Privacy Policy

PRIVACY POLICY
From this document, you will learn how we process personal data and obtain information as stated in Article 13 of the European Parliament and Council Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “GDPR”).

PERSONAL DATA CONTROLLER
CONTACT
The controller of your data is VIZACADEMY SP. Z O. O., located in Chełmiec, Rolna 23A Street, 33-395 Chełmiec, registered in the National Court Register under number KRS 0000725092, REGON: 369803210, NIP: 7343557295, e-mail: biuro@3dvizacademy.com

For matters related to the processing of personal data, including the exercise of rights related to this, you can contact us via email: rodo@3dvizacademy.com

YOUR RIGHTS
Within the scope provided by law, individuals whose data we process are entitled to:
access their personal data,
request rectification, deletion, or restriction of processing,
object to processing,
data portability,
lodge a complaint with the supervisory authority, which is the President of the Office for Personal Data Protection (Office for Personal Data Protection, Stawki 2 Street, 00-193 Warsaw).

If the basis for processing personal data is consent, you have the right to withdraw it at any time in any manner, without affecting the legality of the processing carried out on the basis of consent before its withdrawal.

PURPOSE AND DURATION OF DATA PROCESSING
We process personal data in accordance with the purpose for which it was collected, as detailed below:

USING THE WEBSITE:
As in some cases cookie files may be linked to personal data, such as first name, last name, email address, we treat cookies as personal data. More information about the cookies we use can be found in the Cookie Policy.
Your personal data is processed for analytical, marketing purposes, and to improve our services, and will be processed based on consent, i.e., Article 6(1)(a) GDPR until its withdrawal. Consent can be expressed via a banner displayed upon entering our website.
Providing personal data is voluntary and does not affect the use of our website except for necessary cookies, whose deactivation may cause difficulties in using the website.

CONTACT VIA EMAIL OR CONTACT FORM
We process your personal data to handle inquiries sent to us via email to the email address indicated on the Administrator’s website pages, specifically to an Administrator’s employee or through a contact form on the website, for the period necessary to handle such message and then until the expiration of claims.
Your personal data will be processed based on the legitimate interest of the Administrator, i.e., Article 6(1)(f) GDPR – which is to handle received inquiries and ensure legal protection enabling us to establish, pursue, or defend against claims.
Providing personal data is voluntary, but without it, we are unable to respond to inquiries requiring personal identification – e.g., a request to exercise rights.

CONDUCTING TRAINING
We process your personal data to perform actions aimed at concluding a contract at the request of the person concerned and then for the execution of this contract (for the performance of training) and to fulfill legal obligations imposed on us by law, especially tax and accounting law regarding settlements, and civil law regarding complaints handling, based on Article 6(1)(b) GDPR and Article 6(1)(c) GDPR, for the duration of the contract and then for the archival period required by the regulations that apply to us.
Additionally, we may process your personal data based on the legitimate interest of the Administrator, i.e., Article 6(1)(f) GDPR:
for communication related to training, where our interest is in managing and organizing training – in terms of contact data;
to determine the country you are in when connecting to our training platform, where our interest is to ensure we are not providing services to individuals from countries under international sanctions – in terms of IP;
to establish, pursue or defend against claims, where our interest is the legal protection of the Administrator – to the extent necessary to achieve the purpose.

We enable online payments for training and cooperate with external providers in this regard. If you use this option, the provider through which you make the payment will be an independent data controller for the purpose of processing payments, and their privacy policy will apply:
Stripe: https://stripe.com/en-pl/privacy
PayPal: https://www.paypal.com/myaccount/privacy/privacyhub
PayU: https://poland.payu.com/privacy

Providing personal data is voluntary but necessary for contract conclusion.

SOCIAL MEDIA PROFILES
The Administrator has profiles on social media platforms Facebook and Instagram. If you follow our profile, click “Like,” comment on a post, or send a private message, we will process your personal data.
In such cases, Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is also a data controller of your personal data, and their data processing rules are available on their website’s privacy policy.
However, we process Facebook or Instagram users’ personal data to inform about our activities based on Article 6(1)(f) GDPR, i.e., the legitimate interest of the Administrator in promoting its activities and responding to your questions based on Article 6(1)(f) GDPR, i.e., the legitimate interest of the Administrator in handling inquiries sent to us through this channel.
Your personal data will be stored until you unfollow our profile, and in case of questions asked through it – for the time necessary to provide an answer, and then until the expiration of claims.
Providing personal data is voluntary; if you do not follow our profile or write to us through it or do not comment on our posts, we will not process your personal data.

MARKETING
We process your personal data for marketing activities, e.g., by sending newsletters.
If we have a contract (e.g., for training execution), processing is based on the legitimate interest of the Administrator, i.e., Article 6(1)(f) GDPR – which is direct marketing, and based on consent, i.e., Article 6(1)(a) GDPR in other cases, provided you have given such consent.
Remember, you can withdraw consent at any time, e.g., by clicking the link in a marketing message or by changing settings in the student profile.
Providing personal data is voluntary, and not providing it does not affect our relationship.

RECIPIENTS OF YOUR DATA
Your personal data may be shared with external entities providing services to the Administrator, strictly to the extent necessary for this purpose. Depending on the purpose for which personal data was collected, these may be service providers (e.g., accounting, IT support, auditors) and IT tools (including Google Ireland Ltd. – email and signup forms; Amazon EMEA SARL and Zenbox sp. z o.o. – hosting; Stripe Inc., PayPal Inc., PayU S.A. – online payment processing). Additionally, your personal data may be shared with authorized public authorities.
We process your personal data within the European Economic Area or in countries with an adequate level of protection according to the European Commission.

The current version of the Privacy Policy was introduced: 22 March 2024