1. Cookies are small text files sent by a website and stored on the User's computer (usually on the computers hard drive), which can be read by a server when the User reconnects to the website from the same device. Cookies usually contain the name of the website they come from, the time they are stored on the end device and a unique number. The use of cookies is standard for most websites and services.
  2. In order to fulfill, among others, the obligations resulting from Article 173 of the Act of 16 July 2004, Telecommunications Law, we hereby inform that our website uses cookies.
  3. Within the framework of our website we use the following types of cookies:
    1. session cookies - stored in the User's end device until logging off, leaving the website or switching off the web browser;
    2. permanent - stored in the User's terminal equipment for the time specified in the parameters of cookies or until they are deleted by the User;
    3. performance cookies - they enable the collection of information about the manner of using the website;
    4. indispensable - making it possible to use services and functionalities available within the website;
    5. functional - making it possible to remember the website settings selected by the User;
    6. security - used for detecting abuses in the scope of website authentication;
    7. own - placed by our website;
    8. external - coming from an external site, other than our website.
  4. The cookies of our website are used in order to:
    1. adapting the content of the website to the User's preferences and optimizing its operation;
    2. creating analyses and statistics which help to understand how Users use our website, which enables improving its structure and content
    3. maintaining the session of the website User (after logging in), thanks to which the User does not have to enter the login and password again on each subpage.
  5. The information referred to in points 3 and 4 above is not connected in any way with the website User's personal data and is not used to identify the User.
  6. For the effective implementation of the purposes set out in section 4 above, we hereby inform you that we may cooperate with business partners who provide software to analyse our website, e.g. research companies and providers of applications such as Google Analytics.
  7. We would like to inform you that the scope of information collected automatically depends on the User's web browser settings and may be different for each popular browser (e.g. Firefox, Chrome, Internet Explorer, Opera, Safari). In many cases, the software used to browse the Internet (Internet browser) allows the storage of cookies on the User's end device by default. Users of our website can change the settings concerning cookies in their browser at any time. These settings can be changed in particular in such a way as to block the automatic handling of cookies in the settings of the Internet browser or inform on their placement on the User's device each time.
  8. Our rights to store and access cookies, in each case, result from the consent given by the User of the website. This consent is expressed by the User each time when configuring the web browser or the selected website.
  9. Restrictions on the use of cookies, as referred to in point 7 above, if introduced by the User, may affect certain functionalities of our website.


  1. The Administrator of the Personal Data is: ESCOLA S.A. with its registered office in Warsaw (ul. Chłodna 22a/14, 00-891 Warsaw), entered in the Register of Entrepreneurs of the National Court Register by the District Court for the Capital City of Warsaw in Warsaw, XIII ECONOMIC DEPARTMENT OF THE NATIONAL COURT REGISTER under the number KRS 0000672215. The Company is the operator and owner of the ESCOLA.PL website (hereinafter jointly referred to as the "Website").
  2. Respecting your rights as personal data subjects (data subjects) and respecting the applicable laws, including in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as "RODO" , the Act of 10 May 2018 on the protection of personal data (i.e. Journal of Laws of 2019, item 1781), hereinafter referred to as "the Act" and other relevant data protection legislation, we undertake to maintain the security and confidentiality of the personal data obtained from you. All employees have been adequately trained in the processing of personal data and our company as a Personal Data Controller has implemented appropriate safeguards and technical and organizational measures to ensure the protection of your personal data. We have implemented procedures and policies for the protection of personal data in accordance with the RODO, through which we ensure the lawfulness and reliability of data processing, as well as the enforceability of any rights you have as a data subject. Additionally, if necessary, we cooperate with the supervisory authority in the Republic of Poland, i.e. with the President of the Office for Personal Data Protection (hereinafter referred to as "PUODO").
  3. Any inquiries, requests, complaints regarding the processing of personal data by our company (the Personal Data Administrator), hereinafter referred to as "Applications", should be sent to the following e-mail address: [email protected] or in writing to the address of the Personal Data Administrator, i.e. Chłodna 22a/14 Street, 00-891 Warsaw. The content of the notification should clearly indicate:
    1. the data of the person or persons to whom the Application relates,
    2. the event which is the reason for the notification,
    3. present your demands and the legal basis for those demands,
    4. indicate the expected manner of settling the case.
  4. We collect the following personal information on our Service:
    1. name- in order to use the services of our Service, you will be asked to provide your name so that we can complete the services and so that we can contact you,
    2. e-mail address - we will use your e-mail address to send you a confirmation of the services you will use on the Website and to contact you if necessary. If you have subscribed to our newsletter, we will also send you commercial information once or twice a month,
    3. your cell phone number - providing your cell phone number enables you to place orders on our Website. Receiving SMS with verification code is necessary to place an order,
    4. NIP number - we collect Tax Identification Number from entrepreneurs and individuals who are interested in receiving an invoice and have a NIP number,
    5. Company name and address - we collect this information from entrepreneurs for contact purposes and also to facilitate mutual settlements,
    6. device IP address - information resulting from the general rules of Internet connections, such as IP address (and other information contained in system logs) are used for technical purposes related to operation of the Service. IP addresses may also be used for statistical purposes, including in particular for gathering general demographic information (e.g. about the region from which the connection is made),
  5. Providing the data indicated in the preceding point is necessary in the following cases:
    • in order to use the services on our Website, among others:
      • by placing an order (providing data marked as obligatory is required for the purpose of accepting and servicing the order, and failure to provide such data results in its non-execution),
      • using the contact form available on the website of the Service,
      • receiving information from the Administrator, referring directly to the functioning of the Service (e.g. information concerning a new version of the application, information on updates), educational information connected with functioning of the Service, information on changes in regulations, etc.; each User of the Service has a right to decide that he/she does not want to receive this type of information - for this purpose it is enough to contact the Administrator using the contact form available at the URL: Contact
    • in order to register you in our database, which is voluntary; in this situation we store the data provided by you in our database to facilitate your future use of services within our Service ,
    • newsletter service (subscription) - if you want to be informed about interesting events and commercial offers, you can become a subscriber to our newsletter; subscription is voluntary and you can resign from it at any time,
    • use of the Mobile Application,
  6. Our Website uses Cookies technology in order to adjust its functioning to your individual needs. Therefore, you can agree that the data and information you have entered will be remembered, so that you can use them next time you visit our Website without having to enter them again. The owners of other websites will not have access to this data and information. If you do not agree to the personalization of the Website, we suggest that you disable the use of cookies in the options of your Internet browser.
  7. Each of you, as a user of our Service, has the ability to choose whether and to what extent you want to use our services and share information and data about yourself as described in this Privacy Policy
  8. Your personal data is processed by our company as the Personal Data Controller in order to provide the services rendered to you (i.e. the data subject) offered within the Website. In accordance with the principle of minimization, we process only those categories of personal data which are necessary to achieve the purposes referred to in the preceding sentence.
  9. We process personal data for the time necessary to achieve the purposes mentioned in the preceding sentence. Personal data may be processed for a longer period than indicated in the preceding sentence in case such a right or obligation imposed on the Personal Data Administrator arises from specific provisions of law or in case the service which we provide is of continuous character (e.g. newsletter subscription).
  10. The source of acquisition of the Personal Data processed by the Controller is the data subjects.
  11. Your personal data are not transferred to a third country (outside the European Economic Area) or to an international organization within the meaning of the RODO. If personal data are transferred to a third country, data subjects are informed in advance and the Personal Data Controller applies the safeguards referred to in Chapter V of the RODO.
  12. We do not disclose any personal data to third parties without the express consent of the data subject. Personal data without the consent of the data subject may be disclosed only to entities under public law, i.e. authorities and administration (e.g. tax authorities, law enforcement agencies and other entities empowered by generally applicable laws).
  13. Personal data may be entrusted for processing to entities that process such data on behalf of our company as a Personal Data Controller. In such a situation, as the Personal Data Controller, we enter into a personal data processing entrustment agreement with the processor. The processing entity shall process the entrusted personal data, but only for the purposes, to the extent and for the purposes indicated in the entrustment agreement referred to in the preceding sentence. Without the entrustment of your Personal Data for processing, we would not be able to conduct our business on the Service. As a Personal Data Administrator, we entrust personal data for processing to:
    1. providing hosting services for the website on which our Service operates,
    2. providing other services to us as Personal Data Administrator that are necessary for the day-to-day operation of the Service.
  14. Personal data is not subject to automated processing, including profiling within the meaning of the RODO by the Personal Data Controller.
  15. In accordance with the provisions of the RODO, any person whose personal data we process as a Personal Data Controller has the right to:
    1. the right to be informed about the processing of personal data referred to in Article 12 of the RODO - the controllers are obliged to provide the persons whose data they are going to process with the information specified in the RODO (inter alia about their data, the contact details of the DPO, the purposes and legal grounds for the processing of personal data, the recipients or categories of recipients of the personal data, if any, the period for which the data will be processed or the criteria for determining this period). This obligation shall be fulfilled already at the time of the data acquisition (e.g. when the customer places the order in the online store), and if the data are not obtained from the data subject but from another source - within a reasonable time, depending on the circumstances. The controller may refrain from providing this information if the data subject already has it,
    2. access to your personal data as provided for in Article 15 of the RODO - if you provide us with personal data, you have the right to inspect and access it; this does not mean that you have the right to access all the documents on which your data appears as these may contain confidential information; however, you have the right to be informed about what data concerning you and for what purpose we process it and the right to obtain a copy of your personal data, whereby we issue the first copy free of charge and for each subsequent copy, in accordance with the provisions of the RODO, we charge an appropriate administrative fee corresponding to the costs of making the copy,
    3. correcting, supplementing, updating, rectifying personal data referred to in Article 16 of the RODO - if your personal data has changed, please inform us as the Personal Data Controller of this fact so that the data held by us is consistent with the actual state and is up-to-date; also, if no change to your personal data has occurred, but for any reason the data is incorrect or has been recorded incorrectly (e.g. as a result of a typing error), please inform us in order to correct or rectify such data,
    4. erasure (right to be forgotten) as referred to in Article 17 of the RODO - in other words, you have the right to request the "erasure" of data held by us as the Personal Data Controller and the right to request that we, as the Personal Data Controller, inform other controllers to whom we have provided your data of the need to erase it. You may request erasure of your Personal Data primarily when:
      • the purposes for which the personal data was collected have been achieved, e.g. we have fully performed the sales contract concluded with you,
      • the basis for the processing of your personal data was solely consent, which was subsequently withdrawn and there is no other legal basis for further processing of your personal data, e.g. if you unsubscribe from our newsletter and otherwise no longer make use of our company's offer,
      • you have lodged an objection based on Article 21 of the RODO and you consider that we have no overriding legal grounds to continue processing your personal data,
      • your personal data has been processed unlawfully i.e. for unlawful purposes or without any basis for processing your personal data - please note that in this case you must have a basis for your request,
      • the necessity of deletion of your personal data results from legal regulations,
      • the personal data concern a minor and were collected in connection with the provision of information society services,
    5. restriction of processing under Article 18 of the RODO - you can apply to us to restrict the processing of your personal data (which would consist of our company primarily just storing it until the dispute is resolved) if:
      • you contest the accuracy of your personal data, or
      • you consider that we are processing your data without a legal basis, but at the same time you do not want us to delete the personal data (i.e. you do not exercise the right referred to in the previous point), or
      • you have raised an objection as referred to in point f of this paragraph, or
      • your personal data are needed to establish, assert or defend a claim e.g. before a court,
    6. data portability as referred to in Art. 20 RODO - you have the right to obtain your data in a computer-readable format and the right to have it sent in such a format to another controller; you have this right only if the processing of your data was based on consent (e.g. for subscription to a newsletter) or if your data was processed by automated means,
    7. to object to the processing of your personal data, as referred to in Article 21 of the RODO - you have the right to object if you do not agree with the processing of your personal data by us, which we have so far processed for legitimate purposes in accordance with the law,
    8. not to be subject to profiling as referred to in Article 22 in conjunction with Article 4(4) of the RODO - on our Website you will not be subject to automated decision-making or profiling within the meaning of the RODO, unless you have given your consent; in addition, we will always inform you of profiling should it take place,
    9. lodge a complaint to the supervisory authority (i.e. President of the Office for Personal Data Protection) referred to in Article 77 of the RODO - if you believe that we are processing your personal data unlawfully or in any way violating your rights under generally applicable data protection laws.
  16. With regard to the right to erasure (right to be forgotten), we point out that under the provisions of the RODO, you do not have the right to exercise this right if:
    1. the processing of your personal data is necessary for you to exercise your right to freedom of expression and information, e.g. if you have posted on a blog, in comments, etc,
    2. the processing of your personal data is necessary for us to comply with legal obligations arising from legislation - we cannot delete your data for as long as is necessary for us to comply with obligations (e.g. tax obligations) which are imposed on us by law
    3. the processing of your data is carried out for the purpose of asserting, establishing or defending claims.
  17. If you wish to exercise your rights referred to in the preceding paragraph, please use the relevant tabs on the Website that allow you to delete your account and the data collected on our Website, or send a message by email to the following email address: [email protected]
  18. Each identified security breach shall be documented, and if one of the situations specified in the provisions of the RODO or the Act occurs, the data subjects and, if applicable, the PUODO shall be informed of such data breach.
  19. All capitalized words have the meaning given to them in the Terms and Conditions of our Service, unless otherwise stated in this Privacy Policy.
  20. In matters not regulated by this Privacy Policy, applicable provisions of generally applicable law shall apply. In case of inconsistency between the provisions of this Privacy Policy and the aforementioned regulations, these regulations shall prevail.