This Privacy Policy contains information addressed to Users of the britishinterschool.pl website (hereinafter: the “Website”), operated by British International School of the University of Łódź Sp. z o.o., including in particular:

  • pupils (and their parents and legal guardians),
  • candidates for admission (and their parents and legal guardians),
  • school alumni,
  • employees and candidates for employment at the school,
  • participants in events organised by the school,
  • contractors and partners of the school.

British International School of the University of Łódź Sp. z o.o. takes particular care to protect your personal data and applies appropriate organisational and technical measures to prevent interference with your privacy by third parties. Our actions aim to guarantee your sense of security at a level appropriate to the applicable legal provisions, in particular those set out in:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter “GDPR”,
  • the Act of 10 May 2018 on the protection of personal data,
  • the Act of 18 July 2002 on the provision of electronic services,
  • the Telecommunications Act of 16 July 2004.

Personal data on the Website may be collected through the following activities:

  • information provided in forms published on the Website,
  • information collected automatically during use of the Website, i.e. information recorded automatically in server logs and Website logs, e.g. IP address, page request sent by the User, date and time of the request, browser type, browser language, device data, and operating system type,
  • “cookies” – small text files sent by the Website to the User’s device (e.g. computer, smartphone).

When using the Website, some data about the User may be collected and processed by tools of third-party entities used by the Company. Examples include: forms, plugins, buttons or other tools enabling content sharing on social media platforms such as Facebook, Instagram, Google Maps, Google Analytics, and YouTube.

British International School of the University of Łódź Sp. z o.o. is not responsible for the privacy policies of third-party entities or websites to which the Company provides links. Users should familiarise themselves with the rules applicable at those entities. The Company makes every effort to protect the Website and the data processed on it against unauthorised access by third parties. Personal data is shared only with those employees and entities for whom it is necessary to perform their tasks, and is processed solely for the purposes described in this Privacy Policy.

By using the Website, the User accepts this Privacy Policy.

Data Controller and Data Protection Officer

The Controller of your personal data is British International School of the University of Łódź Sp. z o.o., with its registered office in Łódź, ul. Fabryczna 4, 90-325 Łódź, Poland.

The Company is the Controller of data processed in connection with the use of the Website, with the exception of data collected by third-party entities to whose websites the Company redirects Users via links published on the Website.

In all cases, you may contact the Data Controller in writing at the correspondence address indicated above or by electronic mail at: info@britishinterschool.pl.

Legal Bases for Processing Personal Data

Your personal data may be processed by the Controller on the basis of:

  • Article 6(1)(b) GDPR – processing is necessary for the performance of a contract to which the data subject is party, or to take steps at the request of the data subject prior to entering into a contract (e.g. the pupil admission process, conclusion of an educational services agreement),
  • Article 6(1)(c) GDPR – processing is necessary for compliance with a legal obligation to which the Controller is subject, in connection with the requirements of applicable law and internal legal acts of the Company,
  • Article 6(1)(f) GDPR – processing is necessary for the purposes of the legitimate interests pursued by the Controller or a third party (e.g. ensuring Website security, maintaining statistics, direct marketing of own services),
  • Article 6(1)(a) GDPR – on the basis of consent given by you for the processing of personal data (e.g. newsletter subscription, sending of marketing information).

Purposes of Processing Personal Data

Your personal data may be processed in particular for the purpose of:

  • conducting the pupil recruitment and admission process,
  • performing the educational services agreement,
  • sending information and marketing messages via electronic mail to the e-mail address provided, including information about the school’s educational offer, curricula (Cambridge, IB Diploma), school events, and other updates,
  • handling enquiries and registrations submitted via contact and admission forms published on the Website,
  • administering servers and the Website,
  • ensuring the security and protection of data and the Website,
  • ensuring the correct functioning of the Website in the User’s browser,
  • compiling statistics and visit analytics in order to improve the structure and content of the Website,
  • remembering the User’s individual settings and preferences,
  • purposes arising from the legitimate interests of the Controller, including establishing, pursuing, or defending legal claims.

Recipients of Personal Data

The recipients of your personal data may be entities entitled to receive them under applicable law. Your personal data may also be transferred to entities processing it on our behalf on the basis of agreements concluded with the Data Controller, but only for the purpose and to the extent necessary for the realisation of the aforementioned objectives, including in particular:

  • entities providing IT, hosting, or other services that ensure the correct functioning of the Website,
  • entities providing marketing and analytical services (including Google LLC – in the scope of Google Analytics),
  • entities providing legal, accounting, or advisory services,
  • public authorities or institutions entitled to receive data on the basis of applicable law.

Entities processing data on behalf of the Controller do so solely in accordance with the Controller’s instructions and on the basis of concluded data processing agreements.

Personal Data Retention Period

We process your personal data only for the period necessary to fulfil the purpose of their storage, or for as long as required by applicable law, in particular until the expiry of any potential claims or the archiving obligation arising from applicable law, including the obligation to retain accounting documents.

In the case of processing personal data for the purpose of providing a newsletter service, your personal data will be processed for the period necessary to provide this service or until you withdraw from it.

In the case of processing personal data on the basis of your consent, your personal data will be retained until such consent is withdrawn. It is possible at any time to withdraw consent given on the Website. Withdrawal of consent to processing will not affect the lawfulness of processing carried out prior to its withdrawal.

In the case of processing your data on the basis of the legitimate interest of the Controller, the Controller will cease processing your data if you object to such processing.

Rights under the GDPR

In connection with the processing of personal data by the Controller, the User has the right to:

  • request access to their personal data,
  • rectification of their personal data,
  • erasure or restriction of processing of personal data – in cases provided for by law,
  • object to processing,
  • data portability,
  • withdraw consent to the processing of personal data for a specific purpose, if the User has given such consent, subject to the condition that this does not affect the lawfulness of processing carried out prior to such withdrawal,
  • lodge a complaint with the President of the Personal Data Protection Office (UODO), if the User considers that the processing of their personal data infringes the provisions of the GDPR.

The User may exercise the above rights in accordance with the rules set out in Articles 15-21 GDPR by contacting the Data Controller at: info@britishinterschool.pl or in writing to the Company’s registered office address.

Personal data collected via forms for which the User has given consent are processed for the purpose and period necessary to properly handle the given task. Details are specified in the relevant information clauses located below the specific forms.

Cookies

Information about cookies

  • The Website uses cookies.
  • Cookies are data files, in particular text files, which are stored on the User’s end device and are intended for use with the Website’s pages. Cookies usually contain the name of the website from which they originate, their storage time on the end device, and a unique number.
  • The entity placing cookies on the User’s end device and accessing them is the Website operator – British International School of the University of Łódź Sp. z o.o.

Purposes of using cookies

Cookies are used for the following purposes:

  • ensuring the correct functioning of the Website pages in the User’s browser,
  • compiling statistics that help understand how Users use the Website’s pages, enabling improvement of their structure and content,
  • maintaining the User’s session (after logging in), so that the User does not need to re-enter their login and password on each subpage of the Website,
  • determining the User’s profile in order to display tailored content in advertising networks, in particular the Google network.

Types of cookies

The Website uses two main types of cookies: session cookies and persistent cookies. Session cookies are temporary files stored on the User’s end device until they log out, leave the website, or close the software (web browser). Persistent cookies are stored on the User’s end device for the time specified in the cookie parameters or until they are deleted by the User.

Managing cookies

Web browsing software (a web browser) usually allows cookies to be stored on the User’s end device by default. Website Users may change their settings in this regard. A web browser allows cookies to be deleted, and automatic blocking of cookies is also possible. Detailed information on this subject is contained in the browser’s help or documentation.

Restrictions on the use of cookies may affect some functionalities available on the Website pages.

Cookies placed on the User’s end device may also be used by advertisers and partners cooperating with the Website operator. We recommend reading the privacy policies of those companies to learn about the rules for using cookies in statistics.

Cookies may be used by advertising networks, in particular the Google network, to display advertisements tailored to the way the User uses the Website. Users may view and edit information derived from cookies using the tool at: https://www.google.com/ads/preferences/.

If the User does not wish to receive cookies, they may change their browser settings. Please note that disabling cookies necessary for authentication, security, and maintaining User preferences may make it difficult or, in extreme cases, impossible to use the Website pages.

Users may manage cookie settings in individual browsers:

  • Firefox: Options > Privacy
  • Chrome: Settings > Advanced Settings > Privacy > Content Settings
  • Internet Explorer: Tools > Internet Options > Privacy > Advanced
  • Opera: Preferences > Advanced > Cookies
  • Safari: Preferences > Privacy

Cookie settings must be configured separately in each browser.

Transfer of Data to Third Countries

In connection with the Controller’s use of tools belonging to third-party entities headquartered outside the European Economic Area (e.g. Google LLC, headquartered in the USA), your personal data may be transferred to third countries. Such transfers are carried out on the basis of appropriate legal safeguards, in particular standard contractual clauses approved by the European Commission or adequacy decisions, which ensure an adequate level of protection for your personal data.

Changes to the Privacy Policy

The Controller reserves the right to make changes to this Privacy Policy if required by applicable law or if other important reasons arise. Users will be informed of any changes by publishing an updated Privacy Policy on the Website. Changes take effect on the date of their publication, unless the Controller specifies a different date.

This Privacy Policy is effective from the date of its publication on the britishinterschool.pl website.

British International School of the University of Łódź Sp. z o.o. | ul. Fabryczna 4, 90-325 Łódź, Poland