Privacy policy

We describe each purpose separately. We collect only the data needed for it.

• Application and enrolment at the nursery or kindergarten

  Data

  Name of the parent or guardian, phone, email, child's name and date of birth, chosen centre, content of the message.

  Legal basis

  GDPR Art. 6(1)(b) and (c): steps before a contract, and the rules on nurseries for children under 3 and on education.

  How long

  Applicants whose child was not admitted: up to 12 months after the enrolment ends. Enrolled children: as in the 'Care and education' row.

• Care and education of the child

  Data

  Contact details of parents and guardians, authorisations to collect the child, health information and allergies, medical recommendations, development notes made by teachers.

  Legal basis

  GDPR Art. 6(1)(b) and (c): the care and education contract and legal obligations. Health data: GDPR Art. 9(2), to the extent needed for the child's care and safety.

  How long

  For as long as the child attends the centre, and for the period required by the rules on documentation.

• Contract, payments and billing

  Data

  Name and address of the payer, tax identification number (NIP) if needed on the invoice, bank transfer details, information about subsidies.

  Legal basis

  GDPR Art. 6(1)(b) and (c): the contract and tax and accounting rules.

  How long

  Accounting and tax documents: for the period required by law, usually 5 years from the end of the calendar year in which the tax obligation arose.

• Answering your questions (form, email, phone)

  Data

  Name, phone or email, content of your question.

  Legal basis

  GDPR Art. 6(1)(b) and (f): action at your request and our legitimate interest in answering.

  How long

  Up to 12 months after the last contact, unless we start working together. Then as in the 'Care and education' row.

• Photos and recordings from classes and celebrations

  Data

  Image of the child or parent in photos and recordings. The child's first name, if written on a photo.

  Legal basis

  GDPR Art. 6(1)(a): written consent of the parent or legal guardian (or of the adult shown in the photo).

  How long

  Until consent is withdrawn. You can withdraw consent at any time.

• Running and securing the website

  Data

  IP address, date and time of the visit, browser and device type, pages visited (server logs).

  Legal basis

  GDPR Art. 6(1)(f): our legitimate interest in keeping the website secure and working properly.

  How long

  For the period set by the hosting provider and needed to secure the website.

• Visit statistics (only with consent)

  Data

  Anonymised data about visits: pages, time on site, device type. IP addresses are shortened.

  Legal basis

  GDPR Art. 6(1)(a): consent given in the cookie banner.

  How long

  According to the settings of the analytics tool, and no longer than 14 months.

• Technical providers: website hosting (Vercel) and the external service that handles our forms and passes on the messages sent through them.
• Providers that handle our accounting or payments, to the extent needed for billing.
• Public bodies, e.g. ZUS or the Poznań City Hall, for subsidy applications if we use them. The police, the prosecutor's office or the family court, when the law requires it.
• Google: the map on the Contact and Directions pages (once the map loads, Google may process data, including your IP address), and statistics if you agree to them.
• We do not sell personal data.
• If data is transferred outside the European Economic Area (for example to the USA), we use standard contractual clauses approved by the European Commission.

• The right to access your data and to receive a copy of it.
• The right to rectification (correction) of your data.
• The right to erasure when there is no longer a basis for processing.
• The right to restriction of processing.
• The right to data portability, that is, to transfer your data to another controller.
• The right to object to processing based on our legitimate interest.
• The right to withdraw consent at any time. This does not affect the lawfulness of processing carried out before withdrawal.
• The right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.