Privacy policy

OF THE WEBSITE WWW.PICCOLI.PL

This is a translation provided for convenience. In the event of any discrepancy, the Polish version prevails.

  1. Fundacja Accademia Dei Piccoli, with its registered office at ul. Krakowskie Przedmieście 79/300, 00-079 Warsaw, entered in the register of associations kept by the District Court for the Capital City of Warsaw, 12th Commercial Division of the National Court Register (KRS) under KRS number 0000661801, NIP 5252698646, REGON 366554522 (hereinafter the “Controller”).
  2. The Controller runs the website www.piccoli.pl (hereinafter the “Website”).
  3. The user of the Website (hereinafter the “User”) consents to the processing of their personal data by the Controller on the terms set out in this privacy policy.
  4. Any statements, enquiries and information concerning personal data may be submitted to the Controller:
    1. by email to kontakt@piccoli.pl;
    2. via the contact form available at http://piccoli.pl;
    3. in writing to the Controller’s registered office address.
  5. The User’s personal data are processed on the basis of Article 6 and other provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter the “GDPR”).
  6. The User’s personal data are processed in order to answer questions and other messages sent by the User via the contact form or by email, and for further contact with the User.
  7. The Controller processes the following categories of the User’s data:
    1. first name and surname;
    2. email address;
    3. telephone number.
  8. Recipients of the User’s personal data may include employees, contractors, subcontractors and other persons employed by or cooperating with the Controller.
  9. The User’s personal data may be transferred to third countries, but only on the terms described in Article 46 of the GDPR, i.e. provided that the recipient ensures appropriate safeguards. In any case, the User is entitled to obtain a copy of their data.
  10. The User’s personal data will be stored for as long as necessary to achieve the purposes of processing, i.e. for the period of communication with the User, in particular the period necessary to provide the User with all requested information. The User’s personal data will be permanently deleted when this period ends.
  11. The User has the right to:
    1. obtain confirmation from the Controller as to whether personal data concerning them are being processed;
    2. receive a copy of the processed data;
    3. obtain from the Controller all information covered by this Privacy Policy.
  12. The User has the right to request that the Controller rectify without undue delay any inaccurate personal data concerning them. Taking into account the purposes of processing, the User has the right to have incomplete personal data completed, including by providing a supplementary statement.
  13. The User has the right to request that the Controller erase personal data concerning them without undue delay, and the Controller is obliged to erase the personal data without undue delay (subject to exceptions provided by law) where one of the following applies:
    1. the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
    2. the User withdraws the consent on which the processing is based and there is no other legal ground for the processing;
    3. the User objects as referred to in point 16;
    4. the personal data have been processed unlawfully;
    5. the personal data must be erased for compliance with a legal obligation under Union or Member State law to which the Controller is subject;
    6. the personal data have been collected in relation to the offer of information society services directly to a child, on the basis of the consent of the child or their parent (guardian).
  14. The User has the right to request that the Controller restrict processing in the following cases:
    1. where the User contests the accuracy of the personal data – for a period enabling the Controller to verify the accuracy of the data;
    2. where the processing is unlawful and the User opposes the erasure of the personal data and requests the restriction of their use instead;
    3. where the Controller no longer needs the personal data for the purposes of processing, but they are required by the User for the establishment, exercise or defence of legal claims;
    4. where the User has objected as referred to in point 16 – pending verification whether the legitimate grounds of the Controller override those of the data subject.
  15. The User has the right to receive the personal data concerning them, which they have provided to the Controller, in a structured, commonly used and machine-readable format, and has the right to transmit those data to another controller without hindrance from the Controller to which the personal data have been provided. When exercising the right to data portability, the User has the right to have the personal data transmitted directly by the Controller to another controller, where technically feasible.
  16. The User has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them which is based on the legitimate interests pursued by the Controller or by a third party. The Controller shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
  17. The User may withdraw consent to data processing at any time. Please note, however, that withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.
  18. The User has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement, if they consider that the processing of personal data concerning them infringes the GDPR.