Privacy Policy

1. Data Controller

The data controller responsible for personal data processed through this website is Xapoze, with its registered address at Poniatowskiego 31, Katowice, Poland. Any question concerning the processing of personal data described in this Privacy Policy may be directed to [email protected] or by telephone at +48 32 736 17 00.

2. Scope of This Policy

This Privacy Policy applies to personal data processed in connection with the operation of the xapoze.info website, including data submitted through the contact form, data collected through cookies and similar technologies, and any correspondence initiated by a visitor via email or telephone. It does not apply to third party websites that may be linked from this site.

3. Categories of Personal Data Processed

Depending on how a visitor interacts with the website, the following categories of personal data may be processed: identification data such as first and last name, contact data such as email address and telephone number, the content of any message submitted through the contact form, and technical data such as IP address, browser type, and device information collected automatically through cookies, subject to the visitor's consent where required.

4. Purposes and Legal Basis for Processing

Personal data submitted through the contact form is processed for the purpose of responding to inquiries about training programs, based on the legitimate interest of the controller in communicating with individuals who have voluntarily initiated contact, in accordance with Article 6(1)(f) of Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR). Where cookies requiring consent are used, processing is based on Article 6(1)(a) GDPR, namely the consent given by the visitor, which may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Recipients of Personal Data

Personal data may be disclosed to entities providing hosting, IT maintenance, or email services to the controller, acting as data processors under a data processing agreement in accordance with Article 28 GDPR. Personal data is not sold, rented, or shared with third parties for their own marketing purposes.

6. International Data Transfers

Where personal data is processed using service providers located outside the European Economic Area, such transfers are carried out only where an adequate level of protection is ensured, including through the use of Standard Contractual Clauses approved by the European Commission, in accordance with Chapter V of the GDPR.

7. Data Retention Period

Personal data submitted through the contact form is retained for the period necessary to handle the relevant inquiry and for a reasonable period afterward to allow for follow-up communication, generally not exceeding 24 months from the date of last contact, unless a longer retention period is required by applicable Polish or European Union law, such as accounting or tax obligations under the Polish Accounting Act.

8. Rights of Data Subjects

Any individual whose personal data is processed by the controller has the right to request access to their data, rectification of inaccurate data, erasure of data, restriction of processing, and data portability, as well as the right to object to processing based on legitimate interest, in accordance with Articles 15 through 21 of the GDPR. Requests may be submitted to [email protected] and will be handled without undue delay.

9. Right to Lodge a Complaint

Any individual who considers that the processing of their personal data violates applicable law has the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), the supervisory authority for data protection matters in Poland.

10. Voluntary Nature of Data Provision

Providing personal data through the contact form is entirely voluntary. However, without certain data, such as a valid email address, it may not be possible to respond to an inquiry.

11. Automated Decision-Making

The controller does not use personal data collected through this website to carry out automated decision-making, including profiling, that produces legal effects concerning visitors or similarly significantly affects them.

12. Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in legal requirements or in how the website operates. The date of the most recent update is indicated at the top of this page.