Information only. The Polish privacy policy may be the legally binding text. This English version is provided for convenience.
1. Data controller
The controller of your personal data within the meaning of the GDPR is Jacek Gralak, tax ID (NIP) 7262589196, address: ul. Świtezianki 14/9, 91-496 Łódź, Polska.
The controller operates the akademia.ai service under the brand Akademia AI.
For data protection matters you may contact us via the contact form (please state in the message that your enquiry relates to the GDPR).
2. Categories of personal data
We process personal data necessary to provide the service:
- Email address — registration, sign-in, communication
- Full name — account personalisation, certificates
- Invoicing data — tax and accounting obligations
- Learning progress data — delivery of the educational service
- IP address and device data — security, analytics (where permitted or after consent)
3. Purposes of processing
Personal data are processed for purposes including:
- Performance of the contract (access to courses, certificates)
- Payment processing and invoicing
- Communication with you (support, notifications)
- Newsletter (on the basis of consent)
- Analytics and service improvement (on the basis of consent or legitimate interest, as configured in the Service)
- Compliance with legal obligations (accounting, taxes)
4. Legal bases
- Art. 6(1)(b) GDPR — performance of a contract (provision of the service)
- Art. 6(1)(a) GDPR — consent (newsletter, analytics cookies where used)
- Art. 6(1)(c) GDPR — legal obligation (accounting)
- Art. 6(1)(f) GDPR — legitimate interests (security, where applicable)
5. Your rights
You have, among others, the rights of access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent where provided for by the GDPR.
How to exercise them
Some settings may be available in your account — e.g. Profile.
For other requests please use the contact form, indicating that your request relates to data protection.
6. Recipients
Data may be shared with, among others:
- Payment service provider (e.g. Stripe)
- Hosting and IT infrastructure providers
- Analytics tools — if used and where data transfer is required
- Public authorities — when a legal obligation applies
7. Retention
We retain data for as long as necessary for the purposes of processing, including:
- Account data — until account deletion or longer if archiving is required by law
- Transaction and accounting records — for the period required by tax law
- Newsletter — until you unsubscribe
- Logs — for a limited period necessary for security
8. Transfers outside the EEA
Some services (e.g. payments) may involve processing outside the European Economic Area — in such cases mechanisms foreseen by the GDPR (e.g. standard contractual clauses) are used where applicable.
9. Changes
We may update this policy. We will inform you of material changes in an appropriate manner (e.g. notice in the Service or email).
10. Complaints
You may lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.