LEGAL SITE

Privacy Policy

I. General Information

The Warsaw Institute of Banking Foundation with its registered office in Warsaw, ul. Kruczkowskiego 8, 00-380 Warsaw, respects the right to privacy of Users of its Services, and in particular cares for the protection of personal data and applies appropriate technological and legislative solutions to prevent interference with the privacy of Users by third parties.

WIB’s activities are aimed at ensuring the User has a sense of complete security at a level appropriate to applicable law, including:

Regulation (EC) No 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – „GDPR”);
Personal Data Protection Act of 10 May 2018 (Journal of Laws of 2018, item 1000);
Act on the provision of services by electronic means of 18 July 2002;
Telecommunications Law Act of 16 July 2004.

These rules apply to the processing and protection of personal data relating to Users in connection with their use of the website: www.bankowcydlaedukacji.pl.

II. Data Administrator

The controller of the processed personal data is the Warsaw Institute of Banking Foundation with its registered office in Warsaw, ul. Kruczkowskiego 8, 00-380 Warsaw, entered into the register of associations, other social and professional organizations, foundations and independent public healthcare facilities, maintained by the District Court for the capital city of Warsaw, 19th Commercial Division of the National Court Register under number 0000110584, and Tax Identification Number (NIP) 526-003-85-22, hereinafter referred to as "WIB".

III. Using the Website

Browsing the content of the Website does not require the User to provide his/her personal data, however, in order to use the functionality of the Website (browsing the content contained on the Website, the possibility of using contact forms, the possibility of subscribing to the newsletter and other forms of marketing), the User may be asked to provide personal data concerning him/her in the contact form: first name, last name, e-mail address (username), telephone number.

Providing the data indicated in the form is voluntary; however, without it, you may not be able to use the Website's functionalities that require it. To the extent the User consents to the processing of their data, this consent may be withdrawn at any time.

The collected personal data relating to the User using the functionalities of the Website may be used for the following purposes:

enabling the User to use the functions of the Website, including contact, without creating an account on the Website in accordance with Article 6(1)(f) of the GDPR;
enabling the User to implement the provisions of the agreement regulating the principles of cooperation/purchase of products or services (agreement for the provision of services by electronic means) in accordance with Article 6(1)(b) of the GDPR;
communication with the User, including for marketing and promotional purposes and sending commercial information in accordance with Article 6(1)(a) of the GDPR based on the User’s consent and in accordance with Article 6(1)(f) of the GDPR on the basis of the legitimate interest in the form of own marketing;
creating summaries, analyses, statistics for internal purposes, including in particular reporting, marketing research, service development planning, system development work, creating statistical models in accordance with Article 6(1)(f) of the GDPR – legally justified interest;
establishing, pursuing or defending claims in connection with the sale and exercising by the User any rights arising from the warranty or guarantee for products or services, in accordance with Article 6(1)(f) of the GDPR;
fulfilling the statutory obligations incumbent on the Controller, resulting in particular from tax and accounting regulations, in accordance with Article 6(1)(c) of the GDPR.

IV. Implementation of on-site and e-learning training, educational and analytical-research projects

If the User orders a service from WIB which involves the provision of on-site and e-learning training, educational and analytical-research projects, the User may be asked to provide personal data concerning him/her in order to fulfil the order (execution of the sales transaction, identification of the purchased service or product, information necessary to receive payment for the purchase from the User, information necessary to ship the product or necessary correspondence to the address indicated by the User, issuing sales documents) in the following scope:

data for issuing an invoice (NIP, company address, company name);
data for issuing a receipt (name and surname, address);
name, surname, telephone number and business e-mail address of the person or persons acting on behalf of the User.

The Warsaw Institute of Banking Foundation processes, in addition to the data indicated above, also data such as photo and video materials provided for the implementation of the above-mentioned services.

Providing the above data is voluntary, but without it, you may not be able to use the Website's functionalities that require it. To the extent the User consents to the processing of their data, this consent may be withdrawn at any time.

The collected personal data relating to the User ordering the implementation of stationary and e-learning training, educational and analytical-research projects may be used for the following purposes:

enabling the User to implement the provisions of the contract regulating the rules of sale of subscriptions in accordance with Article 6 paragraph 1 letter b of the GDPR;
establishing, pursuing or defending claims in connection with the sale and exercising by the User any rights arising from the warranty or guarantee for products, in accordance with Article 6(1)(f) of the GDPR;
fulfilling the statutory obligations incumbent on the Controller, resulting in particular from tax and accounting regulations, in accordance with Article 6(1)(c) of the GDPR.

V. Personal data – scope, principles of disclosure, processing period

To achieve the purposes indicated above, we process your personal data ourselves and also transfer it to entities collaborating with us to ensure the highest quality of services. These entities process your personal data on our behalf and are obligated to maintain complete confidentiality.

Personal data may be disclosed by WIB to WIB employees and associates, accounting offices, law firms, the national debt register, hosting companies, courier companies, to the extent necessary for the performance of the contract.

WIB transfers or forwards data to entities that provide WIB with services such as legal, accounting, subcontracting, courier, and hosting (storing digital files, data, websites, and email). In order to conduct online business, present offers, provide services, and communicate via email and other messaging platforms, efficient and secure servers and other services are required from entities professionally engaged in data storage and providing the services described above – personal data is also transferred to them. WIB has no intention of transferring personal data to a third country or an international organization.

The Administrator also informs that in some cases the User of the Website may make decisions in an automated manner based on profiling, i.e. automatic processing of the User's personal data, and may also be subject to the analysis of preferences and behaviors during the performance of activities within the functionality of the Website by entities cooperating with the Administrator using software dedicated to the automation of marketing processes, in order to enable the delivery of personalized content and improve the functioning of the Website - in accordance with Article 6 paragraph 1 letter f of the GDPR on the basis of the legitimate interest of the Administrator.

Profiling used by the Administrator involves the use of computer algorithms to analyze the User's personal data (User behavior on the website, services and products viewed by the User, data collected using cookies, as well as personal data provided by the User) in order to display a personalized offer to the User directly on the Website or via direct marketing (e-mails, telephone marketing, etc.), based on the User's potential preferences and interests that may relate to the Administrator's products and services.

The period for which the Administrator stores the User's personal data depends on the purpose and legal basis of processing, i.e.:

in the case of processing for the purposes of providing services electronically on the Website (e.g. subscription to a newsletter) – for as long as the User uses these services, and after that period for the period for which the Controller is obliged to do so in accordance with the principle of accountability, but no longer than for 10 years from the end of using the services;
execution of the sale of a product or service – for the duration of commercial negotiations preceding the signing of the contract and for the period required to perform this contract, including any warranty and guarantee rights, and after this period for such period as the Administrator will be obliged to do so in accordance with the principle of accountability, but no longer than for 5 years from the completion of the performance of the sales contract;
in the event that the Administrator processes the User's personal data based on his/her consent – until such consent is withdrawn;
in the case of processing based on the legitimate interest of the Controller – until such interest ceases or until the User whose data is being processed objects to further processing – in situations where such an objection is available under the law;
in the event that the Controller processes personal data because it is necessary due to applicable legal provisions – the periods of data processing for this purpose are specified in these provisions.

To the extent that processing is based on the User's consent, the User may withdraw that consent at any time without providing any reason. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. In some cases, the User's consent is required to provide certain services or perform certain activities. In such cases, withdrawal of consent will make it impossible to provide such service or perform such activity.

The User may also object at any time to the processing of data for direct marketing purposes, including profiling-based operations, and may also object, for reasons related to the User's particular situation, to the processing of data based on the Controller's legitimate interest other than direct marketing and profiling. If the User objects to the processing of data for a specific purpose, the Controller may continue to process the data for other purposes.

The processing of the above-mentioned personal data will be disabled based on the User's request at any time to temporarily or permanently suspend the processing of data or to object to the processing by sending an e-mail to the following address: sekretariat@wib.org.pl or changing your web browser settings.

VI. User Rights

Every User has the right to:

access to your personal data and obtain information, including on the purpose, scope and method of their processing and information about the recipients of the data;
rectification and completion of incomplete data or their deletion;
requesting a temporary or permanent suspension of data processing or objecting to the processing;
data transfer;
withdraw your consent to data processing at any time – however, such withdrawal does not affect the lawfulness of the processing before it was carried out;
lodging a complaint with the supervisory authority regarding personal data protection, in Poland to the President of the Personal Data Protection Office.

All requests or requests from the User will be implemented immediately, but no later than within 30 days from the receipt of the relevant request or request.

VII. Collecting User Data – HTTP Requests

As part of the User's use of the Website, the Administrator stores HTTP requests sent to the server. The resources being viewed are identified by URL addresses and include:

public IP address of the end device from which the request came;
name of the User's station – identification performed via the HTTP protocol, if possible;
time of arrival of the query;
first line of HTTP task;
HTTP response code;
the number of data sent by the server;
URL address of the page previously visited by the User (so-called referrer link) – in the case when the Website was accessed via an external link;
information about the User's browser;
information about errors that occurred during the execution of the HTTP transaction.

The information specified above is in no way linked to the personal data of the Website User and is not used to identify the User, except in cases where an application, registration or login is required in order to use the Website services.

The website may automatically collect information, including information contained in cookies. The information collected is used for purposes such as:

managing the Website;
identifying possible security threats;
research on User traffic within the Website and for statistical purposes;
research on User preferences and behavior.

The scope of information collected automatically depends on the user's web browser settings. Users should check their browser settings to learn what information is automatically shared by their browser or to change these settings. We recommend consulting the "Help" section of their web browser.

VIII. Use of Cookies

The Administrator hereby informs that the Website may contain external links enabling Users to directly access other websites. Cookies from other entities, in particular from providers such as Facebook, Google, Instagram, etc., may also be placed on your device while using the Website, in order to enable Users to take advantage of the Website's functionalities integrated with these services. Each provider defines the terms of use of cookies in its privacy policy. Therefore, we have no influence on the privacy policies or use of cookies pursued by these providers.

For security reasons, the Administrator recommends that before using the resources offered by other websites or services, each User should read the document regarding the privacy policy and the use of Cookies, if they have been made available, and in the absence thereof, contact the administrator of the given website or service to obtain information in this regard.

The website uses cookies, which are IT data, specifically text files, stored on the user's end device. Cookies typically contain the name of the website they originate from, the duration of their storage on the end device, and a unique number.

Cookies are used for the following purposes:

to facilitate the User's use of the Website while browsing it;
subsequent identification of the User in the event of reconnection of the Website to the device on which they were saved;
creating statistics that help understand how Website Users use websites, which enables the improvement of their structure and content;
adapting the content of the Website pages to specific User preferences and optimizing the use of websites tailored to the individual needs of the User.

Our websites use cookies, which are stored on the user's device to facilitate navigation and customize the site to the user's preferences. These websites may use cookies:

session – temporary files stored on the User's end device until logging out, leaving websites and applications or turning off the software (web browser);
permanent – stored on the User's end device for the time specified in the cookie file parameters or until they are deleted by the User;
necessary for the operation of services and applications – enabling the use of our services, e.g. authentication cookies used for services that require authentication;
security files, e.g. used to detect authentication abuse;
performance – enabling the collection of information on how websites and applications are used;
functional – enabling the "remembering" of settings selected by the User and personalization of the User interface, e.g. in terms of the selected language or region from which the User comes, font size, appearance of the website and application, etc.;
advertising – enabling the provision of advertising content to Users that is more tailored to their interests;
statistical – used to count statistics about websites and applications.

„Cookies used by the website operator's partners are subject to their own privacy policies.

Web browsing software, i.e., a web browser, typically allows cookies to be stored on the user's end device by default. Website users can change their settings in this regard. Web browsers allow cookies to be deleted. Cookies can also be automatically blocked. Detailed information on this topic can be found in the help or documentation for the web browser used by the user.

Restricting the use of cookies may affect some of the functionalities available on the Website. Cookies placed on the Website User's end device may also be used by advertisers and partners cooperating with the Administrator. For this purpose, the Administrator may retain information about the User's navigation path or the duration of their stay on a given page.

If you do not wish to receive cookies, you may change your browser settings. However, disabling cookies that are necessary for authentication, security, or maintaining user preferences may make it difficult, and in extreme cases, even impossible, to use the Website.

IX. Contact

In order to obtain any information about the process of collecting and processing data by the Administrator, the User may send correspondence to the following address: Fundacja Warszawski Instytut Bankowosci, ul. Kruczkowskiego 8, 00-380 Warsaw.

X. Final provisions

The policy is reviewed on an ongoing basis and updated as necessary.

The Administrator is not responsible for the privacy rules (policies) of websites accessed by the User via links posted on the Website.

This Privacy Policy is intended solely as a supplement to the privacy policies of the Apple App Store, Google Play, Microsoft Store, and Amazon App Store (if applicable) distribution platforms. The Administrator is not responsible for the privacy policies of such distribution platforms or for compliance with applicable law within the Apple App Store, Google Play, Microsoft Store, and Amazon App Store (if applicable) distribution platforms.

The policy is reviewed on an ongoing basis and updated as necessary.