GDPR

Privacy policy

This translation is provided for information only. In the event of any discrepancy, the Polish version of the Privacy Policy is binding.

§ 1. General provisions

This Privacy Policy sets out the rules for processing the personal data of persons using the website operated on the internet at academiedectro.pl (the “Website”). The Website is operated by ELEKTROEPILACJA.PL SP. Z O.O., with its registered office in Warsaw at ul. Grzybowska 87, 00-844 Warszawa, entered in the register of entrepreneurs of the National Court Register (Krajowy Rejestr Sądowy) kept by the District Court for the Capital City of Warsaw in Warsaw, XIII Commercial Division of the National Court Register (Sąd Rejonowy dla m. st. Warszawy w Warszawie, XIII Wydział Gospodarczy Krajowego Rejestru Sądowego), under KRS number 0001064299, REGON 526700960, NIP 5273080710, which is the controller (the “Controller”) of the personal data collected and processed in connection with the use of the Website by its users (the “Users”, or each individually a “User”).

The Controller can be contacted by email at contact@elektroepilacja.pl or by post at: ELEKTROEPILACJA.PL SP. Z O.O., ul. Grzybowska 87, 00-844 Warszawa.

The Controller acts in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “GDPR”), and in particular appropriately protects Users’ personal data against unlawful access by third parties and ensures the confidentiality, integrity, availability and resilience of its processing systems.

§ 2. Scope of data, purposes and legal bases for processing

The Website collects personal data only through the following forms:

registration for the free masterclass at the Warsaw Academy: first name, phone number, preferred contact language,
notification of the opening of the Gdańsk Academy: first name, phone number, email address (optional), preferred contact language,
course enquiry for the Warsaw Academy in the foreign-language versions of the Website: first name, phone number, email address (optional), preferred contact language,
partner academy application: full name, city, phone number, email address and answers to the questions in the form.

The Controller processes the User’s data for the following purposes:

to respond to a submission and to take steps at the User’s request prior to entering into a contract, in particular to register the User for a masterclass, present a training offer or discuss the terms of cooperation (Art. 6(1)(b) GDPR),
for contact purposes, i.e. to receive and handle submissions and enquiries sent via a form, email, telephone or messaging apps, on the basis of the Controller’s legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR),
for the possible establishment, exercise or defence of claims, which is the Controller’s legitimate interest (Art. 6(1)(f) GDPR),
for evidence and archiving purposes, including keeping records of the Controller’s business activities, which is the Controller’s legitimate interest (Art. 6(1)(f) GDPR),
to ensure the security and proper functioning of the Website, including protecting the forms against abuse, which is the Controller’s legitimate interest (Art. 6(1)(f) GDPR).

Providing data is voluntary, but without it we cannot handle the submission.

§ 3. Users’ rights

The User has the right to:

access their data and obtain a copy of it,
rectification (correction) of their data,
erasure of their data if the User believes there are no grounds for the Controller to process it,
restriction of the processing of their data,
object to the processing of their data on the basis of the Controller’s legitimate interest,
portability of the data the User has provided to the Controller,
lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa) if the User believes that the Controller is processing their data unlawfully.

§ 4. Data recipients and transfers outside the EEA

The following categories of entities may have access to the User’s personal data:

authorised employees and associates of the Controller,
Académie Dectro partner academies in Poland to which the submission relates, which, depending on the nature of the cooperation, may also act as separate controllers,
service providers supplying the Controller with technical and organisational solutions, in particular hosting services, a CRM system and IT services, as well as providers of legal and advisory services,
in the case of a partner academy application: Dectro International (Quebec, Canada), the author of the Académie Dectro programme, in order to consider the application,
competent public authorities, on the basis of applicable law.

Transfers of data to Dectro International are made to a country which, under a decision of the European Commission, ensures an adequate level of personal data protection (Canada, Commission Decision 2002/2/EC). Apart from the cases indicated, the Controller does not transfer the User’s personal data outside the European Economic Area (EEA) unless it takes the measures necessary to ensure that the transfer complies with the GDPR, in particular standard contractual clauses approved by the European Commission.

§ 5. Data retention period

Personal data provided by the User will be processed for as long as is necessary to achieve the purposes for which it was collected, but no longer than:

for data processed to handle a submission: for the time needed to handle it and, if a contract is concluded, for the term of the contract and, after it ends, for the period arising from the provisions on the limitation of claims, up to a maximum of 6 years from the date the contract ends,
for data processed on the basis of the Controller’s legitimate interest: until those interests have been achieved or until the User objects.

§ 6. Cookies and technical data

The Website does not use cookies or similar technologies, does not use analytics or advertising tools and does not load resources from third-party servers. The Website’s server records standard technical connection data (IP address, date and time, address of the page visited, browser type) to ensure the security and proper functioning of the Website (Art. 6(1)(f) GDPR).

§ 7. Processing of minors’ personal data

The Website is not designed for or directed at persons under 16 years of age.

§ 8. Changes to the Privacy Policy

The Controller reserves the right to update this Privacy Policy, in particular in the event of changes to data protection legislation or the development of the Website.

Last updated: 28.10.2026