PRIVACY POLICY

PLAY THERAPY POLAND Nina Ambroziak, located at Aleja Piłsudskiego 4 A/2

​

In connection with the fulfillment of informational obligations under Article 13 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

Information Clause for Individuals with Whom PLAY THERAPY POLAND Nina Ambroziak Establishes Business Contacts

​

DATA CONTROLLER: The controller of your personal data is PLAY THERAPY POLAND Nina Ambroziak, located at Aleja Piłsudskiego 4 A/2, 05-077 Warsaw.

​

PURPOSES OF PROCESSING, LEGAL BASES: Your personal data is processed for the following purposes:

• Establishing business contacts, including making offers and inquiries, submitting requests for order estimates, service pricing, and a range of other activities aimed at establishing business cooperation based on:

  • Article 6(1)(f) of the GDPR* (processing is necessary for the purposes of the legitimate interests pursued by the controller, which consist of selecting the most advantageous offer for the supply of services and goods, taking care of the company’s finances).

• Defense against claims and pursuing claims based on:

  • Article 6(1)(f) of the GDPR* (processing is necessary for the purposes of the legitimate interests pursued by the controller, which consist of taking care of its own interests).

​

DATA RECIPIENTS: We will transfer (where appropriate, entrust) personal data to postal service providers, courier service providers, IT service providers, and all software supporting enterprise management, email hosting service providers.

​

PROCESSING PERIOD: Your personal data will be processed for the following periods:

1. For establishing business contacts – until the end of business contacts.

2. For defense against claims and pursuing claims – 6 years from the end of establishing relationships.

​

YOUR RIGHTS: You have the following rights under the GDPR*:

• The right to request access to your personal data,

• The right to request the rectification of your personal data,

• The right to request the erasure or restriction of processing of your personal data,

• The right to object to the processing of your personal data,

• The right to lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office.

​

OBLIGATION TO PROVIDE DATA: Providing personal data is voluntary but necessary to establish business relationships. The consequence of not providing personal data will be the inability to fulfill the above purposes, including establishing business cooperation.

• Refers to: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

Information Clause for Service and Goods Suppliers Who Are Natural Persons or Natural Persons Conducting Business Activity

DATA CONTROLLER: The controller of your personal data is PLAY THERAPY POLAND Nina Ambroziak, located at Aleja Piłsudskiego 4 A/2, 05-077 Warsaw.

​

PURPOSES OF PROCESSING, LEGAL BASES: Your personal data is processed for the following purposes:

• Conclusion and performance of the purchase/supply agreement for services or goods based on:

  • Article 6(1)(b) of the GDPR* (processing is necessary for the performance of a contract to which the data subject is a party).

• Maintaining accounting and tax records based on:

  • Article 6(1)(c) of the GDPR* (processing is necessary for compliance with a legal obligation to which the controller is subject) and in connection with regulations such as the Accounting Act of 29 September 1994, the Goods and Services Tax Act of 11 March 2004, and the general regulations governing the creation, determination, and expiration of tax liabilities as well as other tax-related regulations.

• Defense against claims and pursuing claims based on:

  • Article 6(1)(f) of the GDPR* (processing is necessary for the purposes of the legitimate interests pursued by the controller, which consist of taking care of its own interests).

• Filing complaints, potential grievances, or other requests related to cooperation based on:

  • Article 6(1)(f) of the GDPR* (processing is necessary for the purposes of the legitimate interests pursued by the controller, which consist of ensuring the proper performance of the contract and the quality of services provided or products supplied under the cooperation).

​

DATA RECIPIENTS: We will transfer (where appropriate, entrust) personal data to postal service providers, courier service providers, IT service providers, and all software supporting enterprise management, email hosting service providers, legal service providers, banks, and other financial institutions for the purpose of payment processing.

​

PROCESSING PERIOD: Your personal data will be processed for the following periods:

• For concluding and performing the contract – until the end of the contract.

• For maintaining accounting and tax records – 5 years from the end of the calendar year in which the tax obligation arose.

• For defense against claims and pursuing claims – 6 years from the end of the contract.

• For filing complaints, potential grievances, requests – 1 year from the date of receipt of the respective submission.

​

YOUR RIGHTS: You have the following rights under the GDPR*:

• The right to request access to your personal data,

• The right to request the rectification of your personal data,

• The right to request the erasure or restriction of processing of your personal data,

• The right to data portability – in the case of data processed under a contract, i.e., Article 6(1)(b) of the GDPR*,

• The right to object to the processing of your personal data – in the case of data processed for the purposes of the legitimate interests pursued by the controller, i.e., Article 6(1)(f) of the GDPR*,

• The right to lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office.

​

OBLIGATION TO PROVIDE DATA: Providing personal data is voluntary but necessary for the conclusion and performance of the contract and cooperation. If personal data is not provided, it will not be possible to fulfill the above purposes, including the performance of the contract concluded.

• Refers to: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

Information Clause for Contractors Who Are Natural Persons or Natural Persons Conducting Business Activity

​

DATA CONTROLLER: The controller of your personal data is PLAY THERAPY POLAND Nina Ambroziak, located at Aleja Piłsudskiego 4 A/2, 05-077 Warsaw.

​

PURPOSES OF PROCESSING, LEGAL BASES: Your personal data is processed for the following purposes:

• Conclusion and performance of the contract for the provision of services/supply of goods based on:

  • Article 6(1)(b) of the GDPR* (processing is necessary for the performance of a contract to which the data subject is a party).

• Maintaining accounting and tax records based on:

  • Article 6(1)(c) of the GDPR* (processing is necessary for compliance with a legal obligation to which the controller is subject) and in connection with regulations such as the Accounting Act of 29 September 1994, the Goods and Services Tax Act of 11 March 2004, and the general regulations governing the creation, determination, and expiration of tax liabilities as well as other tax-related regulations.

• Defense against claims and pursuing claims based on:

  • Article 6(1)(f) of the GDPR* (processing is necessary for the purposes of the legitimate interests pursued by the controller, which consist of taking care of its own interests).

• Handling complaints, potential grievances, or other requests related to cooperation based on:

  • Article 6(1)(f) of the GDPR* (processing is necessary for the purposes of the legitimate interests pursued by the controller, which consist of ensuring the proper performance of the contract and the quality of services provided or products supplied under the cooperation).

• Collecting debts based on:

  • Article 6(1)(f) of the GDPR* (processing is necessary for the purposes of the legitimate interests pursued by the controller, which consist of taking care of the company’s finances).

​

DATA RECIPIENTS: We will transfer (where appropriate, entrust) personal data to postal service providers, courier service providers, IT service providers, and all software supporting enterprise management, email hosting service providers, legal service providers, banks, and other financial institutions for the purpose of payment processing.

​

PROCESSING PERIOD: Your personal data will be processed for the following periods:

• For concluding and performing the contract – until the end of the contract.

• For maintaining accounting and tax records – 5 years from the end of the calendar year in which the tax obligation arose.

• For defense against claims and pursuing claims – 6 years from the end of the contract.

• For handling complaints, potential grievances – 1 year from the date of receipt of the respective submission.

• For collecting debts – until full settlement of the payment.

• ​

YOUR RIGHTS: You have the following rights under the GDPR*:

• The right to request access to your personal data,

• The right to request the rectification of your personal data,

• The right to request the