Pursuant to Article 13(1) and (2) of Regulation (EU)2016/679 of the European Parliament and of the Council of
27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, referred to as RODO, we inform you that:

(1) The administrator of your personal data is Collegium Da Vinci with its registered office at 10 Kutrzeby Street, 61-719 Poznań. Correspondence address: 10 Kutrzeby St., 61-719 Poznań, tel: info@cdv.pl.

2. the DaVinci College has appointed a Data Protection Officer (DPO), whom you can contact in the situation of any ambiguity regarding the processing of personal data. Contact email address: iod@cdv.pl.

3. your personal data is processed under the RODO, specifically:

a. Article 6(1)(a) of the RODO - the data subject has voluntarily consented to the processing of his/her personal data for one or more specified purposes;

b. Article 6(1)(b) of the RODO - processing is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject prior to entering into a contract;

c. Article 6(1)(c) of the RODO - processing is necessary to fulfill a legal obligation of the controller;

d. Article 6(1)(d) of the RODO - processing is necessary to protect the vital interests of the data subject or another natural person;

e. Article 6(1)(f) RODO - the processing is necessary for the purposes of legitimate interests pursued by the controller or by a third party.

(4) If you have given the relevant consents regarding marketing
and sales activities through specific communication channels, we will process your personal data for the purpose of direct marketing of our products and services. In fulfilling the above purpose, the basis for the processing of your personal data will be Article 6(1)(f) of the RODO, i.e. the legitimate interest of conducting marketing and sales activities in connection with the consents you have given regarding receiving marketing content through specific communication channels. If you have consented
to the use of your personal data to carry out marketing activities then your data will be processed on the basis of Article 6(1)(a) RODO.

(5) Your provision of personal data is voluntary, but necessary for the purposes,
for which they were collected. Failure to provide this data may result in the inability to fulfill these purposes.

6 Inherent in the realization of the above-mentioned objectives is the maintenance of contact
with you through various channels of communication, i.e. snail mail, e-mail, contact telephone.

(7) Your personal data may be made available to appropriate recipients, in particular to institutions authorized to control the activities of the administrator or entities entitled to obtain personal data under separate legislation.

(8) Recipients of your personal data will also include, among others, service providers supplying the Administrator with technical solutions and organizational management, entities providing legal and consulting services, and entities providing assistance to the Administrator in the enforcement of due claims.

9 You have the right to:

a. Correction of your inaccurate data;

b. request deletion of data (right to be forgotten) in the event of circumstances provided for in Article 17 of the RODO;

c. request the restriction of data processing in the cases indicated in Article 18 RODO;

d. object to the processing of data in the cases indicated in Article 21 RODO.

(10) With regard to your personal data, decisions will not be made by automated means, pursuant to Article 22RODO.

11. personal data belonging to you will not be subject to profiling or transferred
to countries outside the European Economic Area.

12. your personal data will be processed and stored for a period of 2 years from the moment you give your consent to their processing in connection with your inquiry
about the services offered. In case of conclusion of a contract, your data will be processed for the entire period of execution of the contract and the time necessary for its settlement. This period is 5 years. The provisions of generally applicable law may extend this period. After the expiration of the aforementioned period, your personal data will be subject to deletion or anonymization.

13. your data processed in connection with the implementation of marketing purposes on the basis of your consent will be stored for a period of 5 years or until you object to this purpose of processing, until your consent is withdrawn or
until you request deletion of your data.

(14) If you believe that the personal data provided are processed illegally, you may exercise your right to lodge a complaint to the supervisory authority (Office for Personal Data Protection, ul.Stawki 2, 00-193 Warsaw).