Centrum wolności
Warszawa, ul. Wolność 7 lok A
Centrum wolności 2
Warszawa, ul. Wolność 2
Centrum Gorzów Wielkopolski
Centrum Medyczne MEDIRAJ III piętro, Górczyńska 17, 66-400 Gorzów Wielkopolski
Return to checkout

Privacy Policy

Privacy Policy. Information obligation resulting from Article 13 of the GDPR and the Act of 10 May 2018 on the Protection of Personal Data (Journal of Laws of 2018, item 1000).

Dear Customer, The law has changed – since 25 April 2018, the GDPR has been in force, which standardizes the rules for processing personal data within the European Union. For this reason, we would like to inform you that:

  1. The controller of your personal data disclosed in connection with the use of our services remains the company SHT, based on an entry in the CEIDG (Central Registration and Information on Business), NIP (Tax Identification Number) 1180288309, REGON (National Business Registry Number) 012388064, with a permanent place of business in Warsaw, postal code 01-885, 36 Antoniego Fontany St., apt. 2, e-mail address: shtraining@shtraining.pl
  2. Your data: a) are stored in accordance with the provisions on the protection of personal data, in particular the Act of 10 May 2018 on the Protection of Personal Data (Journal of Laws of 2018, item 1000). b) if you wish to conclude an agreement with us, your data will be processed for this purpose, including the provision of services (preparation of project documentation for training funding) or payments (legal basis – performance of the agreement); c) after the performance of the agreement, we may process your data for the purpose of potential handling of complaints and other claims (legal basis – our legitimate interest); d) may be processed in connection with the necessity to issue and store invoices and other accounting documents (legal basis – fulfillment of legal obligations incumbent upon us).
  3. If we process your data based on consent, your data will be processed until the consent is withdrawn, and in other cases – only for the time necessary to achieve the purposes for which they were collected.
  4. We process your personal data because it is necessary for the provision of our services, including:
  • enabling the provision of services directly and electronically, as well as the full use of the website’s functionalities, including making transactions therein
  • creating and managing your account and ensuring the service of your account, transactions, and solving technical problems
  • handling complaints in the event that you lodge such a complaint
  • handling inquiries/requests that you address to us (e.g., via the contact form)
  • contacting you for purposes related to the provision of services by phone or e-mail
  • additionally, legal regulations require us to process your data for tax and accounting purposes
  1. We also process your personal data for the purposes indicated below, based on the legitimate interest of the Controller, which is:
  • monitoring your activity, including, for example, searching for keywords and managing your activity on the Website/Shop
  • tailoring advertisements in accordance with previously viewed content, adjusting offer categories or individual offers in the website settings
  • conducting marketing activities, including direct marketing of our own services or goods, or services or goods of third parties
  • contacting you for purposes related to permitted marketing activities through available communication channels, in particular and with your consent – via e-mail and telephone
  • ensuring the handling of payment services
  • ensuring the security of services we provide electronically, including enforcing compliance with internal rules and preventing fraud and abuse
  • handling your requests submitted in particular to the user service department and through the contact form in a situation where they are not directly related to the performance of the agreement
  • organizing loyalty programs, contests, and promotional campaigns in which you may participate
  • debt collection; conducting court, arbitration, and mediation proceedings
  • storing data for archiving purposes, and ensuring accountability (demonstrating compliance with our obligations under the law)
  1. We process your personal data ourselves, and we also transfer them to entities cooperating with us to ensure the highest quality of services. This concerns IT and hosting, legal, and accounting service providers. These entities process your personal data on our behalf and solely for the purposes specified in point 2.
  2. Providing data is voluntary but necessary to achieve the above-mentioned purposes.
  3. You can contact us by post or e-mail; the addresses are indicated in point 1.
  4. Please be informed that none of your personal data are processed in automated decision-making processes (profiling).
  5. We also inform you that you have the right to access your data, rectify, erase, or restrict their processing, as well as the right to data portability to another controller. Upon your request, we will provide you with a copy of your data, provided that any subsequent copy you request from us will be delivered after charging a reasonable fee.
  6. You also have the right to object if we process your data to protect our legitimate interest, including for the purpose of conducting direct marketing without your consent.
  7. You also have the right to withdraw your consent to the processing of your data at any time. Know, however, that this will not affect the lawfulness of processing before the withdrawal of consent.
  8. Any additional data necessary for the preparation of project documentation, which were provided at a later stage of contact, are processed under the same rules. Whenever Confidential Information is mentioned, it shall be understood as: all documents, commercial, technical information, know-how of a technical, commercial, financial, and any other nature, materials, products, relevant software materials, tools, graphic communications, specifications, operating instructions, drawings, electronic data, login details to the platform https://uslugirozwojowe.parp.gov.pl, as well as login details to the ePUAP platform and other information related to the activity of the Disclosing Party, disclosed or submitted to the Receiving Party orally, in writing, through other media or in any other way. Confidential Information constitutes a business secret within the meaning of the Act of 16 April 1993 on Combating Unfair Competition.

To the extent that the execution of this consent requires the processing of personal data, the orderer (client) shall be treated as the data controller, and the contractor shall be treated as the processor within the meaning of Article 28 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (OJ L 119, 4.5.2016, p. 1–88).

  1. For the purpose of executing this inquiry, the processor is authorized to process the following categories of personal data: personal data of the orderer and their employees.
  2. The processor: a) undertakes to process the personal data entrusted to it only for as long, to such an extent, and in such a manner as is necessary for the implementation of the funding project; b) ensures that all persons it employs during the processing have been authorized to do so and have undertaken to keep the personal data confidential; c) ensures that all persons it employs during the processing have been authorized to do so and have undertaken to keep the personal data confidential; d) takes all possible technical and organizational measures to ensure the security of the personal data entrusted to it, in particular to prevent the risk of accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or unauthorized access to these data; e) informs the controller of cases where, in order to execute this order, the processor wishes to use the services of another processor (so-called sub-processing). When sub-processing personal data, the processor undertakes to obtain from the entity to which it sub-processes personal data commitments, assurances, and statements corresponding to those contained in point 3 letters a-f of this order; f) assists the controller in fulfilling its obligations towards data subjects and the supervisory authority. For these purposes, it enables the use of the technical and organizational measures at its disposal. It also provides the controller with all necessary information and enables audits/inspections to be carried out; g) after the termination of the provision of services, undertakes to delete or return to the controller the data obtained in connection with the execution of the order and to delete any copies thereof. The processor may retain only such documents and information the storage of which results from obligations imposed by provisions of law.
Return to checkout