Polityka Prywatności

Privacy Policy

12 July 2026

This Policy is drafted for users in Poland and the EU under the GDPR (RODO). Replace the company placeholders below with your official registry details before publishing as final.

1. Data Controller

The controller of your personal data is [NAZWA FIRMY / COMPANY LEGAL NAME], with its registered office at [ADRES REJESTROWY / REGISTERED ADDRESS, Polska], NIP: [NIP], REGON: [REGON — opcjonalnie / optional] (the “Controller”).

Contact for data protection matters: propeakacademy@gmail.com, phone +48 512 323 960.

2. What data we process

Depending on how you use ProPeak, we may process: identification and contact data (name, email, phone), account credentials, quiz answers and language-level results, booking and session metadata, payment-related identifiers if applicable, technical logs (IP address, browser type, device data), and communication content you send via contact forms.

3. Purposes and legal bases (GDPR Art. 6)

We process personal data only when a legal basis applies:

Art. 6(1)(b) GDPR — performance of a contract or steps prior to entering a contract (account registration, booking sessions, delivering lessons).
Art. 6(1)(a) GDPR — consent (e.g. marketing emails / newsletter, non-essential cookies).
Art. 6(1)(c) GDPR — legal obligation (e.g. Polish tax and accounting retention rules).
Art. 6(1)(f) GDPR — legitimate interests (security, fraud prevention, improving the service, analytics in aggregated form where allowed).

4. Recipients and processors

Data may be processed on our behalf by trusted providers (hosting, email delivery, video session infrastructure, analytics if you consent). Processors act under written agreements and only on our instructions. We do not sell your personal data.

5. Transfers outside the EEA

If any provider processes data outside the European Economic Area, we ensure appropriate safeguards (e.g. Standard Contractual Clauses) as required by GDPR Chapter V.

6. Retention periods

Account and service data are kept for the life of your account and as long as needed to provide the service.

Billing / tax-related records may be retained for up to 5 years (or longer if Polish law requires) for auditing purposes.

Marketing data based on consent is kept until you withdraw consent.

Contact-form messages are kept for the time needed to handle your enquiry, typically up to 24 months unless a longer period is justified.

7. Your rights under RODO / GDPR

You have the right to:

access your personal data;
rectify inaccurate data;
erase data (“right to be forgotten”) where applicable;
restrict processing;
data portability;
object to processing based on legitimate interests;
withdraw consent at any time (without affecting prior lawful processing).

8. Right to lodge a complaint with UODO

You may lodge a complaint with the Polish supervisory authority — Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, website: https://uodo.gov.pl.

9. Voluntary provision of data

Providing data required for an account or booking is necessary to perform the contract. Failure to provide it may prevent us from delivering the service. Marketing and non-essential cookies are optional.

10. Automated decision-making

We do not make decisions that produce legal effects solely by automated means, including profiling of that kind. Quiz scoring is used to suggest a learning level and does not produce legal effects.

11. Changes to this Policy

We may update this Policy when our processing practices or the law change. We will publish the new version on this page with an updated “Last updated” date and, where required, notify you by email or in-app notice.