Personal data protection

  1. Pursuant to the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter referred to as “GDPR“, the Organiser shall be the controller of personal data obtained in order to conduct the RENDERING TRAINING and during its course.
  2. The Organiser shall process personal data for the following purposes:
  3. Delivering training, inter alia ensuring the correct quality of services (legal basis – Article 6.1(b) of GDPR) – “performance of training”,
  4. Compliance with legal obligations to which the Organiser is subject, such as issuing and storing invoices or responding to complaints (legal basis – Article 6.1(c) of GDPR) – “legal obligation”,
  5. Pursuing claims arising from the training (legal basis – Article 6.1(f) of GDPR) – “legitimate interest”,
  6. Marketing of own services during the training (legal basis – Article 6.1(f) of GDPR) – “legitimate interest”,
  7. Marketing, in the case of consent to the use of data for this purpose (legal basis – Article 6.1(a) of GDPR) – “consent”.
  8. The Organiser shall process personal data for the period necessary to achieve purposes described in paragraph 2. Depending on the legal basis, it will be respectively
  9. Training duration
  10. The time of performing legal obligations and the time during which the law requires the Organiser to store data, e.g. tax regulations,
  11. The time after which the claims resulting from the conclusion of the training contract will expire,
  12. Until the consent is withdrawn.
  13. In cases specified in GDPR, each data subject has the right to access to personal data, the right to data portability, the right to have his/her data rectified or removed or the right to request restriction of personal data processing. Notwithstanding the rights mentioned above, each data subject may also object to data processing if legitimate interest is the legal basis for the use of data. After receiving such request the Organiser is obliged to stop processing the data for this purpose.
  14. Each data subject also has the right to lodge a complaint with the President of the Personal Data Protection Authority if he/she believes that the processing of personal data by the Organiser violates the law.
  15. The consent to the processing of personal data for marketing purposes may be withdrawn at any time.
  16. While maintaining all data security guarantees, the Organiser may transfer personal data to other persons and entities, including:
  17. Persons authorised by the Organiser to process data,
  18. Entities processing data on behalf of the Organiser who have been entrusted with the personal data processing, e.g. technical and consultancy services providers;
  19. Other controllers, e.g. couriers.
  20. Personal data shall not be transferred to countries outside the European Economic Area (to countries other than European Union countries and Iceland, Norway and Liechtenstein). or Personal data may be also transferred to countries outside the European Economic Area (to countries other than European Union countries and Iceland, Norway and Liechtenstein), provided that the requirements laid down in Chapter V of GDPR are met.
  21. During the training or after its completion the Participant may not deliver information about training participants, may not copy, reproduce, make screen shots with a visible list of participants in the training and make the list available to third parties.

In matters related to data protection, please contact us via email: info@vizacademy.co.uk