Privacy Policy

Following the entry into force of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “RODO”), we hereby inform that we process your personal data based on the following principles:

1. ADMINISTRATOR OF PERSONAL DATA 
   
   

The Administrator of personal data is Talk to Me Claudia Elmarakby whose registered offices are situated in Warsaw at ul. Chmielna 73, 00-801, entered into the Central Register and Information on Economic Activity (CEiDG), under the Tax Registration Number (NIP): 521 392 70 25 (hereinafter referred to as “Administrator”).

2. ADMINISTRATOR CONTACT DETAILS: 
   
   

You can contact us: 

• by phone: (+48) 22 375 99 32;
• by e-mail: hello@talktomeenglish.co.uk  
  
  

3. INFORMATION ON THE APPOINTMENT OF A DATA PROTECTION: 
   
   

The Administrator has not appointed a Data Protection Officer. 

4. DATA SUBJECT CATEGORIES: 
   
   

We process the personal data of: 

1. customers being natural persons, and in case of customers being either legal persons or business units without legal personality – personal data of persons authorized to represent such entities, employees and associates of such customers,

2. providers of services and goods being natural persons as well as employees and associates of providers of services and goods acquired by the Administrator, including persons co-operating with the Administrator on either a permanent or occasional basis upon providing services by the Administrator, 

3. persons approaching the Administrator in order to be recruited by the Administrator,

4. the persons who provided their personal data to the Administrator, i.e., in correspondence addressed to the Administrator, as well as persons whose data have been obtained by the Administrator upon provision of services.
   
   

5. DATA CATEGORIES 
   
   

The Administrator shall process the following personal data categories: 

RODO Information clause basic identification and contact data; electronic identification and contact data; identification and contact data related to the conducted business activities; data necessary in order to prepare an offer; data necessary in order to conclude and execute an agreement as well as sell products and services, issue invoices and make payments, handle concluded contracts, including handle complaints, as well as pursue or defend potential claims. In particular, we shall process data such as: name (names), surname, e-mail address, phone number, title, position, company or name of the represented entity, contact details, name of the company, TIN number, state statistical number (REGON), NCR number, legal address, address for correspondence, bank account number, data regarding education and professional experience as well as data regarding the marital status – if necessary in accordance with the aim of data processing, image – within the scope of monitoring conducted by the Administrator or photos submitted voluntarily to the Administrator, i.e. in CV documents, electronic data automatically submitted in case of visiting the Administrator’s website and/or social media profiles, including IP address, local IP address, host name. Furthermore, the Administrator may process other categories of personal data if such cannot be qualified to any of the indicated groups while the processing is conducted for purposes specified by hereby information, particularly when processing is required by applicable provisions of law for the fulfillment of such purposes.

6. PURPOSE OF PERSONAL DATA PROCESSING, LEGAL BASIS AND PERIOD OF DATA PROCESSING 
   
   

Your personal data may be processed for the following purposes, based on the following premises of lawfulness of data processing and for periods specified bellow: 

1. •   in the basis of your voluntary consent, i.e. based on Article 6 (1) (a) of RODO for purposes set forth in the consent (in such case you may withdraw your consent at any time and this shall not affect the lawfulness of processing conducted prior the withdrawal; however, lack of consent or its withdrawal shall unable us to process data for the purposes indicated within the consent) – the period of data processing conducted on such basis shall expire upon withdrawal of consent, 

6. •   on the basis of contractual requirements, i.e. based on Article 6 (1) (b) of RODO for the execution of an agreement concluded with the Administrator or launch of actions before its conclusion upon your request – data processed on such basis shall be subject to processing for a period essential for execution of the agreement concluded with the Administrator, this including the provision of services, warranty and post-warranty services, handling of complaints, 

6. •   on the basis of statutory requirements, i.e. based on Article 6 (1) (c) of RODO for the purpose of fulfillment of the Administrator’s obligations arising from the law of the EU or Polish law, including keeping financial reporting – data processed on such basis shall be processed for a period indicated by the provisions of law in relation to data retention, i.e. if such data ought to be kept for financial reporting purposes the period of data retention shall be 5 years following the issue of a particular accounting document; 

6. •   on the basis of the Administrator’s legitimate interest, i.e. based on Article 6 (1) (f) of RODO which the Administrator shall deem as: pursuing, determining and defending against claims, prevention of fraud, ensuring security of the ICT environment, applying internal control systems, monitoring the Administrator’s office/building and his possessions as well as registering the means of using it, determining conflicts of interests and infringements of ethical principles in areas necessary to prevent abuse, for archive, statistical, and verification purposes to ensure information security in case of legal need to produce facts, 

for the purpose of offering own services (direct marketing by the Data Administrator), for the purposes of running the website and social media profiles, communicating via such profiles (comments, chat, messages) as well as for analytical purposes in relation to the  functioning, popularity and manner of use – data processed on such basis shall be processed until the purpose of such processing ceases to exist (i.e. data processed for the purpose of pursuing or defending against claims for a period equal to the limitation period of such claims) or submission of effective objection.

7. VII.PURPOSE OF PERSONAL DATA PROCESSING, LEGAL BASIS AND PERIOD OF DATA PROCESSING 
   
   

The recipients of your personal data constitute entities of the following categories: 

1. entities providing services on behalf of the Administrator, including: 

1. 1. • IT and new technologies services; 
      • payment services, 
      • accountant and financial or legal services 
      • auditing and inspection services; 
      • recovery services; 
      • printing services, 
      • document destruction services; 
      • postal or courier services, 
      • insurance services, 
      • medical services 
      • other entities providing services on behalf of the Administrator necessary for the     purposes of data processing set forth in hereby information on the basis of relevant personal data processing agreements concluded with the Administrator

2. public authorities and entities either performing public tasks or operating upon order from public authorities to the extent and purposes arising from provisions of generally applicable law and upon their reasonable demand or when it shall be necessary to defend against claims or pursue our claims

3. if it is justified by the purpose of data processing for entities to which the Administrator provides services, i.e. in case of the need to verify their satisfactory performance 

4. in relation to data disclosed through the Administrator’s social media portals – to entities running such portals based on principles specified in terms and regulations of such portals.
   
   

8. VIII.DATA TRANSMISSION OUTSIDE THE EUROPEAN ECONOMIC AREA 
   
   

In principle, the Administrator shall not transfer personal data outside the European Economic Area. However, the Administrator may subcontract the performance of specific services or IT tasks to service providers with registered offices located outside the European Economic Area, i.e. data processed by means of the Administrator’s website, social media portals or transferred through electronic mail; in case servers of operators responsible for managing such services are located outside the EEA personal data can be processed outside the EEA. In such case, data shall be transferred to a third country in relation to which the decision of the European Commission recognized a suitable level of data protection or based on typical contractual clauses approved by the European Commission. You can request further information regarding the applied means of protection and data copies.

9. LEGAL RIGHTS 
   
   

You have the right to:

1. 1. Access your data and receive copies of such data 

9. 2. Rectify and supplement (correct) your data

9. 3. Erase your data – if you believe that there is no legal basis for our processing of your data

9. 4. Limit processing of data, i.e., demand to limit the processing of your personal data solely

    to retention or execution of actions agreed with you

9. 5. Object to data processing: 

“Marketing” objection: You have the right to object to data processing for the purposes of direct marketing. If you exercise this right, we shall cease the processing of your data for this purpose. Objection due to a special situation: You have the right to object to data processing based on your legitimate interests for purposes other than direct marketing as well as in cases where processing is necessary for the fulfillment of a public interest task or execution of entrusted public authority. In such case, you will be required to indicate the special situation that justifies the discontinuation of processing subject to your objection. In case of such objection, we shall cease processing of data for such purposes unless we indicate that the grounds for processing are superior towards your rights or that such data are necessary for us to determine, pursue or defend against claims.

9. 6. Transfer data. You have the right to receive from us your personal date, which you provided to us based on an agreement or consent, compiled in a structured, commonly used and machine-readable format. You can also commission us with sending such data directly to another entity. 

9. 7. Lodge a complaint with the supervisory body, i.e., the inspector General for Personal Data Protection; ul. Stawki 2, 00-193 Warszaw; https://www.uodo.gov.pl/pl/p/kontakt; phone no. (+48) 22 531 03 00 – if you believe that the processing of your personal data violates the provisions of RODO or any other provisions regarding the processing of personal data. 

9. 8. To withdraw your consent to the processing of personal data, provided that the processing is conducted based on your consent. Withdrawal of your consent shall not affect the lawfulness of processing conducted based on your consent prior to withdrawal. 

You can exercise your rights by sending a relevant request at biuro@upandgo.pl. You can also submit your demand by mail at the Administrator’s address for correspondence indicated in point II.

10. INFORMATION REGARDING THE REQUIREMENT OR VOLUNTARINESS OF PROVISION OF DATA
    
    

AND CONSEQUENCES OF NON-PROVISION 

To the extent of processing of personal data for the purpose indicated in point VI (c) above, the obligation to provide data constitutes a statutory obligation. In relation to personal data processed for the purpose set forth in point VI (b), their provision constitutes a contractual condition which means that it is necessary for the conclusion and performance of agreement signed with the Administrator. In case of data processing for other purposes, their provision is voluntary, and lack of such provision shall unable us to fulfill the purpose of processing. 

11. INFORMATION ON THE DATA SOURCE 
    
    

We obtained your personal data directly from you, the company for which you work (or with which you co-operate) or an associated agency/agent, based on consent, inquiry or agreement concluded by us, within the scope of access to publicly available data bases of the Central Statistical Office, National Court Register and Central Registration and Information on Business, publicly available websites. 

12. XII.INFORMATION ON AUTOMATED DATA PROCESSING 
    
    

Your personal data shall not be subject to automated decision-making, including profiling.