PRIVACY POLICY
CSE SKAKANKA
TABLE OF CONTENTS:
1. Controller of personal data
2. Contact with the personal data Controller
3. Rules for personal data processed by the Controller
3.1. Customer data;
3.2. Data of authorised nominees to collect a child on behalf of the parents/legal guardians;
3.3. Data of persons using the Service;
3.4. Data of persons using a Contact Form;
3.5. Data of persons using social media portals;
3.6. Data of (prospective) contractors and of the Staff of (prospective) contractors;
3.7. Data of persons who contact us about other issues.
4. Do we process other types of data?
5. Do we transfer your data outside the EEA?
6. What rights do you have to your personal data processed by us?
6.1. What rights are you entitled to in particular?
6.2. How to exercise them?
1. CONTROLLER OF PERSONAL DATA
The controller of your personal data is:
CSE SkakAnka
with its registered office at Fiołkowa 15, 31-467 Kraków, entered in the Central Registration and Information on Business; Taxpayer Identification Number (NIP): 9451244648, National Business Registry Number (REGON): 122881658.
2. CONTACT WITH THE CONTROLLER
You can contact us about any issue concerning your personal data processing in the following manner:
- Via e-mail at: biuro@skakanka.eu
- By phone at: 124 105 142
- By post at the following address: CSE SkakAnka, ul. Fiołkowa 15, 31-457 Kraków
By using a contact us form available in the Internet service provided by the Controller at https://skakanka.eu/, hereinafter referred to as “Service”.
3. RULES FOR PERSONAL DATA PROCESSED BY THE CONTROLLER
This Privacy Policy includes information on personal data processing in relation to:
3.1. CUSTOMER DATA
3.1.1. Purposes and legal grounds for processing your personal data
When you sign your child up for the classes and events we hold, you give us your information relevant to signing and performing the contract for services we provide. Submission of personal information is voluntary, however, it is indispensable for entering into and carrying out the contract. The data provided by you both while signing the child up for classes or for day camps and registering for the event we stage are processed by us in accordance with Article 6 (1)(b) of the GDPR. The data may also be processed by us on the basis of our legitimate interest, i.e. Article 6 (1)(f)of the GDPR, in bringing or dismissing possible claims resulting from breach of contract and in complying with our legal obligations, in particular taxation and accounting obligations in accordance with Article 6 (1)(c) of the GDPR.
3.1.2. Storage period for your personal data
Your personal data shall be processed solely for the period necessary for the performance of the purposes for which they are processed or in relations to the fulfilment of our legal obligations. However, if the limitation period for claims resulting from the above purposes is longer, it shall run until the expiry date of the limitation period.
As far as the data processed by us on the basis of our legitimate interest are concerned, they may be deleted earlier if you explicitly object to their processing.
3.1.3. Recipients of your data
Your personal data shall be transferred solely to cooperators and entities with whom we cooperate while running our business, in particular to accounting, legal, software, hosting service providers etc.
3.2. DATA OF AUTHORISED NOMINEES TO COLLECT A CHILD ON BEHALF OF ITS PARENTS/LEGAL GUARDIANS
3.2.1. Purposes and legal grounds for your data processing
If the parents or legal guardians of the child participating in our activities authorised you to collect the child on their behalf, your personal information concerning the name, surname and the ID number shall be processed solely for the purpose of collecting the child/children on behalf of their parents/legal guardians on the basis of our legitimate interest in verifying the identity of the persons who collect children as soon as the classes finish (Article 6 (1)(f) of the GDPR). We obtained this information from the parents/legal guardians of the child who have authorised you to collect them.
3.2.2. Storage period for your personal data
Your personal data and the data of your child shall be processed solely for the period necessary for the performance of the purposes for which they are processed or in relations to the fulfilment of our legal obligations. However, if the limitation period for claims resulting from the above purposes is longer, it shall run until the expiry date of the limitation period.
The data may be deleted earlier if you explicitly object to their processing.
3.2.3. Recipients of your data
We shall transfer your personal data only to the entities legitimately authorised as well as to the entities which provide services to the Controller in order to perform the contract which is a binding agreement between the Controller and the parent or legal guardian of the child.
3.3. DATA OF PERSONS USING THE SERVICE
3.3.1. Purposes and legal grounds for your data processing
If you use our Service we may process your information such as IP address, cookies files, website from which you accessed the Service, browser used, information about location as well as other identifiers relating to visits to our website. If these data enable us to verify your identity, they pertain to personal data in the context of the GDPR. Therefore we process the data in order to provide online services which make contents on our website available for our Service users as well as make contact forms available. A lawful ground for processing is the necessity of processing for the performance of the contract pursuant to Article 6 (1) (f) of the GDPR. We may also process the data for research and statistical purposes, therefore a lawful basis of processing shall be our legitimate interest pursuant to Article 6 (1)(f) of GDPR which involves carrying out analyses which show active behaviour of our Service users as well as their preferences in order to enhance functionalities and improve services we provide. We may also process the data in order to establish, exercise or dismiss claims. Our legitimate interest then is to safeguard our rights.
3.3.2. Storage period for your personal data
Your personal data shall be processed solely for the period necessary for the performance of the purposes for which they are processed or in relations to the fulfilment of our legal obligations. However, if the limitation period for claims resulting from the above purposes is longer, it shall run until the expiry date of the limitation period.
As far as the data processed by us on the basis of our legitimate interest are concerned, they may be deleted earlier if you explicitly object to their processing.
3.3.3. Recipients of your personal data
We shall transfer your personal data solely to the entities with whom we cooperate while running our business (service providers), in particular legal, software, hosting service providers, etc.
3.4. DATA OF PERSONS USING A CONTACT FORM
3.4.1. Purposes and legal grounds for your data processing
A contact form available on our website allows customers to address their concerns. Using the contact form you provide your personal data which are vital to answering your questions, clarifying issues or contacting you at your request. Provision of personal information is voluntary, however, crucial to responding to your questions or other requests. The data submitted to us in such a contact form are processed by the controller in accordance with Article 6 (1)(b) of the GDPR in order to respond to your query, registration or request.
3.4.2. Storage period for your personal data
Your personal data shall be processed solely for the period necessary for the performance of the purposes for which they are processed. However, if the limitation period for claims resulting from the above purposes is longer, it shall run until the expiry date of the limitation period.
3.4.3. Recipients of your personal data
We shall transfer your personal data solely to the entities with whom we cooperate while running our business (service providers), in particular legal, software, hosting service providers, etc.
3.5. DATA OF PERSONS USING SOCIAL MEDIA PORTALS
3.5.1. Purposes and legal grounds for processing your personal data
If you visit our social media portal (Facebook), we process your information solely in order to run the profile, including updates on our services and promotions of various events as well as to contact our users thanks to functionalities available in the social media. A lawful ground for personal data processing is our legitimate interest pursuant to Article 6 (1)(f) of the GDPR in promoting our brand and in setting up and managing a community interested in the services we offer.
3.5.2. Storage period for your personal data
Your personal data shall be processed solely for the period necessary for the performance of the purposes for which they are processed. However, if the limitation period for claims resulting from the above purposes is longer, it shall run until the expiry date of the limitation period.
The data may be deleted earlier if you explicitly object to their processing.
3.5.3. Recipients of your personal data
We shall transfer your personal data solely to the entities with whom we cooperate while running our business (service providers), in particular legal, software, hosting service providers, etc.
3.6. DATA OF (PROSPECTIVE) CONTRACTORS AND OF THE STAFF OF (PROSPECTIVE) CONTRACTORS
3.6.1. Purposes for processing your personal data
If you are our (prospective) contractor or a contact person on behalf of our (prospective) contractor, your personal information shall be processed by us in order to contact you about current issues and in particular to respond to your queries and maintain further contact where necessary, make and accept offers, conduct negotiations as well as to enter into and carry out contracts between the Controller and you or between your employer/entity which you represent and maintain a relationship with them.
3.6.2. Legal grounds for processing your personal data
If you are our prospective contractor, a lawful ground for processing your personal data is to draft a contract or take steps towards concluding it (Article 6 (1)(b) of the GDPR).
If you are an employee or a cooperator of our (prospective) contractor designated as a contact person, our legitimate interest (Article 6 (1)(b) of the GDPR) is a lawful basis for processing your data to ensure that the relationship is maintained and we stay in touch with our contractors.
3.6.3. Source of obtaining your personal data
The Controller shall gather your personal data if:
- you have submitted your personal data freely;
- data have been given to a publicly accessible source, in particular on the website of your company or of your employer’s company/entity which you represent;
- data have been obtained from your employer/entity which you represent as our (prospective) contractor has designated you as a contact person on their behalf.
If you are an employee or a partner of our (prospective) contractor designated as a contact person, we shall process your personal data solely for the purpose of maintaining contact with you and shall not process data other than your name, surname, a post you hold, phone number and e-mail address.
If you are our (prospective) contractor and we take steps towards concluding a contract, we shall additionally process your personal data necessary to conclude a future contract, such as business address, postal address, Taxpayer Identification Number (NIP), National Business Registry Number (REGON). We may process other data solely if you submit them to us.
Provision of your personal data is voluntary. However, we collect only vital data and without submitting them we shall not have any technical possibility to contact you or enter into a contract with you or your employer/entity which you represent.
3.6.4. Storage period for your personal data
Your personal data shall be processed for the period of handling current correspondence, namely responding to queries and maintaining further contact where necessary, making offers, further exchange of correspondence, etc. After that period as well as in the event of signing an agreement with you or your employer/entity which you represent, your personal information shall be processed until the limitation period for any claims has elapsed.
As far as the data processed by us on the basis of our legitimate interest are concerned, they may be deleted earlier if you explicitly object to their processing.
3.6.5. Recipients of your personal data
We shall transfer your personal data solely to the entities with whom we cooperate while running our company (service providers), in particular accounting, legal, software and hosting service providers, etc.
3.7. DATA OF PERSONS CONTACTING US ABOUT OTHER ISSUES
3.7.1. Purposes for processing your personal data
If you contact us or we contact you for purposes other than the purpose of starting cooperation with you as our contractor or as a designated contact person on behalf of our contractor, we shall process your personal data solely concerning the contact.
3.7.2. Legal grounds for processing your personal data
Legal grounds for processing your personal data is our legitimate interest (Article 6 (1) (f) of the GDPR) in dealing with correspondence we receive and handling current matters such as administrative issues related to the business we operate.
The Controller shall process your personal data only if:
- you have submitted them or
- you have made them available or done so on behalf of your employer/entity you represent.
If you submit your data it means that you give them freely. However, without submitting them we shall not have any technical possibility to contact you and settle the matter you are bringing to us.
3.7.3. Storage period for your personal data
Your personal data shall be processed for the period of handling current correspondence, namely responding to queries and maintaining further contact where necessary. After this period your personal information may be processed until the limitation period for claims has elapsed.
The data may be deleted earlier if you explicitly object to their processing.
3.7.4. Recipients of your personal data
We shall transfer your personal data solely to the entities with whom we cooperate while running our company (service providers), in particular accounting, legal, software, hosting service providers etc.
4. OTHER TYPES OF DATA PROCESSED BY THE COLLECTOR
Since we run our business, we collect and process information on other occasions for the purposes for making and maintaining business contacts, for example at business meetings or while exchanging business cards, etc.
A legal basis for processing the data in such situations is our legitimate interest (Article 6 (1)(f) of the GDPR) in establishing and maintaining business relations with our customers, contractors and partners.
Personal data collected in such cases are processed by us solely for the purpose for which they have been submitted to us and are not transferred any further to any third parties apart from the entities we cooperate with while running our business (service providers) in particular hosting service providers etc.
Your personal information collected in such cases shall be kept for the period of maintaining our relationship justifying our mutual business contact or until you lodge an objection against processing your personal data.
5. TRANSFER OF THE DATA OUTSIDE THE EEA
We do not transfer your personal data outside the EEA.
6. YOUR LEGAL RIGHTS TO PROCESS THE PERSONAL DATA
6.1. RIGHTS RELATED TO PROCESSING YOUR PERSONAL DATA
Since we process your personal data, you have the following rights:
6.1.1. Right to access your personal data
Pursuant to the law you may obtain the information on your personal data we process, mainly on the purposes and legal grounds for processing, types (categories) of the data, recipients to whom we transfer your personal data as well as on the time planned for processing your personal data.
6.1.2. Right to obtain a copy of your personal data
In the event of making such a request you shall obtain a copy of your personal data which we process.
6.1.3. Right to rectify your personal data
If the data we process are inaccurate or incomplete, you have the right to have them rectified or completed by the controller.
6.1.4. Right to erasure of your personal data
The data subject shall have the right to erasure of the data we process in case they are no longer relevant to perform any purpose they have been collected for.
6.1.5. Right to restriction of processing
In case the data subject requests the restriction of processing, your personal data shall not be processed for purposes other than those for which they have been stored as long as the reasons for their restriction cease to exist. In addition to storage, your personal information within the period of the restriction may be processed exceptionally with your consent or for the establishment, exercise or defence of legal claims or for the protection of rights of another natural or legal person or for public interest considerations.
6.1.6. Right to your data transfer
If we process your data in relation to the agreement signed or your consent given, you have the right to receive your personal data you have provided to the controller in a machine readable format. You have also the right to request that your data be transferred to a third party, however, on condition that technical requirements are satisfied both on the part of the controller and on the part of a third party to which you intend to transfer your data.
6.1.7. Right to object to personal data processing
With regard to the data processed for the purpose of our legitimate interest in accordance with Article 6 (1)(f) of the GDPR, you shall have the right to object to the processing of personal data at any time. However, it is important to note that your objection to processing should be justified. You shall have the right to lodge an objection to the processing of your personal data by the controller for marketing purposes without giving any specific grounds.
6.1.8. Right to withdraw a consent to processing your personal data
In case of processing your data with your consent (Article 6 (1)(a) of the GDPR), you have the right to withdraw your consent at any time. The withdrawal of the consent shall not by all means affect the lawfulness of processing of your personal data by us based on consent before its withdrawal.
6.1.9. Right to lodge a complaint with the President of the Personal Data Protection Office
If you maintain that the processing procedures violate the provisions of the GDPR or other provisions with regard to the personal data protection, you have the right to lodge a complaint with the President of the Personal Data Protection Office.
6.2. HOW TO SUBMIT REQUESTS IN RELATION TO THE PROCESSING OF YOUR PERSONAL DATA
You have the right to submit any requests, which relate to your rights to your personal data processed by the Controller, in the following way:
6.2.1. via e-mail at: biuro@skakanka.eu
6.2.2. by post at: CSE SkakAnka ul. Fiołkowa 15, 31-457 Kraków
The reply to your request shall be sent in the same manner as you have submitted your request to us, unless you clearly indicate in what manner you want to receive it.
If we are unable to identify your person on the basis of your request, we shall ask you to provide some additional information.
The Controller shall respond to your request for exercising your rights within a month of receiving it. The deadline can also be extended and in such cases you shall be informed along with justifications for extension.
7. COOKIES FILES
Our website accessible at http://skakanka.eu/ like many other websites stores so called cookies files on the user’s computer or mobile device.
The cookies files recorded on your end device facilitate the access to the information contained therein. Thanks to this information our websites can work properly but also it allows us to carry out statistics analyses of web activity, for instance gathering information on contents read most frequently, etc. Cookies file can be used to collect information for marketing purposes, for example to deliver customised content to suit your preferences and interests on the basis of the data stored in cookies files.
You can block cookies files at any moment. Every browser enables the user to disable cookies after every session on a given website or permanently, both for a given website and for all Internet webpages you visit. The guidelines as to how to disable cookies files are provided by the developer of your internet browser, mainly in the help menu and the like.
The information that our websites use cookies files appear on your first visit to a given page. If you decide to stay on our website without disabling the cookies you give your consent to downloading them.