Privacy Policy
This document is an English translation provided for convenience only. The binding and authoritative version of this Privacy Policy is the Polish-language version. In the event of any discrepancy between the language versions, the Polish version shall prevail.
This Privacy Policy describes the rules for processing the personal data of users of the kamilporembinski.pl website (the “Website”) and of persons using the services offered through it. The document has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “GDPR”), the Polish Act of 10 May 2018 on the Protection of Personal Data, and the Polish Act of 12 July 2024 – Electronic Communications Law.
1. Data Controller
The controller of your personal data is:
Don't Exists Sp. z o.o.
ul. Narutowicza 40/1, 90-135 Łódź, Poland
KRS: 0001029341, NIP (VAT ID): 7292749316
Contact for data protection matters:
The Controller has not appointed a Data Protection Officer. For all matters concerning the processing of personal data, please contact us at the e-mail address above.
2. What Data We Process
Depending on your relationship with the Controller, we process the following categories of data:
- identification and contact data: first name and surname, e-mail address, telephone number (if provided);
- business data of clients: company name, address, VAT ID (NIP);
- billing and payment data: data necessary to issue an invoice and data transferred to the payment provider;
- online course participant data: account data, progress and history of course usage;
- newsletter subscriber data: e-mail address and statistical data regarding deliverability and message opens;
- technical and usage data collected via cookies (see section 8).
3. Purposes and Legal Bases for Processing
| Purpose of processing | Legal basis (GDPR) |
|---|---|
| Preparing and presenting an offer at the user’s request | Art. 6(1)(b) – pre-contractual steps |
| Concluding and performing a contract (services, online courses) | Art. 6(1)(b) |
| Processing payments through a payment gateway | Art. 6(1)(b) and Art. 6(1)(c) |
| Issuing and storing invoices, tax and accounting obligations | Art. 6(1)(c) – legal obligation |
| Sending the newsletter | Art. 6(1)(a) – consent |
| Analytics and marketing using cookies (Google Analytics, Meta Pixel) | Art. 6(1)(a) – consent |
| Establishing, pursuing or defending claims, ongoing contact, Website security | Art. 6(1)(f) – legitimate interest of the Controller |
4. Data Recipients and Processors
Your data may be entrusted to or shared with trusted entities that support the Controller in conducting its business. Each processor acts on the basis of a data processing agreement and only to the extent necessary to provide the service.
| Entity | Role | Status |
|---|---|---|
| Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg | Website hosting and e-mail delivery (Amazon SES) | Processor |
| Hostido.pl Gałązka Spółka Jawna, NIP 5833413237 | Hosting of the newsletter system | Processor |
| Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland | Business e-mail and internal coordination (Google Workspace) and traffic analytics (Google Analytics 4) | Processor |
| Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland | Marketing and analytics tools (Meta Pixel) | Processor |
| Maciej Loch „IT MONSTER”, ul. Bytomska 55/3, 41-605 Świętochłowice, Poland, NIP 6272739604, REGON 243663761 | Operation of the online course platform | Processor |
| Invoicing software provider | Issuing and handling invoices | Processor |
| Accounting office | Accounting and bookkeeping services | Processor |
| mBank S.A., ul. Prosta 18, 00-850 Warsaw, Poland (Paynow payment gateway) | Online payment processing | Separate controller of payment data |
| Cooperating law firms | Legal services, pursuit and defence of claims | Recipient / separate controller |
| Insurance provider | Business insurance and handling of potential claims | Separate controller |
Data may also be disclosed to public authorities where required by law.
5. Transfers of Data Outside the European Economic Area (EEA)
The use of Google tools (Google Analytics) and Meta tools (Meta Pixel) may involve the transfer of data to the United States. Such transfers are carried out on the basis of:
- the European Commission’s adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework (DPF) – Google LLC and Meta Platforms, Inc. are certified under this framework, and
- supplementarily, the Standard Contractual Clauses (SCC) approved by the European Commission, together with additional safeguards.
Data transfers take place only after you have given consent to the relevant cookies (see section 8). Otherwise, data is processed within the EEA.
6. Data Retention Periods
| Category | Retention period |
|---|---|
| Data related to an offer request | 3 years from the last contact |
| Data related to the performance of a contract | until the expiry of the limitation period for claims arising from the contract |
| Data on invoices and accounting documents | 6 years (tax obligation) |
| Newsletter subscriber data | until subscription is cancelled or consent is withdrawn |
| Online course participant data | for the duration of course access and the limitation period for claims |
| Other data processed on the basis of consent | up to 2 years or until consent is withdrawn |
7. Your Rights
In connection with the processing of your data, you have the following rights:
- the right of access to your data and to obtain a copy of it;
- the right to rectification (correction) of your data;
- the right to erasure (“the right to be forgotten”);
- the right to restriction of processing;
- the right to data portability;
- the right to object to processing based on legitimate interest;
- the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal;
- the right to lodge a complaint with a supervisory authority.
We handle requests without undue delay, no later than within 30 days. The supervisory authority in Poland is:
President of the Personal Data Protection Office (PUODO)
ul. Stawki 2, 00-193 Warsaw, Poland
uodo.gov.pl
8. Cookies and Consent
The Website uses cookies and similar technologies. Cookies that are strictly necessary for the proper functioning and security of the Website are used on the basis of the Controller’s legitimate interest and do not require consent.
Analytics cookies (Google Analytics 4) and marketing cookies (Meta Pixel) are activated only after you have given free, informed consent via the consent banner displayed on your first visit to the Website. Until consent is given, such cookies are not stored on your device.
We use the Google Consent Mode v2 mechanism, ensuring that analytics and marketing tools respect your choices regarding consent.
Cookie categories:
- Necessary – required for the Website to function (e.g. maintaining a session, security).
- Analytics – allow us to measure traffic and how the Website is used (Google Analytics 4).
- Marketing – used to present and measure the effectiveness of advertising (Meta Pixel).
You may change or withdraw your consent at any time through the consent settings on the Website. You may also manage cookies in your browser settings – instructions are available in the documentation of the respective browsers (including Chrome, Firefox, Safari, Edge). Restricting cookies may affect some functions of the Website.
9. Changes to the Privacy Policy
The Controller may update this Privacy Policy to reflect changes in the law or in the operation of the Website. The current version is always published on the Website together with the date of the last update.
10. Contact
For matters concerning the processing of personal data and the exercise of your rights, please contact the Controller at: .