Introduction
This Privacy Policy describes how Aromaterapia.edu.pl (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit our educational magazine website at aromaterapia.edu.pl. We are committed to protecting your privacy and handling your data in an open and transparent manner in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Polish law. By using our website, forums, and newsletter, you agree to the practices described in this policy. If you do not agree, please do not use our services.
Data Controller
The data controller for aromaterapia.edu.pl is Aromaterapia Educational Magazine. For any privacy-related questions, requests, or complaints, you can contact us at [email protected]. We will respond to your inquiry without undue delay and within one month, as required by law. We do not have a designated Data Protection Officer, but your request will be handled directly by our editorial and technical team responsible for data protection matters.
Data We Collect
We collect only the data necessary to operate and improve our educational platform. This includes data you provide directly, such as your name, email address, and forum username when you create an account, post comments, or subscribe to our newsletter. We also collect technical data automatically when you browse our site, including your IP address, browser type, device information, pages visited, time spent on pages, and referring URLs through cookies and similar technologies. We do not collect sensitive personal data, and we do not knowingly collect data from children under 16 without parental consent.
How We Use Your Data
We use your personal data to provide and maintain our website, enable forum participation, send educational newsletters if you have subscribed, respond to your messages sent to [email protected], analyze website traffic and improve our content, ensure security and prevent spam or abuse, and comply with legal obligations. We will never sell your personal data to third parties. We may share data with trusted service providers who assist us in operating the website, such as hosting, analytics, and email delivery services, but only under strict data processing agreements and only to the extent necessary to perform their services.
Cookies and Analytics
Our website uses cookies to ensure proper functionality, remember your preferences, and understand how visitors interact with our content. Essential cookies are necessary for the site to work and cannot be disabled. Analytical cookies, such as those from privacy-friendly analytics tools, help us measure audience and improve articles, and are used only with your consent where required. You can control or delete cookies at any time through your browser settings. Disabling cookies may affect some features of the website, such as staying logged into the forum.
Legal Basis for Processing
We process your personal data based on several legal grounds under the GDPR: your consent when you subscribe to newsletters or accept non-essential cookies, performance of a contract when you create a forum account and participate, our legitimate interest in improving our content, securing our website, and communicating with readers, and compliance with legal obligations when required by law. You have the right to withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Forum account data is kept until you delete your account. Newsletter subscription data is kept until you unsubscribe. Technical logs and analytics data are typically retained for up to 24 months before being anonymized or deleted. Contact correspondence sent to [email protected] is retained for up to 3 years to handle follow-up questions. After the retention period, data is securely deleted or anonymized.
Your Rights
Under the GDPR, you have the right to access your personal data, rectify inaccurate data, erase your data, restrict processing, object to processing based on legitimate interest, data portability, and lodge a complaint with a supervisory authority, in Poland the President of the Personal Data Protection Office (UODO). To exercise any of these rights, please contact us at [email protected]. We will verify your identity and respond within 30 days. You can also unsubscribe from newsletters via the link in every email and manage cookies via your browser.
Data Security and International Transfers
We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction, including encrypted connections (HTTPS), access controls, and regular security reviews. While our servers are located within the European Economic Area, some service providers may process data outside the EEA. In such cases, we ensure adequate safeguards such as Standard Contractual Clauses are in place. We will notify you and the relevant authority of any personal data breach where required by law.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. For material changes, we will provide additional notice via our website or email. If you have any questions about this Privacy Policy or how we handle your data, please contact us at [email protected].