Privacy Policy

dated 27 April 2026

Dear User,

We care about your privacy and want you to feel comfortable while using our services. Below you will find the most important information about how we process your personal data and about the cookies used by our Website, Shop and course platform. This information has been prepared taking into account the GDPR, i.e. the General Data Protection Regulation.

Controller of personal data

The controller of your personal data is [Piotr Michalik, a sole trader conducting business under the name Bitsnap Piotr Michalik, entered in the Central Registration and Information on Business (Centralna Ewidencja i Informacja o Działalności Gospodarczej) maintained by the minister responsible for the economy, Tax ID (NIP) 6762534430, REGON no. 367961212, Osiedle Złotej Jesieni 6/130 31-826 Kraków.

If you want to contact us regarding the processing of your personal data, write to the e-mail address: [E-MAIL ADDRESS].

Your rights

You have the right to request:

access to your personal data, including obtaining a copy of it (Art. 15 GDPR),
rectification of your data (Art. 16 GDPR),
erasure of your data (Art. 17 GDPR),
restriction of processing (Art. 18 GDPR),
transfer of your data to another controller (Art. 20 GDPR).

You also have the right:

to object at any time, on grounds relating to your particular situation, to the processing of your data based on Art. 6(1)(f) GDPR (legitimate interest), including profiling (Art. 21(1) GDPR),
to object where your data is processed for direct marketing purposes, including profiling (Art. 21(2) GDPR),
to withdraw your consent at any time, where processing is based on your consent. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

Contact us if you want to exercise your rights. You can object to cookies by using your browser settings or our consent management panel.

If you believe that your data is being processed unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (UODO).

Personal data and privacy

Below you will find detailed information on how your data is processed, depending on the actions you take.

1. Placing an order for a course — performance of a contract

| | | |---|---| | For what purpose? | Fulfilment of your order — granting access to the purchased online course, issuing an invoice, handling payments. | | On what legal basis? | Contract for the supply of digital content (Art. 6(1)(b) GDPR); legal obligation related to accounting (Art. 6(1)(c) GDPR). | | For how long? | For the duration of the contract; until our legal obligations expire; until the end of the period during which claims may be pursued. | | What happens if you do not provide your data? | You will not be able to place an order or obtain access to the course. |

2. Placing an order for a course — satisfaction survey

| | | |---|---| | For what purpose? | Improving the quality of our services thanks to reviews submitted by Users. | | On what legal basis? | Our legitimate interest in surveying satisfaction with our services (Art. 6(1)(f) GDPR). | | For how long? | If you do not submit a review — for 14 days from the purchase or until your objection is upheld. If you submit a review — until it is deleted or your objection is upheld. Until the end of the period during which claims may be pursued. | | What happens if you do not provide your data? | We will not take your opinion into account in our work on developing our services. |

3. Creating an account on the Website

| | | |---|---| | For what purpose? | Performance of the contract for the provision of the account-keeping service, including enabling you to make purchases, access purchased courses, view order history and download invoices. | | On what legal basis? | Contract for the provision of services (Art. 6(1)(b) GDPR). | | For how long? | For the duration of the account-keeping contract; until the end of the period during which claims may be pursued. | | What happens if you do not provide your data? | You will not be able to create an account and, consequently, to make a purchase or access courses. |

4. Contacting us

| | | |---|---| | For what purpose? | Handling your enquiries or reports. | | On what legal basis? | Contract or steps taken prior to entering into a contract (Art. 6(1)(b) GDPR) — if the enquiry concerns a contract; our legitimate interest in communicating with you (Art. 6(1)(f) GDPR) — if the enquiry does not concern a contract. | | For how long? | Until the end of the period during which claims may be pursued or until your objection is upheld — whichever applies. | | What happens if you do not provide your data? | We will not be able to respond to your enquiry. |

5. Marketing activities — browser settings or consent

| | | |---|---| | For what purpose? | Direct marketing, including displaying personalised advertisements for our courses on third-party websites (more in the sections "Profiling" and "Cookies"). | | On what legal basis? | Our legitimate interest (Art. 6(1)(f) GDPR) or your consent (Art. 6(1)(a) GDPR) — depending on the tool used. | | For how long? | Until the cookies used for marketing purposes expire or are deleted, consent is withdrawn or an objection is upheld. | | What happens if you do not provide your data? | You will not receive advertisements for our courses tailored to your interests. |

6. Analytical activities — browser settings or consent

| | | |---|---| | For what purpose? | Analysing how the Website is used in order to improve its functionality and adapt content to Users' needs (more in the sections "Analytical activities" and "Cookies"). | | On what legal basis? | Our legitimate interest (Art. 6(1)(f) GDPR). | | For how long? | Until the analytical cookies expire or are deleted. | | What happens if you do not provide your data? | We will not take into account how the Website is used in our work on developing it. |

7. Consenting to receive marketing content (e.g. information about courses, promotions)

| | | |---|---| | For what purpose? | Sending marketing information, including special offers regarding courses; analysing the effectiveness of the messages sent. | | On what legal basis? | Your consent to marketing activities (Art. 6(1)(a) GDPR); our legitimate interest in analysing the effectiveness of mailings (Art. 6(1)(f) GDPR). | | For how long? | Until consent is withdrawn; until an objection is upheld; until the end of the period during which claims may be pursued. | | What happens if you do not provide your data? | You will not receive information about our offers and course news. |

8. Subscribing to the Newsletter and receiving the Bonus in the form of a free video lesson

| | | |---|---| | For what purpose? | Performance of the contract for the delivery of the Newsletter and the Bonus in the form of a free video lesson; analysing the effectiveness of the messages sent. | | On what legal basis? | Contract for the delivery of the Newsletter and the Bonus (Art. 6(1)(b) GDPR); our legitimate interest in analysing the effectiveness of mailings (Art. 6(1)(f) GDPR). | | For how long? | For the duration of the contract; until an objection is upheld; until the end of the period during which claims may be pursued. | | What happens if you do not provide your data? | You will not receive the Newsletter or the free video lesson. |

9. Using the Website and other available features

| | | |---|---| | For what purpose? | Performance of the contract for the provision of services by electronic means concluded between us. | | On what legal basis? | Contract for the provision of services (Art. 6(1)(b) GDPR). | | For how long? | For the duration of the contract; until the end of the period during which claims may be pursued. | | What happens if you do not provide your data? | You will not be able to use features that require the processing of data. |

10. Establishing, pursuing or defending claims

| | | |---|---| | For what purpose? | Establishing, pursuing or defending potential claims related to the concluded contract or the services provided. | | On what legal basis? | Our legitimate interest (Art. 6(1)(f) GDPR). | | For how long? | Until the limitation period for claims expires or until your objection is upheld — whichever applies. | | What happens if you do not provide your data? | It will not be possible to establish, pursue or defend claims. |

Limitation periods for claims

| Type of claim | Limitation period | |---|---| | Claims related to conducting business activity | 3 years | | Claims under service contracts and sales contracts | 2 years (consumers) / 3 years (entrepreneurs) | | Claims established by a final court judgment | 6 years |

Profiling

As part of the Website, we may carry out profiling — if you consent to it or if you allow the relevant marketing tools to operate. Profiling consists of automatically assessing which courses or educational materials you may be interested in, based on information about the content you view and your activity on the Website. As a result, advertisements for our courses displayed on third-party websites will be better tailored to your interests.

The profiling we carry out does not result in decisions that produce legal effects concerning you or similarly significantly affect you.

Analytical activities

As part of the Website, we carry out analytical activities aimed at improving its functionality — if you consent to it. As part of the analysis, we take into account, among other things, the time spent on individual subpages, the elements clicked and navigation paths. This allows us to optimise the layout, appearance and content of the Website.

If you subscribe to the Newsletter or consent to receive marketing content, we may analyse the effectiveness of our messages — e.g. check whether and how they have influenced activity on the Website. Such activities serve to determine the optimal rules of communication with our Users.

Data security

When processing your personal data, we apply organisational and technical measures in accordance with applicable law. We encrypt connections using an SSL/TLS certificate. Access to personal data is granted only to authorised persons who are bound by a duty of confidentiality.

Cookies

Our Website, like most websites, uses cookies. These files are stored in the memory of your device and do not change its settings.

On the Website, cookies are used for the purposes of:

remembering your session and login data,
statistics and analytics,
marketing and remarketing,
ensuring the proper functioning of the Website and the Shop.

We will not process cookies for longer than 2 years from your last visit to the Website.

By using the appropriate browser settings, you can delete cookies or block their use in the future at any time. Guidance for individual browsers:

External services / data recipients

We use the services of external entities that support us in running our business. We entrust your data to them — they process it solely on our documented instructions.

| Activity | Data recipients | Transfer of data outside the European Union | |---|---|---| | Any activity in connection with the Website | Hosting provider | Does not take place | | Any activity in connection with the Website | Provider of software for running sales and the course platform ([PLATFORM NAME]) | [TO BE COMPLETED] | | Placing an order | Payment provider (PayU / [OTHER PROVIDER]) | Does not take place | | Placing an order | Provider of accounting software | Does not take place | | Placing an order | Accounting firm | Does not take place | | Being on the website with settings allowing analytical activities | Google Analytics (Google LLC) | Yes — USA. Basis for the transfer: European Commission adequacy decision on data protection for the USA (EU-US Data Privacy Framework, July 2023) | | Being on the website with settings allowing analytical activities | Hotjar Ltd | Does not take place (Malta, EU) | | Being on the website with settings allowing marketing activities | Meta Platforms Ireland Ltd (Meta Pixel — Facebook/Instagram Ads) | Yes — USA. Basis for the transfer: EU-US Data Privacy Framework | | Being on the website with settings allowing marketing activities | Google LLC (Google Ads / remarketing) | Yes — USA. Basis for the transfer: EU-US Data Privacy Framework | | Subscribing to the Newsletter or consenting to receive marketing content | MailerLite (UAB "MailerLite") | Does not take place (Lithuania, EU) | | Using social media in connection with the Website | Social media platforms (Meta, LinkedIn and others) | Depends on the platform — see the privacy policies of the individual services | | Any activity in connection with the Website | Provider of standard office software (including e-mail) | [TO BE COMPLETED] |

In addition: relevant public authorities to the extent that we are obliged to disclose data to them.

Changes to the privacy policy

We reserve the right to make changes to this privacy policy. The current version of the document is always available on the Website at [ADRES STRONY/polityka-prywatnosci]. We will inform Users who hold an Account of material changes by e-mail.