Privacy Policy

Preliminary Information

Respecting the right to privacy, we wish to declare that the data we obtain is processed in accordance with national and European legal regulations and under conditions guaranteeing its security.

Data Controller

The controller of your personal data is Tęczowy Ogród sp. z o.o. with its registered office in Warsaw (02-634), ul. Miłobędzka 14.

Data Protection Officer

The controller has appointed a Data Protection Officer, whom you can contact on all matters concerning the processing of personal data, by email: agata.zurowska@teczowyogrod.pl or in writing to the DPO at the correspondence address: Tęczowy Ogród sp. z o.o., ul. Miłobędzka 14, 02-634 Warszawa.

Legal Bases and Purposes of Processing

In pursuit of its statutory objectives, the controller processes personal data on the basis of Article 6(1)(a), (b), (c), and (f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the "GDPR".

Personal data is processed for the following purposes:

• fulfilling legal obligations incumbent upon the controller in connection with operating an educational institution (Article 6(1)(c)),
• performance of educational agreements, employment contracts, and contracts with contractors and subcontractors (Article 6(1)(b)),
• specified in separate consent (Article 6(1)(a)),
• establishing, pursuing, and defending claims, conducting marketing activities promoting the educational institution's operations, and conducting monitoring on the institution's premises to enhance personal safety and property protection (Article 6(1)(f)).

Data Retention Periods

Personal data, depending on its type and purpose, will be stored for the following periods:

• data concerning education – up to 50 years, in accordance with the subject-specific records retention schedule,
• data concerning recruitment processes for the Bilingual Preschool Tęczowy Ogród – until the completion of the student recruitment process,
• data concerning recruitment processes for job candidates – until the completion of the recruitment process and the selection of a candidate, and in the case of consent given for future recruitment processes – no longer than one year,
• employee data – in accordance with applicable labor law regulations,
• contractor and subcontractor data – for the period specified in the contract and agreed upon by the parties or until the expiry of limitation periods for claims arising from the concluded contract, in accordance with applicable law,
• accounting data – for the period until the obligations arising from legal provisions regarding the retention of accounting documents expire,
• data resulting from separate consents – until the expiry of the period for which they were granted, or until the consent is withdrawn,
• data concerning marketing activities – until an objection is raised,
• monitoring data – for a period not exceeding 3 months from the date of recording or until a justified objection is raised, unless the recording constitutes evidence in proceedings – in which case until their conclusion.

Recipients of Data

The controller may disclose personal data to authorized employees, entities processing data on behalf of the controller, and entities authorized to obtain information under the provisions of law.

As a rule, personal data will not be transferred outside the European Economic Area (hereinafter "EEA"). Considering the provision of services by subcontractors in the implementation of services and IT infrastructure, the controller may commission the performance of specific IT tasks or activities to recognized subcontractors operating outside the EEA, which may result in the transfer of personal data outside this area; however, such data will be protected using standard data protection clauses, which, pursuant to Article 46(2) of the GDPR, constitute appropriate safeguards for data transfers.

Rights of Data Subjects

Every person whose data is processed has the right to access the content of their data, to rectify it, to erasure, to restriction of processing, the right to data portability, and the right to withdraw consent at any time.

They also have the right to lodge a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office, if they consider that the processing of personal data violates the provisions of the General Data Protection Regulation of 27 April 2016 (GDPR).

Information on the Requirement / Voluntary Nature of Providing Data

Providing data is voluntary but necessary to achieve statutory objectives, including, among others, operating the educational institution Bilingual Preschool Tęczowy Ogród.

This means that any person wishing to use educational services or become a contractor, subcontractor, or employee must provide us with their personal data.

Data Security

To ensure the integrity, confidentiality, and availability of personal data, the controller has implemented procedures allowing access to personal data only to authorized persons and only to the extent necessary due to the tasks they perform.

Use of "Cookies"

The website of the Bilingual Preschool Tęczowy Ogród does not automatically collect any data, except for data stored in cookie files when using the site. Cookies are small files created and stored on Users' devices (e.g., computer, smartphone), allowing the content of the viewed page to be displayed correctly.

The primary purpose of cookies is to adapt the website content to the User's preferences and to adjust the speed of using the site. Cookies also allow for the collection of anonymous statistics, which inform how Users use the website, helping to improve the scope of information and the way it is displayed. Cookies are not used to identify the user, and the User's identity is not established based on them.

When using the website of the Bilingual Preschool Tęczowy Ogród, the User may receive cookies from cooperating third parties (e.g., Google, Facebook) conducting advertising campaigns. Additional information about these cookies can be found on the websites of the mentioned entities.

The User can independently control how cookies are handled using mechanisms built into the software used for browsing websites. At any time, they can disable the option to save cookies in their internet browser. Using the Bilingual Preschool Tęczowy Ogród website without changing cookie settings means that these files will be saved in the device's memory.