Marcin Moskała, with its registered office at 02-776 Warsaw, ul. Indiry Gandhi 27/58, entered into the register of entrepreneurs kept by the Central Register and Information on Economic Activity, NIP (Tax Identification Number) 9512339640, REGON (National Official Business Register Number) 363258941, e-mail: contact@kt.academy, hereinafter referred to as Marcin Moskała. Personal data is obtained and processed in the manner and on the principles set out in this Policy.
At the Entity, we attach particular importance to protecting the privacy of our clients, contractors, and employees. One of its key aspects is the protection of the rights and freedoms of natural persons in connection with the processing of their personal data.
We ensure that the processing of personal data is carried out in accordance with the provisions of the General Data Protection Regulation 2016/679/EU (hereinafter referred to as "GDPR"), the Personal Data Protection Act, as well as specific regulations (contained, among others, in labor law or the Accounting Act).
The Entity is a personal data controller within the meaning of Art. 4(7) of the GDPR. We also use the services of processors referred to in Art. 4(8) of the GDPR – they process personal data on behalf of the controller (e.g., accounting, IT, consulting, subcontracting companies).
As the Entity, we implement appropriate technical and organizational measures to ensure a level of security corresponding to the potential risk of infringement of the rights or freedoms of natural persons with varying likelihood and severity of the threat. We also develop policies and procedures, as well as organize regular training to enhance the knowledge and competencies of our employees in this area.
As an employer, we process the data of employees and individuals who collaborate with us on a basis other than an employment relationship. Contact data obtained from contractors (e.g., their employees) is used for concluding and efficiently executing contracts. We also conduct marketing activities, and as part of these, we strive to reach potential customers to provide them with up-to-date information about our products and services.
We make personal data available to third parties based on applicable legal grounds (bases for processing personal data). We process data with consent, in connection with concluded contracts, the legitimate interest of the controller, or when we are legally obliged to do so by law.
We take due care to protect the interests of data subjects, and in particular, we ensure that this data is:
We usually process your data for purposes necessary for the performance of a contract to which you are a party or to take steps at your request before entering into a contract. We also process data based on consent, which can be withdrawn at any time.
In some situations, processing is necessary to comply with a legal obligation to which the controller is subject. Such obligations arise, for example, from labor law or the Accounting Act.
Processing may also be necessary for the purposes of our legitimate interests, an example of which is pursuing claims arising from our business activities.
We take appropriate measures to provide you with all relevant information and to conduct all communication with you regarding the processing of personal data in connection with the exercise of your right to:
To contact us regarding the exercise of a given right, please send a message to contact@kt.academy.
We provide information in writing or otherwise, including – where appropriate – electronically. If you request it, we may provide information orally, provided that we can confirm your identity by other means. If you submit your request electronically, information will also be provided electronically where possible, unless you indicate another preferred form of communication.
We try to provide information without undue delay – as a rule, within one month of receiving the request. If necessary, we will extend this period by another two months due to the complicated nature of the request or the number of requests. However, in any case, within one month of receiving the request, we will inform you of the actions taken and (where applicable) of the extension of the deadline, stating the reason for such delay.
If we cooperate with entities that process personal data on our behalf, we exclusively use the services of such processors who provide sufficient guarantees to implement appropriate technical and organizational measures so that the processing meets the requirements of the GDPR and protects the rights of data subjects.
We thoroughly vet the entities to whom we entrust the processing of your data – we apply a Contractor Selection Procedure to them. We conclude detailed agreements with them and also conduct periodic checks on the compliance of processing operations with the content of such an agreement and legal provisions.
To meet legal requirements, we have developed detailed procedures covering issues such as, among others:
We regularly review and update our documentation to be able to demonstrate compliance with legal requirements in accordance with the accountability principle formulated in the GDPR, but also, out of concern for the interests of data subjects, we strive to incorporate best market practices into it.
We store personal data in a form that allows identification of the data subject for no longer than is necessary for the purposes for which the data is processed. After such a period, we anonymize the data (deprive it of features that allow identification of a specific person) or delete it. Deletion of personal data is complete and permanent. In the retention procedure, we ensure:
We determine the data processing period primarily based on legal provisions (e.g., retention time for employee records, accounting documents), as well as the legitimate interest of the controller (e.g., marketing activities). The retention policy covers both data processed in paper and electronic form.
We ensure that any person acting under our authority and having access to your personal data processes it only on our instruction, unless other requirements arise from Union law or Member State law.
Cookie files are small text files stored on the User's end device (desktop computer, laptop, tablet, smartphone, etc.).
They are created by your web browser and store settings and information needed (and often essential) for the proper functioning of the website. On subsequent visits to the site from the same device, the browser can check if there are cookies storing important information and send them back to the visited website, which previously saved the cookie on your device. In this way, the website can recognize that the user has visited it before and, for example, adapt the presented content to the recipient.
Cookie files make it easier for the user to use previously visited websites. If the user uses the same device and browser as before, this allows their preferences to be remembered and allows the website to be displayed appropriately, tailored to their individual preferences. Cookies allow for the creation of statistics that help understand how Users use the website, which in turn allows for the improvement of its structure and content. They also allow for maintaining the User's session on the Service (after logging in), so that each subsequent subpage of the service does not require re-logging in.
The User can change how cookies are used at any time. Most browsers offer the option to accept or reject all cookies, accept only certain types, or inform the user each time a website tries to save them. The User can also easily delete cookies that have already been saved on the device by the browser. The options for managing and deleting cookies vary depending on the browser used. The User can find all necessary information by using the Help function in their browser or by visiting the website http://www.aboutcookies.org/, which explains how to control and delete cookies in the most popular browsers. Remember that blocking all cookies may cause difficulties in operation or completely prevent the use of some website functionalities.
The Service uses cookie files, which can be divided as follows:
Our website uses Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses cookies to help us analyze how users use our site. The information generated by the cookie about your use of our website (including your IP address) will be transmitted to and stored by Google on servers. We use this information to evaluate your use of the website, compile reports on website activity, and provide other services relating to website activity and internet usage.
You can opt-out of Google Analytics by using the cookie consent banner on our website or by installing the Google Analytics Opt-out Browser Add-on available at https://tools.google.com/dlpage/gaoptout.
Information on changing cookie settings in individual browsers is available on the following pages:
Information for mobile devices is available on the following pages:
If you subscribe to our mailing list, we process your email address solely for the purpose of email communication. This includes, among other things, tips, educational content, event invitations, and information about our services and promotions. The legal basis for processing is the user's voluntary consent (Art. 6(1)(a) of the GDPR), which you can withdraw at any time by clicking the link in the footer of the message or by contacting us at contact@kt.academy
For email communication, we use the GetResponse tool, provided by GetResponse S.A. with its registered office in Gdańsk, ul. Arkońska 6, 80-387 Gdańsk. This company acts as a data processor on our behalf and ensures an appropriate level of data security in accordance with GDPR requirements.
In the case of subscribing to our mailing list, data is stored until consent is withdrawn or you opt out of receiving email communication. After this time, the data is permanently deleted or anonymized.
You have the right to withdraw your consent to the processing of personal data at any time, without affecting the lawfulness of processing based on consent before its withdrawal.