Privacy Policy
Respecting the right to privacy, we would like to declare that the data we collect is processed in accordance with national and European legal regulations and under conditions ensuring its security.
Data Controller
The controller of your personal data is Tęczowy Ogród sp. z o.o. with its registered office in Warsaw, (02-634), ul. Miłobędzka 14.
Data Protection Officer
The Controller has appointed a Data Protection Officer, who may be contacted in all matters concerning the processing of personal data by email: agata.zurowska@teczowyogrod.pl
or by correspondence addressed to the Data Protection Officer at: Tęczowy Ogród sp. z o.o., ul. Miłobędzka 14, 02-634 Warsaw.
Legal bases and purposes of processing
In pursuing its statutory objectives, the Controller processes personal data on the basis of Article 6(1)(a), (b), (c) and (f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”).
Personal data is processed for the following purposes:
- to fulfil legal obligations imposed on the Controller in connection with the operation of an educational institution (Article 6(1)(c)),
- to perform education agreements, employment-related agreements, and agreements with contractors and subcontractors (Article 6(1)(b)),
- for purposes indicated in separate consent (Article 6(1)(a)),
- to establish, pursue and defend claims, conduct marketing activities promoting the educational institution’s operations, and operate monitoring on the premises of the educational institution in order to increase the safety of persons and protect property (Article 6(1)(f)).
Data retention periods
Personal data, depending on its type and purpose, will be stored for the following periods:
- education-related data – up to 50 years, in accordance with the records classification scheme,
- data concerning recruitment processes for Warsaw Bilingual School, Professor Władysław Bartoszewski Bilingual Primary School – until the student recruitment process is completed,
- data concerning recruitment processes for job candidates – until the recruitment process is completed and a candidate is selected, and in the case of consent to participate in future recruitment processes – no longer than one year,
- employee data – in accordance with applicable labour law regulations,
- data of contractors and subcontractors – for the period specified in the agreement and agreed by the parties, or until the expiry of limitation periods for claims arising from the concluded agreement,
- accounting data – until the expiry of obligations arising from legal regulations concerning the retention of accounting documents,
- data processed on the basis of separate consent – until the expiry of the period for which the consent was granted or until the consent is withdrawn,
- data concerning marketing activities – until an objection is raised,
- monitoring data – for a period not exceeding 3 months from the date of recording or until a justified objection is raised, unless the recording constitutes evidence in proceedings – in such case, until the proceedings are completed.
Recipients of data
The Controller may disclose personal data to authorised employees, entities processing data on behalf of the Controller, and entities authorised to obtain information under legal regulations.
As a rule, personal data will not be transferred outside the European Economic Area (“EEA”). However, due to the provision of services by subcontractors in the implementation of services and IT infrastructure, the Controller may entrust certain activities to subcontractors operating outside the EEA.
In such cases, the data will be protected by standard data protection clauses, which, pursuant to Article 46(2) of the GDPR, constitute appropriate safeguards in the case of data transfers.
Rights of data subjects
Every person whose data is processed has the right to access their data, rectify it, erase it, restrict its processing, the right to data portability, and the right to withdraw consent at any time.
They also have the right to lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office, if they consider that the processing of personal data violates the provisions of the GDPR.
Information on the requirement / voluntary nature of providing data
Providing data is voluntary, but necessary to achieve the statutory objectives, including, among others, operating the educational institution Warsaw Bilingual School, Professor Władysław Bartoszewski Bilingual Primary School.
This means that every person wishing to use educational services or become a contractor, subcontractor or employee must provide their personal data.
Data security
In order to ensure the integrity, confidentiality and availability of personal data, the Controller has implemented procedures allowing access to personal data only to authorised persons and solely to the extent necessary for the performance of their duties.
Use of “cookies”
The website of Warsaw Bilingual School, Professor Władysław Bartoszewski Bilingual Primary School does not automatically collect any data, except for data stored in cookies while using the website.
Cookies are small files created and stored on Users’ devices, such as computers or smartphones, which allow the content of the viewed website to be displayed correctly.
The primary purpose of cookies is to adapt the content of the website to the User’s preferences and adjust the speed of website use. Cookies also make it possible to collect anonymous statistics showing how Users use the website, which helps improve the scope of information and the way it is displayed.
Cookies are not used to identify the User, and the User’s identity is not determined on their basis.
When using the website of Warsaw Bilingual School, Professor Władysław Bartoszewski Bilingual Primary School, the User may receive cookies from cooperating third-party entities, such as Google or Facebook, carrying out advertising campaigns.
Additional information about these cookies can be found on the websites of the above-mentioned entities.
The User may independently control how cookies are handled using mechanisms built into the software used to browse websites. The User may disable the option of saving cookies in their web browser at any time.
Using the website of Tęczowy Ogród Bilingual Preschool without changing cookie settings means that these files will be stored in the device’s memory.