As the Administrator of your data, we would like to inform you about how we take care of your personal data. The General Data Protection Regulation (EU) 2016/679 is a regulation in EU law on data protection and privacy in the European Union (EU) and the European Economic Area. It also addresses the transfer of personal data outside the EU and EEA areas. The GDPR’s primary aim is to enhance individuals’ control and rights over their personal data and to simplify the regulatory environment for international business. Superseding the Data Protection Directive 95/46/EC, the regulation contains provisions and requirements related to the processing of personal data of individuals who are located in the EEA, and applies to any enterprise – regardless of its location and the data subjects’ citizenship or residence – that is processing the personal information of individuals inside the EEA.
We have tried to present below comprehensive information about how we obtain and use personal data that we collect through our website: bestbrain.education (hereinafter also referred to by us as the“Website”). If you have more questions after reading this information, we have included our contact information at point 9 of this document.
1.Who is the administrator of your personal data?
We, or BEST BRAIN EDUKACJA SP. Z O. A. Our address is ul. Żółwia 22 lok. 73, 01-927 Warsaw, and our registration data are: REGON: 381309720, NIP: 1182180786, KRS: 0000748693. Later in the document, we refer to ourselves as “we” or “Best Brain”.
2. For what purpose do we collect your data?
The personal data you have provided to us through our website are processed and used by us only for the purposes indicated below:
a) placing orders via the Website
Our Website also gives you the opportunity to place an order for services that we provide (e.g. training conducted by us). In the case of placing such an order, we process your data in order to process the order (art. Article 6 (1) 1 lit. b GDPR), as well as the fulfillment of our tax obligations related to the settlement of payments (Art. Article 6 (1) 1 lit. c GDPR).
b) using the contact form on the Website and correspondence
As part of our Website, we have provided functionality that allows you to contact us through a dedicated contact form. If you decide to complete it, we will process your data on the basis of your consent, granted through action (art. Article 6 (1) 1 lit. a GDPR), and if you ask us to send an offer, based on your request (art. Article 6 (1) 1 lit. b GDPR). It may happen that we exchange messages, e.g. in the form of e-mails, in which case we will also process your data. The legal basis for doing so will depend on the context, e.g. it may involve the performance of a contract for you or our legitimate interest in maintaining contact with potential customers.
c) subscribing to the newsletter and sending commercial information by electronic means
We want to be in touch with the users of our website. For this purpose, we give you the opportunity to subscribe to the newsletter on our website. If you give your voluntary consent (Art. Article 6 (1) 1 lit. a GDPR), we will contact you in order to provide you with information about our business and the services, promotions and news we offer.
d) the possible establishment, exercise or defence of claims
We hope that our cooperation will proceed in an undisturbed manner and that it will not be necessary to process data in order to establish, investigate or defend against claims. However, if this happens, we want to inform you that in this case your data will be processed in our legitimate interest (art. Article 6 (1) 1 (f) RODO).
3. For how long will we process your data?
The length of processing of your data depends on the purpose and on what legal basis we processed it. Below you will find information about the period of processing your data:
a) consent – if we have processed data on the basis of consent, we will process it until the consent is revoked. However, we would like to inform you that the withdrawal of consent does not affect the actions we took before the withdrawal of consent;
b) contract – if we are bound by a contract (e.g. the placing an order), we will process your data for the entire duration of the contract, and after its completion, for the time corresponding to the period of limitation of claims;
c) legitimate interest – if we have indicated our legitimate interest as the basis for data processing, we will process the data until we object to its processing. Even in the event of an objection, however, there are certain situations that will allow us to further process data, e.g. in the case of investigation, determination or defence against claims (in this case, your personal data may be processed for a period corresponding to the limitation period for claims).
4. Do we transfer your data to other entities?
Yes, as a company we need in some cases to use the services of other, specialized companies. In connection with the use of such services, we may transfer personal data to other entities. We use the services of entities providing technical and IT services to Best Brain (e.g. in the field of e-mail hosting, maintenance of IT systems, etc.), accounting (in terms of the need to issue invoices) and legal services.
Some of these entities are based outside the EEA. In this case, we use entities based in territories recognized as providing a high level of protection (under the European Commission). If this is not possible, we conclude so-called standard contractual clauses and take care to implement additional safeguards if the situation so requires.
5. What rights do you have related to the processing of your data?
The GDPR grants persons whose data is processed numerous rights. We have listed these rights below so that you are aware of their existence. You have the right to:
- access the data,
- rectification of the data,
- deletion of the data (“right to be forgotten”)
- restrict the processing of data,
- withdraw your consent at any time,
- object to the processing of data,
- data portability,
If you would like to exercise your right or ask us about issues related to the processing of personal data, please contact us in the manner we describe in section 9.
In addition to the rights listed above, you also have the right to lodge a complaint with the supervisory authority, which in Poland is the President of the Office for Personal Data Protection.
6.Do you have to provide us with your details?
No, providing data by you as part of the use of our services is not mandatory, the provision of data depends solely on you. However, please note that failure to provide some data may result in the inability of us to process data for the purpose indicated in this policy.
7. How do we ensure the security of your data?
As Best Brain, we strive to ensure the security and privacy of your data. For this purpose, we use, for example a secure communication encryption protocol (SSL). Personal data provided in the form as part of the Website are treated as confidential and are not visible to unauthorized persons. Your personal data is stored on secured servers.
8. What about cookies?
Information about cookies can be found in a separate Cookie Policy.
9. Contact
If, after reading our policy, you have any questions related to the privacy or processing of your data, please contact us:
BEST BRAIN EDUCATION SP. Z O. O
Żółwia 22 lok. 73,
01-927 Warsaw
E-mail: szkola@bestbrain.pl.