosure of Personal Data may occur in particular to providers of IT services and tools, accounting service providers, and courier companies.

Personal Data processed by the Controller will not be transferred to third countries or international organisations.

VI. Rights of Data Subjects

  • Every person whose Personal Data is processed by the Controller has the following rights:
  • the right of access to their data, including the right to obtain one copy of the data free of charge
  • the right to rectification of Personal Data;
  • the right to restriction of processing;
  • the right to erasure of Personal Data;
  • the right to data portability, where Personal Data is processed based on consent or where processing is necessary for the performance of a contract and the processing is carried out by automated means;
  • the right to withdraw consent at any time, without affecting the lawfulness of processing carried out based on consent before its withdrawal;
  • the right to object to the processing of Personal Data where the processing is based on the legitimate interests of the Controller;
  • the right to lodge a complaint with the President of the Personal Data Protection Office.

VII. Cookies

The Controller uses cookies within the Service. Cookies are small text files that are stored on the User’s end device. Information collected through cookies may include data about the User’s visit to the Service (logs/events), such as the date and time of use.

The data collected through cookies is used to improve the Service and to tailor its content to the preferences of Users. Regardless of the type of browser, the User may disable cookies, either for a specific website or for all websites visited.

VIII. Final Provisions

This Privacy Policy is subject to ongoing updates.