To ensure the security of the data entrusted to me, I have developed internal procedures and recommendations to prevent unauthorised access. I monitor their implementation and constantly verify their compliance with the relevant legal acts – the Personal Data Protection Act, the Act on the Provision of Electronic Services, as well as all types of implementing acts and Community legislation.
Definitions
Administrator / I – Marta Połeć, e-mail address: marta@performingartsstudy.com.
GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.
Service/Website – the service operated by the Administrator at: https://performingartsstudy.com.
User / You – any natural person or entity visiting the Service or using one or more services or functionalities provided by the Administrator
What do I do with your data?
When you use the Service or other services offered by the Administrator, the personal data you provide is collected, such as your name, email address, and the data you provide in the contact form available on the Service. This data is necessary for me to provide services to you.
All personal data is processed based on your consent and in cases where the law authorises the Administrator to process personal data.
Aims and legal basis of data processing
Personal data of all Users using the Service (including IP address or other identifiers), are processed by me:
- to provide services electronically in the scope of making the content collected on the Website available to Users – then the legal basis for processing is the necessity of processing for the performance of the agreement (Article 6 1. (b) GDPR),
- to possibly establish and assert or defend against claims – the legal basis for the processing is the Administrator’s legitimate interest (Article 6 1. (f) GDPR) in protecting your rights,
- to sending commercial information or initiating contact between the User and me, the legal basis for processing is the User’s consent (Article 6 1. (a) GDPR),
- to issuing accounting documents, archiving documents; fulfilling tax obligations – the legal basis for processing is the fulfilment of a legal obligation (Article 6 1. (c) GDPR),
- for analytical and statistical purposes – then the legal basis for processing is the legitimate interest of the Administrator (Article 6 1. (f) GDPR) consisting in analysing the Users’ activity as well as their preferences in order to improve the functionalities used and services provided.
The User’s activity on the Website, including his personal data, is recorded in system logs (a special computer program used to store a chronological record containing information about events and activities related to the IT system used to provide services by the Administrator). The information collected in the logs is processed primarily for purposes related to the provision of services. The Administrator also processes them for technical and administrative purposes, for the purposes of ensuring the security of the IT system and managing this system, as well as for analytical and statistical purposes – in this respect, the legal basis for processing is the Administrator’s legitimate interest (Article 6 1. (f) GDPR).
Processing of User Data– external entities
The third-party service providers I use will collect, use, and disclose your information only for the purposes necessary to provide the services they provide. However, some third-party service providers have their own privacy policies regarding the information I am obligated to share with them.
Once you leave my website and are redirected to a third-party website or application, this privacy policy no longer applies to you.
Period of processing of personal data
The period of data processing depends on the type of service provided and the purpose of processing. As a rule, the data are processed for the time of provision of the service or fulfilment of the order, until the withdrawal of the expressed consent or filing an effective objection to data processing in cases where the legal basis of data processing is the legitimate interest of the Administrator.
Accounting documents are stored in accordance with regulations for a period of 5 years from the end of the tax year in which the tax liability arose. During this period, you cannot object to data processing or request data deletion. This option is available after the document retention period imposed by applicable law and the statute of limitations for claims arising from the concluded contract have expired.
The content of correspondence may be archived, and it is not possible to specify a clear deadline for its deletion in advance (Article 6 1. (f) GDPR). You may request a history of correspondence with me (if it was subject to archiving) and request its deletion, unless its archiving is justified by my overriding interests, such as defending against potential claims.
The period of data processing may be extended if the processing is necessary to establish and pursue any claims or defend against them, and after that time only if and to the extent that it will be required by law. After the expiry of the processing period, the data is irreversibly deleted or anonymised
User rights
The User has the right to:
- access to the content of data and demand their rectification,
- delete data,
- processing restrictions,
- the right to transfer data,
- the right to object to data processing,
- the right to lodge a complaint to the supervisory body – the President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warszawa, POLAND.
The User’s data is processed on the basis of consent, it can be withdrawn at any time by contacting the Administrator, e.g. at the email address: marta@performingartsstudy.com.
The User has the right to object to the processing of data for marketing purposes, if the processing takes place in connection with the legitimate interest of the Administrator, and also – for reasons related to the User’s particular situation – in other cases, when the legal basis for data processing is the Administrator’s legitimate interest (e.g. in connection with the implementation of analytical and statistical purposes).
Contact
Contact with the Administrator is possible at the e-mail address marta@performingartsstudy.com or in writing to the address of the Administrator’s registered office (ul. Piękna 24/26A, 00-549 Warszawa, POLAND).
Data security
To ensure the security of processed data, the Administrator uses technical measures such as data encryption (SSL), IT system security, regular backups, and security monitoring. Furthermore, the Administrator uses organisational measures such as security policies and procedures, employee training, access control, and confidentiality obligations.
Changes to the Privacy Policy
This Policy is constantly checked and if necessary, updated. The current version of the Policy has been adopted and has been in force since 1.04.2026.
