Information clause

We wish to inform you that:
1) The Data Controller of your personal data is Edu Bears sp. z o. o. sp. k., with its registered office at Pszczyńska 69, 44-100 Gliwice, taxpayer identification number: PL6312660560, REGON: 363 507 143, KRS 0000748549, District Court in Gliwice, X Economic Division of the National Court Register, office@edubears.pl, phone.: + 48 32 320 58 24;
2) The Data Controller processes the following categories of personal data: identification data, address details, contact details or any othertypes of data necessary for the purposes for which the Data Controller processes data;
3) The Data Controller may process personal data for the following purposes:
a) performing an agreement concluded between you and the Data Controller or taking action at your request prior to the conclusion of an agreement, such as signing you up for a training course – under Article 6 (1)(b) of the GDPR;
b) direct marketing of the Data Controller’s products and services in line with legitimate interests pursued by the Controller – under Article 6 (1)(f) of the GDPR (provided that you have agreed to receive commercial information under separate regulations);
c) responding to your inquiries or any correspondence addressed to the Data Controller, in line with legitimate interests pursued by the Data Controller – under Article 6 (1)(f) of the GDPR;
d) fulfilling legal obligations incumbent on the Data Controller – under Article 6 (1)(c) of the GDPR;
e) pursuing or defending against claims, in line with legitimate interests pursued by the Data Controller – under Article 6 (1)(f) of the GDPR;
4) The Data Controller may store your personal data for the following periods:
a) with respect to data processed for the purpose of performing an agreement or taking action at your request – for the duration required by law and for the period necessary to pursue own claims or to defend against any claims made against the Data Controller;
b) with respect to data processed for the purpose of direct marketing – until an objection is raised to the data being processed for that purpose, until the withdrawal of consent or until the Data Controller decides to delete the data;
c) with respect to data processed for the purpose of responding to your inquiries or correspondence – for the period of 5 years from the date on which such inquiry or correspondence was sent;
d) with respect to data processed for the purpose of fulfilling legal obligations incumbent on the Data Controller – for the duration required by law;
e) with respect to data processed for the purpose of pursuing or defending against claims – until the expiry of any potential claims;
5) The Data Controller processes data received from you or from an entity which you are bound to; The Data Controller may also process data from publically available sources;
6) Personal data may be transferred to third parties performing marketing, HR, accounting or legal services for the Data Controller, as wellas to providers of IT solutions or services and entities involved in the performance of the agreement concluded between the data subjectand the Data Controller;
7) The Data Controller may use bulk email delivery tools provided by Sendgrid Inc. having its registered seat in the USA; therefore, thepersonal data of message recipients may be transferred outside the European Economic Area; Sendgrid Inc. participates in the EU-US Privacy Shield framework and as such ensures an adequate level of data protection;
8)The data subject has the right to:
a) obtain access to the personal data provided by them and request a copy of their personal data;
b ) request rectification of their personal data;
c) request erasure of their personal data;
d) request the restriction of the processing of their personal data;
e) request transfer of their personal data;
f) object to their personal data being processed for direct marketing purposes;
g) lodge a complaint with a supervisory authority;
9) Where data processing is carried out on the basis of a consent, data subjects have the right to withdraw their consent to data processing at any time; such withdrawal shall not affect the lawfulness of the data processing carried out before the withdrawal of consent;
10) To exercise any of the above rights, data subjects can contact the Data Controller in writing, by sending a request to the following address: Edu Bears sp. z o. o. sp. k., Pszczyńska 69, 44-100 Gliwice; or sending an email to office@edubears.pl