Privacy Policy .

General Provisions

The controller of users’ personal data is Celius spółka z ograniczoną odpowiedzialnością, with its registered office in Lublin, ul. Gospodarcza 26, entered into the Register of Entrepreneurs of the National Court Register under KRS number 0000834447, NIP 9462696199, REGON 385812656 (hereinafter referred to as Celius or the Service).

This Privacy Policy defines the principles of processing personal data obtained through the website www.celius.pl, hereinafter referred to as the Service, and constitutes an information clause regarding the processing of personal data by Celius in the course of its online sales activities.

GDPR (RODO) means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation). GDPR defines the rules for processing users’ personal data applied by Celius.

Celius has appointed a Data Protection Officer (DPO) who can be contacted at:
iod@celius.pl

The Data Protection Officer can be contacted in all matters related to personal data processing and the exercise of rights related to data processing.

Use of the Service

Celius exercises particular care to respect the privacy of users using the Service.

In connection with the use of the Service by users, the Service collects data necessary to provide individual services and information about user activity. Detailed principles and purposes of processing personal data collected during the use of the Service are described below.

The Service collects information regarding the way users use the Service (including IP address or other identifiers and information collected via cookies or similar technologies). This information is used:

to provide electronic services consisting of making content available to users in the Service – the legal basis for processing is the necessity to perform a contract,
for analytical and statistical purposes – the legal basis is the legitimate interest of the Service consisting in analyzing user activity and preferences to improve functionalities and services,
for marketing of products and services offered by the Service and presenting offers, advertisements, and promotions, including profiling to determine user preferences or needs – the legal basis is the legitimate interest of the Service.

User activity in the Service, including personal data, is recorded in system logs. Information collected in logs is processed primarily for service provision purposes. Celius also processes this data for technical and administrative purposes, ensuring IT system security, system management, and analytical and statistical purposes – the legal basis is the legitimate interest of the Service.

The Service processes user data provided in the contact form to respond to inquiries. The data is processed on the basis of:

user consent to data processing for responding to inquiries,
legitimate interest consisting in communication with the user, handling inquiries, analytical and statistical purposes, and defense against potential claims.

Data provided in the contact form will be processed for the period necessary to respond to the inquiry, no longer than 6 months from the last contact, unless longer processing is necessary to defend against potential claims.

Data provided when subscribing to the newsletter (email address) is used to send the newsletter based on user consent expressed by providing the email address. Data will be processed for the duration of the newsletter operation unless the user unsubscribes earlier.

Unsubscribing from the newsletter does not result in immediate deletion of data. The data will still be stored in the mailing system for the purpose of defending against potential claims related to newsletter distribution, particularly to demonstrate consent – which constitutes the legitimate interest of the Service.

Providing personal data in the contact form or for the newsletter is voluntary and not required to conclude or perform contracts with the Service.

If a user provides personal data of other persons in the Service (including name, address, phone number, or email address), this may only be done in compliance with applicable laws and personal rights of those persons.

Information collected in the Service may be processed automatically, including profiling. However, such processing does not produce legal effects or significantly affect the user’s situation. Automated processing and profiling for statistical purposes are based on anonymized data.

The Service may transfer user data to providers located in third countries due to the use of statistical, reporting, and advertising tools storing data on servers located outside the European Economic Area, particularly in the United States.

These providers ensure an adequate level of data protection through GDPR-compliant mechanisms, including:

Standard Contractual Clauses approved by the European Commission,
Binding Corporate Rules,
cooperation with entities located in countries with adequacy decisions issued by the European Commission (including the USA – decision of 10 July 2023).

Tool providers do not use collected data to identify users or combine it to enable identification.

Further rules regarding data processing in the Service are described below.

Provision of Electronic Sales Services

The Service processes the following categories of personal data:

first name and last name,
phone number,
email address,
browsing history on www.celius.pl,
transaction history,
residential address,
date of birth,
country of citizenship,
VAT number,
business address,
company name (in the case of purchasing online courses available in the Service).

Purpose of Data Processing

User data is processed for:

conclusion and execution of electronic sales agreements,
provision of electronic services including access to online courses,
presentation of offers.

Legal basis: performance of a contract.

Legitimate interest of the Service

establishing and pursuing claims or defending against claims,
increasing user security,
preventing abuse,
identity verification,
quality assessment of services (email or phone contact, user opinions),
marketing of products and services,
profiling to determine user preferences,
statistical analysis and reporting.

Legal obligations

tax law compliance,
accounting and financial documentation storage.

User consent

partial automation of user verification during account creation.

Data Retention Period

Personal data will be processed:

for the duration of the contract and until account deletion, extended by the limitation period for claims if necessary,
for marketing purposes based on legitimate interest – up to 3 years from the last marketing contact unless the user objects,
for legal obligations – until the legal obligation expires,
for service quality research – up to 1 month after the last transaction.

Providing personal data is voluntary but necessary to conclude and perform contracts with the Service. Providing data for marketing purposes is voluntary and not required for contract performance.

User Rights

The user has the right to:

lodge a complaint with the supervisory authority (President of the Personal Data Protection Office – UODO),
access data,
rectify data,
erase data,
restrict processing,
object to processing,
request cessation of processing,
data portability.

These rights can be exercised by contacting the Data Protection Officer.

If processing is based on consent, the user may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Recipients

User data may be shared with entities processing personal data on behalf of the Service, including:

customer support providers,
technical service providers,
debt collection entities,
marketing and public relations service providers,
payment operators handling electronic payments,
Celius sp. z o.o. (in case of consent for marketing processing).

Manage the crisis.