of October 28, 2022.
Systemowa School of Entrepreneurship Sp. z o. o. with its registered office in Poznań, cares for the security of the privacy of personal data that it processes by providing electronic services. Systemowa School of Entrepreneurship Sp. z o. o. in order to maintain the highest protection of personal data, it complies with the rules of applicable law, including the GDPR Regulation: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free the flow of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
Personal Data Administrator.
The administrator of your personal data is Systemowa Szkoła Przedsiębiorczości Sp. z o. o. with its registered office in Poznań, ul. Polska 15, postal code: 60-595, entered into the register of entrepreneurs, as well as the register of associations, other social and professional organizations, foundations and public health care facilities of the National Court Register under KRS number 0000468852, whose registration files are kept by the District Court of Poznań - Nowe Miasto and Wilda in Poznań, 8th Commercial Division of the National Court Register, under NIP number: 7831701111, hereinafter referred to as "SSP".
If you wish to contact the Administrator, please contact:
- via e-mail sent to the e-mail address: firstname.lastname@example.org;
Data Protection Officer.
SSP has appointed a Data Protection Officer. Contact address: email@example.com.
Purpose and legal basis for the processing of Personal Data?
Purposes for which we process personal data:
- Pursuant to the provision of Art. 6 sec. 1 lit. a) GDPR, i.e. on the basis of the consent expressed by the data subject in order to:
- sending commercial information;
- marketing of own products or services;
- sending the newsletter
- making contact and processing requests resulting from the contact forms;
- registration for trainings, workshops, events organized by SSP or in cooperation with SSP;
- recruitment of employees;
- recruitment conducted for the purposes of a scholarship program or a support program organized by SSP or in cooperation with SSP, as well as the implementation of a scholarship program or support programme;
- running websites available after registration by users.
Consent to the processing of personal data for each of the above purposes is voluntary, however, necessary for the SSP to take the actions referred to above.
- Pursuant to the provision of art. 6 sec. 1 lit. b) GDPR, i.e. when it is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject before concluding the contract, in order to:
- to establish, shape the content, amend or terminate contracts between the SSP and the data subject;
- taking action at the request of the data subject before concluding the contract.
This point applies in particular to contracts concluded via e-mail or the Internet, as well as actions taken before the conclusion of the contract initiated by the party via the Internet or e-mail.
- Pursuant to the provision of Art. 6 sec. 1 lit. c) GDPR, i.e. for the purposes of fulfilling the legal obligation incumbent on SSP, in order to:
- performance of contracts with third parties,
- preparing invoices and fulfilling other obligations resulting from the provisions of the tax law.
- Pursuant to the provision of Art. 6 sec. 1 lit. f) GDPR, i.e. for purposes resulting from legitimate interests pursued by SSP,in order to:
- statistical, informational, archival, analytical - in this case, the SSP's legitimate interest is the analysis of the activities and services already performed by the SSP in order to adapt them to the needs of those interested in the future and to learn about the activities of customers;
- performance, establishment, shaping of the content, amendment or termination of contracts to which SSP is a party, as well as taking action before concluding the contract - if the contract is concluded with a person other than the person indicated for contact regarding the contract (e.g. employee, co-worker parties) - in this case, the SSP's legitimate interest is the performance of the contract or taking action before its conclusion;
- organization of study trips and insurance of their participants - in this case, the SSP's legitimate interest is the implementation of the SSP's statutory objectives;
- surveys of satisfaction with the services offered by the SSP - in this case, the legitimate interest of the SSP is to learn the opinions of customers on the services provided in order to adapt them to the needs and expectations of those interested;
- determination, investigation or defense against claims - in this case, the SSP's legitimate interest is to have personal data that will allow to establish, pursue or defend against claims, including clients and third parties;
- administration of SSP websites - in this case, the legitimate interest of SSP is the need to maintain and administer websites;
- sending commercial information by the SSP - in this case, the legitimate interest of the SSP is direct marketing.
Personal data processed by ICT systems are protected against access by unauthorized persons. We do not share data with third parties without the consent of the data subjects. Unless this is done on the basis of legal provisions (including at the request of state authorities authorized under the Act for the purposes of proceedings conducted by them).
Personal data that you fill in our forms is often necessary for the provision of services. Providing your personal data is voluntary.
Sharing personal data
We transfer your personal data to the following categories of recipients:
We cooperate with entities that process your personal data only on our instructions. If necessary, we transfer your personal data to entities that provide us with financial and human resources, legal, insurance and hosting services, provide us with online marketing systems, send emails, analyze traffic on websites, and analyze the effectiveness of marketing campaigns.
We provide your personal data if we are requested to do so by authorized state authorities, in particular organizational units of the prosecutor's office, the Police, the Inspector General for Personal Data Protection (since May 25, 2018, the President of the Office for Personal Data Protection), the President of the Office of Competition and Consumer Protection or President of the Office of Electronic Communications. However, for our part, we assure you that we analyze each case of a request to provide personal data very carefully and thoroughly, so that information is not provided to an unauthorized person.
We use a variety of popular services and technologies, including LinkedIn, Facebook, Instagram, TikTok, Microsoft, Google. These entities joined the Privacy Shield program, based on the executive decision of the European Commission of July 12, 2016. Entities that have joined the Privacy Shield program guarantee that they will comply with high standards in the field of personal data protection that apply in the European Union, therefore the use of their services and offered technologies in the processing of personal data is lawful.
The time in which your personal data is processed.
We store your individual personal data for the period necessary for the purposes for which the data is processed, in particular:
- in the case of processing personal data pursuant to the provision of art. 6 sec. 1 lit. a) GDPR, i.e. on the basis of the consent expressed by the data subject:
- until the consent is withdrawn by the authorized person;
- until your personal data is outdated;
- for the period needed for the SSP;
- for a period of 90 days after the end of the current recruitment process, and in the event of consent to the processing of personal data for the purposes of future recruitment
- for the duration of the SSP programme/project;
- in the case of processing personal data pursuant to the provision of art. 6 sec. 1 lit. b) GDPR, i.e. when it is necessary to perform a contract to which the data subject is a party, or to take action at the request of the data subject before concluding the contract:
- for the duration of the contract;
- in addition to the expiry of the limitation period for claims arising from the contract - for a maximum of 6 years from the expiry of the claim's due date (for ordinary claims) or 3 years (for claims related to business activity), effective at the end of the calendar year, unless special provisions establish different limitation dates;
- in the case of processing personal data pursuant to the provision of art. 6 sec. 1 lit. c) GDPR, i.e. for the purposes of fulfilling the legal obligation incumbent on SSP:
- for the period required by law, which is usually 5 years, counting from the end of the calendar year in which the tax payment deadline expired;
- in the case of processing personal data pursuant to the provision of art. 6 sec. 1 lit. f) GDPR, i.e. for purposes arising from legitimate interests pursued by XXX:
- in the case of data stored in particular for analytical, statistical and information purposes - until they become outdated or lose their usefulness,
- for the time necessary to secure or pursue any claims due to the SSP,
- for the time necessary to carry out the complaint procedure,
- until an objection is raised in the case of data processed for marketing purposes;
- until the SSP determines that the data has become outdated.
Opting out of receiving commercial information by you means that your personal data will be deleted.
Rights that can be exercised in the case of personal data processing.
- Right to withdraw consent (Article 7(3) of the GDPR).
Each person whose personal data is processed has the right to withdraw the consent granted to SSP at the time of providing personal data. Withdrawal of consent does not affect the lawfulness of the processing that was made on the basis of consent before its withdrawal. Withdrawal of consent does not cause any negative consequences. However, this will prevent you from continuing to use SSP services, which, in accordance with applicable law, we can only provide with your consent.
- Right of access to data (Article 15 of the GDPR).
Everyone has the right to obtain confirmation from SSP whether we process your personal data, and if this is the case, the data subject has the right to:
- obtain information about the purposes of processing, categories of processed personal data, recipients or categories of recipients of this data, the planned period of data storage or the criteria for determining this period, about your rights under the GDPR and the right to lodge a complaint with the supervisory authority, about the source of these data, about automated decision-making, including profiling, and about the safeguards applied in connection with the transfer of such data outside the European Union;
- obtain a copy of your personal data.
- The right to rectify data (Article 16 of the GDPR).
Everyone has the right to rectify and supplement the personal data provided by them, if they are incorrect.
- The right to delete data "Right to be forgotten" (Article 17 of the GDPR).
Each of you has the right to request the deletion of all or some of the personal data processed by the SSP. This right will be respected by the SSP without undue delay if:
- the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
- a specific consent has been withdrawn to the extent that personal data was processed and there is no other legal basis for processing;
- you have objected to the use of personal data for e.g. marketing purposes, satisfaction surveys, and the objection was considered justified;
- personal data is processed unlawfully.
In connection with the objection or withdrawal of consent, the SSP may retain certain personal data to the extent necessary for the purposes of establishing, pursuing or defending claims. This applies in particular to personal data including: names and surname, e-mail address and application history, which we retain for the purpose of handling complaints and claims related to the use of our services.
- Right to restriction of data processing (Article 18 of the GDPR).
Everyone has the right to request the restriction of the processing of their personal data in the following cases:
- the correctness of your personal data is questioned - then they are used for the time needed for us to check the correctness of your data, but no longer than for 30 days;
- data processing is unlawful, and instead of deleting the data, the request concerns the limitation of their use;
- personal data are no longer necessary for SSP for the purposes for which they were collected or used, but you need them to establish, pursue or defend claims;
an objection to the use of your data has been raised - in this case, the restriction takes place for the time needed to determine whether the legitimate grounds on the part of the SSP override the grounds for the objection of the data subject.
- Right to data portability (Article 20 of the GDPR).
Everyone has the right to receive their personal data that has been provided to SSP, and then send it to another personal data administrator of their choice. You also have the right to request that your personal data be sent by SSP directly to such other controller, if technically possible.
- Right to object to the use of your data (Article 21 of the GDPR).
At any time, you can submit an objection to the SSP to the use of personal data when your personal data is processed based on the legitimate interest of the SSP, e.g. in connection with the use of service marketing or satisfaction surveys.
When your objection turns out to be justified and we have no other legal basis to process your personal data, we will delete your personal data in accordance with the objection.
- When do we fulfill your requests?
If, in exercising the above-mentioned rights, you submit a request to the SSP, then either the request is met or we refuse to comply with it immediately, but not later than within 1 (in words: one) month after its receipt.
If it turns out that due to the complicated nature of the request or the number of requests - SSP will not be able to meet the request within 1 (in words: one) month, it will be fulfilled within the next 2 (in words: two) months, informing you in advance of the intended extension of the deadline.
SSP makes automated decision-making, including based on profiling. The content of the inquiry, which is sent via contact forms, is not evaluated by the IT system.