PRIVACY POLICY (COOKIES AND SIMILAR TECHNOLOGIES)

The security of the personal data that we process is a priority for us. We want our data
to be processed transparently and to the highest standards, therefore we have
prepared this privacy policy which describes how and for what purpose we process
your personal data and what rights you have in connection with our use of cookies and
other similar technologies.

Our website may use cookies and other similar technologies (”cookies”). Cookies are
small text files sent by our website or by third parties through our website and stored
on your device and then read by your web browser. Cookies are a technology
commonly used to store and transmit information, which allows, among other things, to
remember user settings and preferences, collect statistics and optimize websites,
personalize the displayed content and adjust advertisements.

Below you will find information about the ways in which we use cookies on our
website.

WHO IS THE DATA CONTROLLER?

The operator of the Website and Blog (”Website” ; ”Websites”) and administrator of
personal data is Magdalena Firlit conducting business activity under the name
Magdalena Firlit at Lilli Wenedy 11 lok. 47 in Krakow (postal code: 30-833), NIP:
6792250111, REGON: 368229074 (”Magdalena Firlit”), correspondence address: Lilli
Wenedy 11 lok. 47, 30-833 Krakow, e-mail: info@magdalenafirlit.com .

WHY DO WE PROCESS YOUR PERSONAL DATA?

Some cookies are necessary to ensure secure and efficient communication / data
transmission on the network or the proper functioning of the website and to provide
key services based on the mechanisms implemented on the website, including to
ensure the security of transactions, security of transmitted data, etc. (e.g., basket
mechanisms related to data encryption for payments, ensuring that the loading your
site, etc.) (”necessary cookies”).

Other cookies allow us to analyze how you use the site to improve productivity and
satisfaction (e.g., self-filling login data or collecting information about how you use the
site) or to share pages and content through external social networks and other external
sites, including potential use for advertising purposes. We also use cookies to
personalize the advertisements displayed to meet your preferences and expectations
(”functional and advertising cookies”).

CATEGORIES OF PERSONAL DATA

We process personal data in the course of using our website.

In particular, we may process the following categories of data: type of device you are
using, unique device number, device IP address, operating system, browser type, site
usage and diagnostic information, search history, session summary, location
information, and other data provided automatically through your web browser. We may
also combine this information with other information obtained directly from you or from
various other sources.

THE PURPOSES AND LEGAL BASIS FOR PROCESSING

We use the necessary cookies based on our legitimate interest in accordance with
the Article 6(1)(f) REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT
AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with
regard to the processing of personal data and on the free movement of such data, and
repealing Directive 95/46/EC (General Data Protection Regulation), Official Journal of
the European Union 4.5.2016, L 119/1, (“GDPR”).
We use functional and advertising cookies on the basis of (voluntary, specific,
conscious and unambiguous) consent under Article 6(1)(a) General Data Protection
Regulation.

We may also process personal data when it is necessary for the performance of a
contract to which the data subject is party, or to take steps at the request of the data
subject, prior to entering into a contract (Article 6 (1) (b) of the GDPR). When it is
necessary to perform our legal obligations (Article 6 (1) (c) of the GDPR) and based on
our legitimate interest in establishing and protecting our rights or pursuing claims
(Article 6 (1) (f) of the GDPR) GDPR).

HOW LONG WE STORE YOUR PERSONAL DATA

Cookies are stored in your device: (i) only until you close your browser (session
cookies) or (ii) permanently until you delete them or until the expiry date (permanent
cookies). You may at any time individually delete the cookies from your computer or
mobile device by setting your web browser.

You can also deactivate the possibility of storing all cookies or only cookies from third
parties in your browser settings. If you deactivate the possibility of storing cookies, our
website may not work properly, or you may not be able to use some of the
functionalities.

DO WE PROCESS YOUR DATA AUTOMATICALLY (INCLUDING THROUGH
PROFILING)?

Personal data related to cookies are processed automatically, in particular for the
purposes of adapting the content of the website to the user’s preferences, optimizing
the process of using the website, statistical analysis or presenting customized
marketing content. The automatic processing of the data will not cause any legal
effects or similarly significantly affect the data subject.

WHERE DO WE STORE YOUR PERSONAL DATA?

Your personal data will be stored in countries of the European Economic Area (”EEA”).
However, some of the services we use (e.g., cloud storage) may require data transfer
and processing outside the EEA. Any such transfer of personal data will comply with
applicable laws and will be based on appropriate legal safeguards, i.e., the recipient is
located in a country that ensures an adequate level of personal data protection or
within the framework of a legal instrument that meets the requirements of the GDPR
(such as the so-called standard contractual data protection clauses approved by the
European Commission).

SHARING YOUR PERSONAL DATA

Service providers and partners

We may share personal information with third parties, for example, to provide
communication with you, analytics services related to researching how you interact
with the site or collecting statistics on site usage in order to improve and optimize the
site, as well as personalized advertisements and to ensure that content can be shared
on social networks and external sites. Some cookies are placed on your device
through our site, but by third parties – for example, through social networks or for
advertising purposes – to track and analyse user activity on websites and to provide
personalised advertising, including remarketing of our services.

We may share the necessary personal information with entities that provide business
services to us.

Entities processing personal data as part of the services provided to us are obliged to
ensure their protection and respect your rights in accordance with the applicable laws.

Related parties, acquisitions and restructurings

In the event of a merger or acquisition, as well as a reorganization of our business,
joint ventures with other entities, and the separation or disposal of all or part of our
business, we may transfer some or all of our personal data to other entities (in
particular the acquirer and successor in law). Personal data may also be made
available in the event of restructuring, bankruptcy or the establishment of compulsory
management.

Legal obligations and security

We may transfer personal data to competent administrative bodies, institutions and
other authorized entities at national and foreign level if we are required to do so by
applicable law, as well as upon request of the above-mentioned bodies, institutions
and entities within the framework of procedures provided by law (e.g., upon request of
a court, law enforcement authority or enforcement body). We may also transfer
personal data to authorities, institutions and third parties for the purpose of ensuring
the safety of users, combating fraud and abuse or if this is necessary to establish,
pursue or defend legal claims.

HOW DO WE PROTECT YOUR PERSONALDATA?

We implement appropriate organizational, technical and physical safeguards to protect
personal data, taking into account (1) the state of the art, (2) the costs of
implementation, (3) the nature, scope, context and purposes of the processing and (4)
your risk.

YOUR RIGHTS

In connection with the processing of your personal data, you are entitled to a number
of privileges, which are guaranteed by the applicable laws:
   – the right to access (and receive) copies of personal data,
   – the right to transfer data,
   – the right to amend personal data,
   – the right to erasure of personal data,
   – the right to restrict processing,
   – the right to withdraw consent to the processing,
   – the right to object to the processing of personal data,
   – the right not to consent to direct marketing (to object to processing for direct
      marketing purposes),
   – right to lodge a complaint with a supervisory authority.

HOW CAN YOU EXERCISE YOUR RIGHTS?

The rules of law do not require any particular form or method of communication to
exercise your rights. However, we attach great importance to ensuring that they can be
exercised effectively, which is why we have provided a dedicated e-mail contact
channel for handling enquiries, applications and requests related to the exercise of the
above rights: info@magdalenafirlit.com .

THE RIGHT TO COMPLAIN TO THE SUPERVISORY AUTHORITY

If you believe that we are processing your personal data incorrectly, you can always
contact us as well as lodge a complaint with the supervisory authority appropriate to
the Member State concerned.

AMENDMENTS TO THE RULES ON PERSONAL DATA PROTECTION

If our personal data processing practices change or it is necessary to modify this
Privacy Policy in accordance with applicable law, case law or guidelines issued by
competent authorities or courts, we shall be entitled to unilaterally modify this Privacy
Policy at any time. If these changes are relevant – they will affect your rights and
obligations – we will notify you in good time before the changes take effect. The
changes to the Privacy Policy will be made available on the Website.

APPLICABLE LAW

Processing of your personal data by Magdalena Firlit shall be governed by the laws on
the Republic of Poland.

USERS PRIVACY POLICY WEB SERVICE

Security of Your personal data is very important to Us. We want to process your data
to the highest standards, which is why we have prepared this Privacy Policy (“Privacy
Policy”
or “Policy”) describing how and for what purposes We process personal data
and what rights you have in connection with our use of Your personal data.

This Privacy Policy applies to users interested in offer courses and other products and
services offered on the Website to visitors of the Website (Clients”). This Policy
applies solely to the processing of personal data by Magdalena Firlit running the
business activity under the name “Magdalena Firlit”. This Policy does not apply to any
sites or services owned or operated by third parties, to which there may be redirections
on the Website. Magdalena Firlit is not responsible for the content or the standards
and privacy policies of any website or service owned or operated by third parties, to
which links may be provided as part of the Website.

Personal data means any information relating to an identified or identifiable natural
person (“You”, “User”). Any capitalized terms used herein should be understood as
defined in the GDPR (Regulation (EU) 2016/679 of the European Parliament and of
the Council of 27 April 2016 on the protection of natural persons with regard to the
processing of personal data and on the free movement of such data and repealing
Directive 95/46/EC (“GDPR”) unless otherwise defined herein.

The Operator of the Website and the Blog and the data controller is Magdalena Firlit
conducting business under the name Magdalena Firlit at ul. Lilli Wenedy 11 lok. 47 in
Kraków (postal code: 30-833), NIP: 6792250111, REGON: 368229074 Magdalena
Firlit”
), correspondence address: ul. Lilli Wenedy 11 lok. 47, 30-833 Kraków, e-mail:
magdalena.firlit@gmail.com.

COLLECTING YOUR PERSONAL DATA

VISITORS OF THE WEBSITE

All visitors can use the basic functions of the Website available at:
https://magdalenafirlit.com (the Website”) and the Website Blog, available at:
https://magdalenafirlit.com/blog/ without registration. Our website may use cookies and
other similar technologies (”cookies”). Cookies are small text files sent by our website
or third parties through our website and stored on your device and then read by your
browser. Cookies are a technology commonly used to store and transfer information,
including remembering user settings and preferences, collecting statistics, and
optimizing websites, personalizing displayed content and matching ads.

For details regarding the purpose and functioning of the cookies please read our
Cookies Policy at www.magdalenafirlit.com, which also describes i.e., what personal
data, how and for what purpose we process on the Website and what rights you have
in connection with our use of cookies and other similar technologies.
USERS
Access to some functionalities for Users requires the registration of a User Account
and Registration (allowing the use of services offered within the Website) (User
Account”
) (“Registration”). Your User Account will enable authentication within the
Website and use of its Functionalities. During the registration We may demand certain
personal data necessary for authentication – to identify You as an eligible user of the
Website or for communication.

PERSONAL DATA PROCESSED AND THE PURPOSES AND LEGAL BASIS FOR
PROCESSING

We process your personal data for the following purposes:

   – to conclude a contract with the User and perform the contract to which the User is
      a party, including providing the User with electronic services of the Website and
      ensuring access to the Functionality.

   – to transfer the Customer’s personal data in order to perform the concluded
      agreement by Magdalena Firlit.

   – to enable the best possible cooperation between the client and the Magdalena
      Firlit.

   – in connection with running profiles and fanpages in social media, sending
      newsletters, informing about our offer and promotions offered, as well as for
      surveys, sending invitations and other direct marketing communication using
      social media, e-mail, notifications, instant messaging, telephone calls, text
      messages and traditional correspondence.

   – to comply with the legal obligations imposed on the Magdalena Firlit, resulting in
      particular from tax and accounting legislation, as well as from anti-money
      laundering and anti-terrorist financing legislation.

   – for the purposes resulting from legitimate interests pursued by Magdalena Firlit,
      i.e., maintaining relations with the User, monitoring and analysing your way of
      using the Website, improving User experience, improving efficiency and quality
      and developing Website, ensuring data and information security, combating fraud
      and abuse or if it is necessary to establish, pursue or defend legal claims.

The data within the framework of individual services are collected and processed in a
detailed manner described in the Terms of Use, which you can find on our website:
www.magdalenafirlit.com.

Furthermore, Magdalena Firlit may process your further personal data voluntarily
disclosed by you in connection with the use of the Website.

WHAT PERSONAL DATA DO WE PROCESS?

We process the following categories of personal data in particular:

   – first and last name(s),
   – a mailing address,
   – date of birth,
   – the function or position held,
   – a scientific, honorary, military, or other degree,
   – personal identification number or type and number of the identity document,
   – tax identification number and other numbers identifying the legal entity,
   – e-mail,
   – phone number,
   – other contact details,
   – name and address of a sole proprietorship or company,
   – bank account number.

We may also request personal information other than those indicated above when it is
necessary to enter or perform a contract with us or to exercise a right or to comply with
a legal obligation.

The providing of personal data is voluntary, but failure to provide it – depending on the
circumstances – may prevent the registration of the User’s Account or the use of the
Website Features.

PERSONAL DATA PROCESSED AND THE PURPOSES AND LEGAL BASIS FOR
PROCESSING

In connection with the registration of the User Account and the use of the Website we
process personal data in accordance with Article 6(1)(b) REGULATION (EU) 2016/679

OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the
protection of natural persons with regard to the processing of personal data and on the
free movement of such data, and repealing Directive 95/46/EC (General Data
Protection Regulation), Official Journal of the European Union 4.5.2016, L 119/1,
(Hereafter also referred to as: “GDPR”).

We may also process personal data when this is necessary for the fulfilment of the
legal obligation’s incumbent on the Magdalena Firlit (Article 6(1)(c) of the GDPR) and
on the basis of our legitimate interest in particular to establish and protect our rights or
to assert claims (Article 6(1)(f) of the GDPR).

In connection with the information on our activities, we process personal data based
on our legitimate interest in accordance with Article 6(1)(f) of the GDPR. Where
applicable law requires consent to send commercial information to a designated
recipient who is a natural person by electronic means of communication, in particular
by electronic mail, we process personal data in connection with informing about our
activities on the basis of (voluntary, specific, informed and unambiguous) consent
pursuant to Article 6(1)(a) of the GDPR.

From time to time we may ask for your consent (Article 6(1)(a) of the GDPR) to
process your personal data for purposes that may not be directly related to your use of
the Website.

In addition, we process personal data on the basis of and within the framework of legal
obligations (e.g., accounting or tax law or on request to make personal data available
to the competent authorities in accordance with the law) (i.e., on the basis of Article
6(1)(c) of the GDPR).

HOW LONG WE STORE YOUR PERSONAL DATA

We will process personal data during the period of validity of the agreement concluded
by Magdalena Filrit with the User for the courses and for your use of the Website
Functionality by the User and for the period of limitation of claims resulting from the
concluded agreement (as a rule, for a period of six years from the end of the year in
which the agreement was terminated or expired). After the expiry of the above periods,
the data will be deleted, unless their further storage is an obligation under the law,
remains necessary for the fulfilment of contractual obligations, for the establishment
and protection of our rights or the assertion of claims, or if further processing is
possible or necessary under the law on a basis other than consent.

Notwithstanding the above, if the processing of personal data is based on your
consent, you have the right to withdraw your consent at any time (whereby withdrawal
of consent will not affect the lawfulness of the processing carried out on the basis of
your consent prior to its withdrawal). We will stop processing your data immediately if
you withdraw your consent, unless further processing is possible or legally necessary
on other grounds than consent. Withdrawal of consent may take place by direct
contact with Magdalena Firlit.

DO WE PROCESS YOUR DATA AUTOMATICALLY (INCLUDING THROUGH
PROFILING)?

Personal data can also be processed automatically, in particular for the purpose of
sending reminders and personalized offers. Processing data in this way will not affect
your rights or have any legal effects.

WHERE DO WE STORE YOUR PERSONAL DATA?

Your personal data will be stored in the countries of the European Economic Area
(”EEA”). However, some of the services we use may require data transfer and
processing outside the EEA. Any such transfer of personal data will comply with
applicable regulations and will be based on appropriate legal safeguards, i.e. (i) the
recipient is in a country which provides an adequate level of protection for personal
data (including in the U.S. if the recipient is certified under the Privacy Shield
programme), or (ii) under an instrument which covers the GDPR requirements for the
transfer of personal data to recipients outside the EEA.

SHARING YOUR PERSONAL DATA

Service providers and partners

We may share personal information with providers of technical services, such as
hosting, payment and mailing services, to provide communications with you, analytics
services related to examining how you interact with the site or gathering site usage
statistics to improve and optimize the site, as well as personalized advertising and
providing opportunities to share content on social networks and external sites.

We use the following categories of data processors: hosting service providers
(NAZWA.PL), client service orientated live chat software providers (NAZWA.PL),
payment service providers, analytics software providers, email service providers
(NAZWA.PL), as well as other service providers necessary or supportive of business
to ensure high quality customer service, satisfaction and security.

We may also share personal data with entities providing for us: accounting, HR and
payroll services, marketing services, IT services, financial services, legal services,
consulting services and other services related to running our business.

Entities processing personal data as part of our services are required to ensure their
protection and respect your rights in accordance with applicable law.

Related entities, acquisitions and restructurings

In the case of a merger or acquisition, as well as the reorganization of our business,
the commencement of joint ventures with other entities and the assignment or cession
of all or part of our business, we may transfer some or all of the personal data to other
entities (in particular to the acquiring entity and the legal successor). Personal data
may also be disclosed in the event of restructuring, bankruptcy or the establishment of
forced administration.

Legal obligations and security

We only disclose your personal data to third parties without your prior consent if
provided in this Policy or the law. We may disclose your personal data to the following
third parties: competent administrative, supervisory and law enforcement authorities,
institutions and other authorized entities in the country and abroad if required by
applicable law, as well as at their request under procedures provided for by law. We
may also transfer personal data to authorities, institutions and third parties to ensure
the safety of users, combat fraud and abuse or if it is necessary to establish, exercise
or defend legal claims;

HOW WE PROTECT YOUR PERSONAL DATA

We implement appropriate organizational, technical and physical safeguards to protect
your personal data, taking into account (1) the state of art, (2) cost of implementation,
(3) nature, scope, context and purposes of the processing, and (4) risks posed to you.

YOUR RIGHTS

To the extent required by applicable data protection regulations, you have all the rights
of a data subject as regards your personal data. Such rights include the following:

   – request access to your personal data;
   – obtain a copy of your personal data;
   – rectify inaccurate or incomplete personal data;
   – erase personal data;
   – restrict the processing of personal data;
   – portability of personal data;
   – object to processing of personal data which is based on legitimate interest
      and personal data which is processed for direct marketing purposes;
   – right to lodge a complaint with a supervisory authority.

The law does not require a specific form or manner of communication for the exercise
of your rights. However, we attach great importance to ensuring that they can be
exercised effectively, which is why we have provided for a dedicated e-mail contact
channel for queries, applications and requests relating to the exercise of these rights:
info@magdalenafirlit.com .

THE RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

Should you believe that your rights have been violated, we kindly ask you to contact us
on the contact details above. You also have the right to lodge a complaint with your
local data protection authority (if you are located in an EU member state), Prezes
Urzędu Ochrony Danych Osobowych (President of the Polish Office for the Protection
of Personal Data) or the court.

AMENDING THIS PRIVACY POLICY

Should our personal data processing practices change or should there be a need to
amend the Privacy Policy under the applicable law, case-law, or guidelines issued by
competent authorities, we are entitled to unilaterally amend this Privacy Policy at any
time. Should the amendments be material, we will notify you by e-mail reasonably prior
to the amendments entering into force. Otherwise, the amendments will be made
available on the Website.

GOVERNING LAW

Processing of personal data by Magdalena Firlit shall be governed by the laws on the
Republic of Poland.