Privacy and Cookies Policy

This draft describes how personal data may be processed in connection with languagesincommon.com. It must be checked against the final forms, analytics, embedded services and cookie configuration before publication.

1. Data controller

The controller is Cambridge School of English Sp. z o.o., ul. Widok 10/LU1, 00-023 Warsaw, Poland; KRS 0000085970; NIP 5252147188; REGON 016153582. General enquiries may be sent to contact@languagesincommon.com. Privacy and data-protection requests may be sent to privacy@languagesincommon.com or to the postal address above.

2. Data that may be processed

Depending on the final website functions, data may include information supplied in an enquiry, technical server and security logs, cookie identifiers and communication records. Only data necessary for a defined purpose should be requested.

3. Purposes and legal bases

Data may be processed to answer enquiries and take steps requested before a contract (GDPR Article 6(1)(b)); meet legal obligations (Article 6(1)(c)); protect the website, prevent abuse and establish or defend claims based on legitimate interests (Article 6(1)(f)); and, where required, on consent (Article 6(1)(a)). Consent may be withdrawn without affecting earlier lawful processing.

4. Recipients and transfers

Data may be made available to authorised staff and contracted service providers where necessary. LH.pl provides website hosting and initial email infrastructure. Messages may be forwarded to the organisation’s Google Workspace environment for authorised handling. Google Workspace data-region settings and the applicable processing terms must be verified before publication; this draft does not claim that all processing occurs on one server or in one city. LC does not currently use a webshop, customer account, newsletter or marketing analytics. Enrolment and transactions take place on the relevant Cambridge School of English or L² website under that site’s own privacy information.

5. Retention

Data is retained only for as long as necessary for the relevant purpose, legal obligations, security and claims. Exact periods must be aligned with the final processes before publication.

6. Your rights

Subject to the GDPR and applicable limitations, individuals may request access, rectification, erasure, restriction, portability or object to processing. They may lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).

7. Cookies

Necessary cookies may support security, language choice and core WordPress functions. Non-essential analytics or marketing cookies must not operate without the consent required by law. A final cookie inventory and consent configuration are required before launch.

8. Children and external content

The public website is not intended to collect unnecessary data from children. Embedded content and external links may be governed by third-party privacy terms and must be reviewed before use.

9. Updates

The publication date and last-review date will be added after legal and technical verification.

Draft prepared with AI support. Factual and legal review plus explicit approval are required before publication.