Privacy and Cookie Policy

Personal data controller

The controller of your personal data is SPEAKEASY SPÓŁKA CYWILNA BLIGNAULT NANINE MALEC JAROSŁAW, jointly operated by Nanine Blignault and Jarosław Malec, ul. Damrota 163, 43-100 Tychy, Tax Identification Number (NIP): 6462911319, National Business Registry Number (REGON): 241905326, hereinafter referred to as the “Controller”.

For matters concerning your data, you can contact us:

• by email: hello@speakeasy.pl,
• by telephone: +48 501 412 908,
• by post: SpeakEasy, Damrota 163, 43-100 Tychy, Poland.

What data we process

• identification and contact details: first name, surname, email address and telephone number;
• the content of messages and other information voluntarily provided in the contact form or in correspondence;
• information about your interest in a course, examination or other service and, if you enrol or enter into a contract, participant details as well as the organisational and billing data necessary to perform it;
• technical data: IP address, date and time of the visit, URLs visited, referring page address, browser type, operating system, device type and events related to the use of the Website;
• information about consents given, including the time and scope of consent granted or withdrawn for cookies or marketing communications.

Please do not provide special categories of personal data, such as health information, in the contact form unless this is necessary to deal with a specific matter.

Purposes and legal bases for processing

Who we may share data with

Data may be disclosed or entrusted for processing only to the extent necessary to:

• providers of hosting, email, backup and IT infrastructure services;
• entities providing technical maintenance, security and administration of the Website;
• providers of accounting, legal or advisory services, where this is necessary for the Controller to fulfil its obligations or protect its rights;
• Google Ireland Limited and other Google group companies — in connection with Google Analytics, Google Site Kit and Google Fonts;
• authorised employees and associates of the Controller;
• public authorities, where the obligation to disclose data arises from applicable law.

Links to Google Maps, Google Forms, Google Docs, Facebook or Instagram lead to services operated by separate controllers. When you visit these services, your data is processed in accordance with their respective privacy policies.

Transfers of data outside the EEA

In connection with the use of Google services and third-party social media services, data may be processed outside the European Economic Area, particularly in the United States. For Google services, the European entity responsible for data is Google Ireland Limited, while Google LLC declares its compliance with the EU–U.S. Data Privacy Framework. Where required, providers also use standard contractual clauses approved by the European Commission or other mechanisms provided for in Chapter V of the GDPR.

More information about the safeguards used by Google is available in its Legal frameworks for data transfers.

How long we retain data

We retain data no longer than is necessary for the purpose for which it was collected:

• enquiry and correspondence data — for as long as necessary to handle the matter and, if no contract is entered into, for no longer than 12 months from the last contact;
• data relating to a contract or enrolment — for the duration of the contract and then until the applicable limitation period for claims has expired;
• tax and accounting records — for the period required by law, generally five years from the end of the calendar year in which the tax payment deadline expired;
• marketing data — until consent is withdrawn, an effective objection is made or the marketing activities are discontinued;
• information confirming that consent was given or withdrawn — until the limitation period for any related claims or obligations to demonstrate compliance has expired;
• user and event data available in Google Analytics — for no longer than 14 months, except for aggregate data that does not enable the User to be identified;
• technical logs — for the period necessary to ensure security, perform diagnostics and investigate an incident, generally no longer than 12 months.

Your rights

Where provided for by law, you have the right to:

• access your data and receive a copy of it;
• rectify or erase your data, or restrict its processing;
• data portability and object to processing;
• withdraw your consent at any time;
• lodge a complaint with the President of the Personal Data Protection Office.

To exercise your rights, email us at hello@speakeasy.pl.

You may lodge a complaint with the President of the Personal Data Protection Office: ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland, uodo.gov.pl.

Cookies

Cookies are small pieces of information stored on or read from the User’s device. The Website may use cookies that are necessary for its proper and secure operation and — only after consent has been obtained — Google Analytics cookies.

Consent to analytics cookies is voluntary. Refusing consent does not restrict access to the Website’s essential content. Consent can be changed or withdrawn at any time using the consent management panel available on the Website. Withdrawal of consent takes effect for the future and does not affect the lawfulness of processing carried out before the withdrawal.

The User may also delete or block cookies in their browser settings. Restricting essential cookies may cause certain features to function incorrectly.

Third-party tools

Google Analytics and Google Site Kit

The Website uses Google Analytics implemented through Google Site Kit and the Google tag GT-MR8ZNZN. This tool is used to measure visits to and use of the Website. It may process cookie identifiers, information about the device and browser, pages visited, events, and an approximate location derived from the IP address. Google states that the IP addresses of users in the EEA are used to determine an approximate location and are then deleted before the data is stored in Google Analytics.

Google Analytics cookies and the associated measurement may be enabled only after the User has given consent. Information on how Google uses data is available on the page How Google uses information from sites or apps that use our services.

Google Fonts

On selected pages of the Website, fonts may be downloaded from Google Fonts servers. When a font is downloaded, the provider receives the technical data necessary to transmit the file, such as the IP address and browser information. The purpose is to display the Website correctly, which constitutes the Controller’s legitimate interest under Article 6(1)(f) GDPR.

External links and content

The Website contains links to Google Maps, Google Forms, Google Docs, Facebook and Instagram. Selected archived materials may also download graphical elements from Facebook’s servers. Using an external service or downloading one of its resources may involve the transfer of technical data to its provider, in particular the IP address and browser information. The Controller does not currently use the Meta Pixel, online payments, user accounts or a public commenting system on the Website.

Data security

We use appropriate organisational and technical measures to protect data against loss, unauthorised access, alteration or disclosure.

Providing data in the form is voluntary, but without contact details we will be unable to respond. Providing the data required to enrol, enter into a contract or issue an accounting document is necessary to complete those activities. Marketing and analytics consents are voluntary and are not a condition for accessing the Website’s essential content or receiving a response to an enquiry.

Data is not used to make decisions concerning the User that are based solely on automated processing and that produce legal effects or similarly significantly affect them. Google Analytics statistics may be used for general analysis of the Website’s audience and effectiveness, but the Controller does not use them to make such decisions about specific individuals.

Changes to this Privacy Policy

This Policy may be updated in response to changes in the law, Website functionality or the tools used. The current version is always published on this page.

This Policy is effective from 18 August 2026.