Privacy policy

1. Data controller

The controller of your personal data is AllPass Training [forma prawna, imię i nazwisko właściciela], ul. XXXXX, XX-XXX XXXXX, NIP (tax ID) XXXXXXXXXX (“AllPass”, “we”).

For any matter concerning personal data, write to biuro@allpass.pl. We have not appointed a data protection officer.

2. What data we collect

Form data: name, phone or email, chosen course, number of people, language and location of training, and your message. Providing data is voluntary, but without a name and a phone number or email we cannot reply.

Correspondence: data you give us when you email or call us.

Technical data: on every visit the hosting server logs your IP address, date and time and browser information. These logs keep the site secure and working.

Data needed to register you for the UDT exam (e.g. PESEL number, date and place of birth) is collected only when you sign up for a course, not through this website.

3. Purposes and legal bases

• Replying to your enquiry and preparing an offer at your request before a contract: Art. 6(1)(b) GDPR.
• Replying to an enquiry made on behalf of a company and keeping in touch with its representative: our legitimate interest in handling correspondence, Art. 6(1)(f) GDPR.
• Performing the training contract and registering you for the exam if you sign up: Art. 6(1)(b) GDPR.
• Meeting legal obligations such as accounting and tax: Art. 6(1)(c) GDPR.
• Establishing, pursuing or defending claims and keeping the site secure: our legitimate interest, Art. 6(1)(f) GDPR.

We do not send newsletters or marketing without your separate consent. We do not profile you or make automated decisions.

4. Who we share data with

We use trusted providers that process data on our behalf under data processing agreements:

• GitHub, Inc. (USA): website hosting, including server logs.
• Formspree, Inc. (USA): delivering form messages to our mailbox.
• BunnyWay d.o.o. (Slovenia, EU): serving the website fonts (bunny.net). The service does not log visitors' IP addresses.
• Our email provider hosting the biuro@allpass.pl mailbox.
• When you sign up for a course: the Office of Technical Inspection (UDT), which runs the exam, and, if you ask for one, an interpreter we work with.
• Our accountants and authorities entitled by law.

5. Transfers outside the European Economic Area

GitHub and Formspree are based in the USA, so some data may leave the EEA. Transfers rely on the European Commission's adequacy decision on the EU-US Data Privacy Framework (where the provider is certified) or on the Commission's standard contractual clauses. You can request a copy of the safeguards at biuro@allpass.pl.

6. How long we keep data

• Enquiries that did not lead to a course: up to 12 months after the last contact.
• Course participants' data: for the duration of the contract and then until claims become time-barred.
• Accounting records: 5 years from the end of the year in which the tax payment deadline passed.
• Server logs: according to GitHub's policy, usually for a short period needed for security.

7. Your rights

You have the right to access your data, to rectify, erase or restrict it, to data portability and to object to processing based on our legitimate interest. To use these rights, write to biuro@allpass.pl.

You may also lodge a complaint with the Polish supervisory authority: President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw (uodo.gov.pl).

8. Cookies

This website does not use cookies or similar technologies that store information on your device. We use no analytics or advertising tools, so there is no cookie consent banner.

If we add such tools in the future, we will ask for your consent first and update this policy.

9. Changes to this policy

We may update this policy, for example when we change service providers. The current version is always on this page, with its effective date at the top.