Privacy policy
This document explains how we process data relating to visitors to ogacademy.pl, people contacting OG Academy and users submitting training enquiries.
1. Data controller
The controller is VALERII MAKARENKO OG, ul. Diamentowa 27/1, 05-800 Pruszków, Poland, tax number NIP 5242922390. Privacy contact: akademia@ogacademy.pl, +48 794 649 444. Training venue: ul. Bolesława Prusa 10, unit 6, 05-800 Pruszków.
2. Data we process
We may process your name, phone number, e-mail address, selected training, language, experience level, message, business and invoice information, booking, payment and certificate data, and basic technical information required for website security. Please do not send health data or other sensitive information through the form.
3. Purposes and legal grounds
We process data to answer enquiries and prepare offers, take steps before entering into a contract, book and deliver training, issue invoices and maintain records, protect the website against abuse and establish or defend claims. Analytics, advertising measurement and electronic marketing require the appropriate consent if activated.
4. Forms and enquiries
The form is used to request contact and begin the booking process. Confirming that you have read the policy is not marketing consent. Data is sent to the OG Academy business mailbox and is not published. We may reply by phone, e-mail or WhatsApp.
5. Recipients
Authorised persons and providers of hosting, e-mail, IT support, accounting, payments and communication, as well as legal advisers, may access data. Google and Meta/WhatsApp receive data only to the extent resulting from use of their services and the user’s choices. We do not sell personal data.
6. WhatsApp, Google and external services
After following a WhatsApp link, the user interacts with WhatsApp Ireland Limited. The website is prepared for Google Analytics and Google Ads, but these tools should run only after consent and after valid identifiers are configured. Instagram and other external websites are governed by their operators’ policies.
7. Transfers outside the EEA
Global providers, particularly Google and Meta, may process data outside the EEA and should use legally required safeguards such as an adequacy decision or standard contractual clauses.
8. Retention periods
Enquiries not resulting in a contract are generally retained for up to 12 months after contact ends. Contract and billing data is kept for the performance period, mandatory tax periods and limitation periods. Security logs are usually kept for up to 12 months. Consent-based data is kept until consent is withdrawn or the purpose ends.
9. Your rights
You may request access, a copy, correction, deletion, restriction or portability, object to processing or withdraw consent. Contact akademia@ogacademy.pl. You may complain to the Polish supervisory authority, the President of the Personal Data Protection Office.
10. Security and updates
We use organisational and technical safeguards, form validation and access restrictions. We do not make decisions producing legal effects solely by automated means. This policy is updated when website functions, providers or legal requirements change.