0

Privacy policy

1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2 The controller responsible for the processing of personal data on this website, within the meaning of the General Data Protection Regulation (GDPR), is Magdalena Kurpiewska, Po Polsku. Sprachtreffen Polnisch., Bautznerstr. 6, 01099 Dresden, Germany, Tel.: +49 176 696 811 06, E-mail: kontakt@po-polsku.eu.
The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data collection when you visit our website

2.1 If you use our website for informational purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to the site server (so-called “server log files”). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:

  • Our visited website
  • Date and time at the moment of access
  • Amount of data sent in bytes
  • Source/reference from which you reached the site
  • Browser used
  • Operating system used
  • IP address used (if applicable, in anonymized form)Menge der gesendeten Daten in Byte

The processing is carried out in accordance with Article 6(1)(f) of the GDPR, based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently review the server log files if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries sent to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” prefix and the lock symbol in your browser’s address bar.

3) Hosting & Content Delivery Network

For the hosting of our website and the presentation of the page content, we use a provider who provides its services itself or through selected subcontractors exclusively on servers within the European Union. All data collected on our website is processed on these servers. We have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

4) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. In some cases, these cookies are automatically deleted after closing the browser (so-called “session cookies”), in some cases, these cookies remain on your device for a longer period of time and enable you to save page settings (so-called “persistent cookies”). In the latter case, you can find the storage period in the cookie settings overview of your web browser.

If certain cookies used by us also process personal data, the processing is carried out in accordance with Article 6(1) of the GDPR. 1 lit. (b) of the GDPR — either for the performance of a contract, in accordance with Article 6(1) 1 lit. (a) of the GDPR — in the case of consent having been given, or in accordance with Article 6(1) (f) of the GDPR — to safeguard our legitimate interests in ensuring the best possible functionality of the website, as well as a user-friendly and efficient experience when visiting our site.

You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general. Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact us

When contacting us (e.g. via contact form or email), personal data are processed solely for the purpose of handling and responding to your inquiry and only to the extent necessary for that purpose. The legal basis for processing these data is our legitimate interest in responding to your inquiry in accordance with Article 6(1) of the GDPR. 1 lit. (f) GDPR If your contact is aimed at concluding a contract, the additional legal basis for the processing is Article 6(1) of the GDPR. 1 lit. (b) GDPR Your data will be deleted when it can be inferred from the circumstances that the matter in question has been fully resolved, provided that no statutory retention obligations apply.

6) Data processing when opening a customer account

In accordance with Article 6(1)(b) of the GDPR, personal data are collected and processed to the extent necessary when you provide them to us for the purpose of opening a customer account. The specific data required for opening the account can be seen in the input form on our website.

You may delete your customer account at any time by sending a message to the controller at the address mentioned above. After your customer account has been deleted, your data will also be deleted, provided that all contracts concluded through it have been fully executed, no statutory retention obligations apply, and there is no legitimate interest on our part in continuing to store the data.

7) Use of customer data for direct advertising

7.1 Subscribing to our email newsletter

When you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. Providing any additional data is optional and will be used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you will only receive newsletters once you have expressly confirmed your consent to receive them by clicking on a verification link sent to the email address you provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6(1)(a) of the GDPR. In this context, we store the IP address assigned by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any potential misuse of your email address at a later time. The data collected by us during the newsletter registration process are used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller mentioned above. After unsubscribing, your email address will be promptly removed from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is permitted by law and about which we inform you in this privacy policy.

7.2 MailerLite

The sending of our email newsletters is carried out via the following provider: UAB “MailerLite”, J. Basanavičiaus 15, LT-03108 Vilnius, Lithuania.

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provide when registering for the newsletter to this provider in accordance with Art. 6 (1) (f) GDPR so that it can send the newsletter on our behalf.

Subject to your express consent in accordance with Art. 6 (1) (a) GDPR, the provider also carries out a statistical evaluation of the success of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure open rates and specific interactions with the content of the newsletter. Device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated, but is not merged with other databases. You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider that protects the data of our site visitors and prohibits them from being passed on to third parties.

8) Data processing for order handling

8.1

To the extent necessary for the execution of the contract for delivery and payment purposes, the personal data we collect will be passed on to the commissioned transport company and the commissioned financial institution in accordance with Article 6(1)(b) of the GDPR.

If, under a corresponding contract, we are obliged to provide you with updates for goods with digital elements or for digital products, we will process the contact details you provided when placing your order in order to inform you personally in accordance with our statutory information obligations pursuant to Article 6(1)(c) of the GDPR. Your contact details will be used strictly for the purpose of communicating updates that we are required to provide and will be processed by us only to the extent necessary for this purpose.

To process your order, we also work with the service providers listed below, who support us in fulfilling the contracts concluded, either in whole or in part. In accordance with the following information, certain personal data are transmitted to these service providers.

8.2 Use of payment service providers (payment services)

PayPal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.

If you select a payment method from this provider that requires advance payment, the payment data you provide during the order process (including name, address, bank and card details, currency, and transaction number), as well as information about the content of your order, will be transmitted to the provider in accordance with Article 6(1)(b) of the GDPR. The transfer of your data takes place solely for the purpose of processing the payment and only to the extent necessary for this purpose.

Stripe

One or more online payment methods from the following provider are available on this website: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

If you select a payment method from this provider that requires advance payment (e.g. credit card payment), the payment data you provide during the order process (including name, address, bank and card details, currency, and transaction number), as well as information about the content of your order, will be transmitted to the provider in accordance with Article 6(1)(b) of the GDPR. The transfer of your data takes place solely for the purpose of processing the payment and only to the extent necessary for this purpose.

8.3 Electronic termination option for continuing obligations with consumers

Consumers who have entered into contracts for paid continuing obligations (such as subscription agreements) on this website have the option to terminate them via an electronic button in accordance with the applicable notice periods. Activating the button leads to a confirmation page, where the consumer can provide further details regarding the termination, clearly identify themselves, and then submit the termination electronically.

The collection of personal data and its transmission to us are carried out in accordance with Article 6(1) of the GDPR. 1 lit. (b) of the GDPR and only to the extent necessary for the proper processing of the termination. Also based on Article 6(1) of the GDPR. 1 lit. (b) of the GDPR, the personal data provided are used to confirm, in electronic text form, the receipt of the termination notice and the date of termination. An additional legal basis for the processing is Article 6(1) of the GDPR. 1 lit. (c) GDPR We are legally obliged to provide an electronic termination option for consumer contracts involving paid continuing obligations that are concluded through electronic commerce.

9) Site functionalities

9.1 Google Maps

This website uses an online map service provided by the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Google Maps is a web service for displaying interactive (country) maps in order to visually represent geographical information. By using this service, you will be shown our location and make it easier to get there.

As soon as you access the subpages of our website in which the Google Maps map is embedded, information about your use of our website (such as your IP address) is transmitted to Google’s servers and stored there; this may also involve transmission to the servers of Google LLC in the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether such an account exists.
If you are logged in to Google, your data will be directly associated with your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them.

In accordance with Art. 6 (1) (f) GDPR, the collection, storage and evaluation are carried out on the basis of Google’s legitimate interest in the display of personalized advertising, market research and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, which you must contact Google to exercise. If you do not agree to the future transmission of your data to Google in the context of the use of Google Maps, it is also possible to completely deactivate the Google Maps web service by deactivating the JavaScript application in your browser. Google Maps and thus also the map display on this website cannot be used.

Insofar as legally required, we have obtained your consent to the processing of your data described above in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future. To exercise your withdrawal, please follow the option described above for making an objection.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/de/privacy/

9.2 Applications for job postings via email

On our website, we advertise currently vacant positions in a separate section, for which interested parties can apply by e-mail to the contact address provided.

Candidates must provide all personal data necessary for an informed assessment, including general information such as name, address and contact details, as well as performance-related evidence and, where applicable, health-related information. Details of the application can be found in the job advertisement.

After receipt of the application by e-mail, the data will be stored and evaluated exclusively for the purpose of processing the application. If you have any questions, we will use either the applicant’s e-mail address or telephone number. The processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR (or § 26 para. 1 BDSG), in the sense of which going through the application process is considered to be the initiation of an employment contract.

If, in the course of the application process, special categories of personal data within the meaning of Article 9(1) of the GDPR (e.g. health data such as information about a severe disability) are requested from applicants, the processing is carried out in accordance with Article 9(2)(b) of the GDPR in order for us to exercise our rights and fulfill our obligations arising from employment law, social security law, and social protection law.

Additionally or alternatively, the processing of special categories of personal data may also be based on Article 9(2)(h) of the GDPR if it is carried out for purposes of preventive health care or occupational medicine, for assessing the applicant’s working capacity, for medical diagnosis, for the provision or treatment within the health or social care sector, or for the management of health or social care systems and services.

If the applicant is not selected or if an applicant withdraws his application prematurely, his transmitted data as well as all electronic correspondence, including the application e-mail, will be deleted after 6 months at the latest after a corresponding notification. This deadline is based on our legitimate interest in answering any follow-up questions to the application and, if necessary, in being able to comply with our obligations to provide evidence under the regulations on equal treatment of applicants.

In the event of a successful application, the data provided will be processed on the basis of Art. 6 para. 1 lit. b GDPR (if processed in Germany in conjunction with § 26 para. 1 BDSG) for the purpose of carrying out the employment relationship.

10) Tools and miscellaneous

10.1 sevDesk

For our accounting purposes, we use the cloud-based accounting software service provided by the following company: sevDesk GmbH, Hauptstraße 115, 77652 Offenburg, Germany.

The provider processes incoming and outgoing invoices and, if necessary, also the bank transactions of our company in order to automatically enter invoices, match them to the transactions and create financial accounting from them in a semi-automated process. If personal data are processed in this context, the processing is carried out on the basis of our legitimate interest in the efficient organization and documentation of our business operations in accordance with Article 6(1)(f) of the GDPR.

10.2 Cookie-Consent-Tool

This website uses a so-called “cookie consent tool” to obtain effective user consent for cookies and cookie-based applications that require consent. The “Cookie Consent Tool” is displayed to users when the page is accessed in the form of an interactive user interface, on which consent can be given for certain cookies and/or cookie-based applications by ticking the box. By using the tool, all cookies/services requiring consent are only loaded if the respective user gives corresponding consent by ticking the box. This ensures that such cookies are only placed on the user’s respective end device if consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is not processed in this process. If, in an individual case, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.

Another legal basis for the processing is Art. 6 (1) (c) GDPR. As the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.

Where necessary, we have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

Further information on the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.

11) Rights of the data subject

11.1

The applicable data protection law grants you the following rights (rights of access and intervention) with respect to the controller regarding the processing of your personal data, with reference to the respective legal basis for each right:

  • Right of access pursuant to Article 15 GDPR
  • Right to rectification pursuant to Article 16 GDPR
  • Right to erasure pursuant to Article 17 GDPR
  • Right to restriction of processing pursuant to Article 18 GDPR
  • Right to notification pursuant to Article 19 GDPR
  • Right to data portability pursuant to Article 20 GDPR
  • Right to withdraw consent granted pursuant to Article 7(3) GDPR
  • Right to lodge a complaint pursuant to Article 77 GDPR

11.2 Right to object

IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

12) Duration of the storage of personal data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and – if relevant – additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of explicit consent in accordance with Art. 6 (1) (a) GDPR, the data concerned will be stored until you revoke your consent.

If statutory retention periods apply to data processed within the scope of contractual or quasi-contractual obligations on the basis of Article 6(1)(b) of the GDPR, such data will be routinely deleted after the retention periods have expired, provided that they are no longer required for the fulfillment or initiation of a contract and/or there is no legitimate interest on our part in continuing to store them.

When processing personal data on the basis of Art. 6 (1) (f) GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, Exercising or defending legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1) (f) GDPR, this data will be stored until you exercise your right to object in accordance with Art. 21 (2) GDPR.

Unless otherwise stated in the other information in this Statement about specific processing situations, stored personal data will also be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.