Privacy Policy

1. Data controller

The controller of your personal data is:

For all matters concerning the processing of personal data, you may contact
the Controller using the contact details above.

2. Personal data we collect

Depending on how you use our website and services, we may process:

• your first name and surname;
• your email address and telephone number;
• information entered in contact, registration or enquiry forms;
• information concerning the selected course, language level and learning goals;
• student, parent or legal guardian information;
• contractual, billing and payment information;
• correspondence exchanged with ISLW;
• technical information, including IP address, browser type, device information and website activity;
• other information voluntarily provided by you.

Please do not provide special-category personal data unless it is necessary
and we have specifically requested it.

3. Purposes and legal bases for processing

We may process personal data for the following purposes:

• responding to enquiries and taking steps before concluding a contract
  – Article 6(1)(b) GDPR;
• concluding and performing educational-service or translation-service
  contracts – Article 6(1)(b) GDPR;
• managing courses, lessons, attendance, communication and customer service
  – Article 6(1)(b) GDPR;
• issuing invoices and complying with accounting, tax and other legal
  obligations – Article 6(1)(c) GDPR;
• establishing, pursuing or defending legal claims and protecting the
  School’s legitimate interests – Article 6(1)(f) GDPR;
• sending marketing information where consent is required
  – Article 6(1)(a) GDPR;
• using optional analytical or marketing cookies after obtaining consent
  – Article 6(1)(a) GDPR.

4. Contact forms and correspondence

When you contact ISLW through a form, email, telephone, WhatsApp or another
communication channel, we process the information you provide in order to
answer your enquiry, prepare an offer, register you for a course or provide
the requested service.

Providing information is voluntary, but without the information marked as
required, we may be unable to respond or provide the requested service.

5. Children’s personal data

Because ISLW provides educational services to children and teenagers, we may
process information concerning minors. Where required, registration,
contractual arrangements and consent must be completed by a parent or legal
guardian.

We process children’s information only to the extent necessary to organise
and provide educational services, maintain appropriate communication and
protect the student’s interests and safety.

6. Recipients of personal data

Personal data may be disclosed, where necessary, to:

• authorised ISLW staff members, teachers and cooperating specialists;
• website-hosting, email, IT-support and cybersecurity providers;
• contact-form, communications and cloud-service providers;
• accounting, legal and administrative service providers;
• banks and payment-service providers;
• public authorities where disclosure is required by law.

These recipients receive only the information necessary to perform their
services or comply with legal obligations.

7. Transfers outside the European Economic Area

Some technology or communication providers may process information outside
the European Economic Area. Where such a transfer occurs, ISLW applies the
safeguards required by the GDPR, such as an adequacy decision or standard
contractual clauses approved by the European Commission.

8. Retention of personal data

Personal data is retained only for as long as necessary, including:

• enquiry data – for the time required to answer the enquiry and for a reasonable follow-up period;
• contract and course data – for the duration of the service and the applicable limitation period;
• invoice and accounting data – for the period required by tax and accounting law;
• data processed on the basis of consent – until consent is withdrawn or the purpose ends;
• data required for legal claims – until those claims expire or proceedings are completed.

9. Your GDPR rights

Subject to the conditions specified by applicable law, you have the right to:

• access your personal data and receive a copy of it;
• rectify inaccurate or incomplete information;
• request the erasure of your personal data;
• request restriction of processing;
• receive and transfer your personal data where data portability applies;
• object to processing based on legitimate interests;
• withdraw consent at any time, without affecting processing carried out before its withdrawal;
• lodge a complaint with the President of the Personal Data Protection Office in Poland.

To exercise your rights, contact us at
info@islw.edu.pl.

10. Automated decision-making

Personal data submitted through this website is not used to make decisions
based solely on automated processing that would produce legal effects or
similarly significantly affect the user.

11. Cookies

The website may use cookies necessary for its proper operation and, after
obtaining the appropriate consent, optional analytical or marketing cookies.
Detailed information about the cookies used, their purposes, retention
periods and consent-management options is provided in the Cookie Policy.

You can also manage or delete cookies through your browser settings. Blocking
necessary cookies may affect the proper operation of the website.

12. Data security

ISLW applies appropriate technical and organisational measures designed to
protect personal data against loss, unauthorised access, disclosure,
alteration or destruction. Access to personal data is restricted to persons
who require it to perform their duties.

13. Changes to this Privacy Policy

This Privacy Policy may be updated to reflect changes in applicable law,
the operation of the website or the services used by ISLW. The current
version will always be available on the ISLW website.

Last updated: 20 September 2026