Last updated: 21 July 2026

Privacy Policy

Gehanu, operated as an educational information project with registered contact address at Dworcowa 81/piętro X, Bydgoszcz, Poland, acts as the data controller for personal information collected through this website, gehanu.info, within the meaning of Regulation (EU) 2016/679 (the General Data Protection Regulation, referred to below as GDPR) and the Polish Act of 10 May 2018 on the Protection of Personal Data. This document explains what data we process, why we process it, and what rights are available to you as a data subject.

1. Scope of this policy

This policy applies to personal data processed in connection with your use of gehanu.info, including data submitted through the contact form, data collected automatically through cookies and similar technologies described in our separate Cookie Policy, and any correspondence you send to our published email address or telephone number. It does not apply to third-party websites that may be linked from this site, which are governed by their own privacy notices.

2. What data we collect

When you use the contact form, we receive the name, email address and message content you choose to provide. Because the form is configured to open your own email client rather than transmit data directly to a server, the information you type is sent from your device using your own mail provider, and we receive it only once you choose to send that email. We do not automatically capture form field content on our servers before you actively send the message.

Separately, if you consent to analytics cookies through our cookie banner, aggregated, non-identifying usage data such as pages visited and approximate session duration may be collected to help us understand which educational material is being read. We do not use this data to build individual profiles, and we do not combine it with contact form submissions.

3. Legal basis for processing

Where you contact us directly, our legal basis is Article 6(1)(a) GDPR, your consent, given by the act of composing and sending the message, and Article 6(1)(f) GDPR, our legitimate interest in responding to inquiries about an educational project we operate. Where cookies require consent under Polish telecommunications law (Article 173 of the Telecommunications Law, Ustawa Prawo telekomunikacyjne), we rely on the consent you provide through the cookie banner, which you may withdraw at any time.

4. Retention

We retain correspondence for as long as reasonably necessary to address the matter raised and for a limited period afterward for record-keeping, generally not exceeding twenty-four months unless a longer period is required by applicable law. Aggregated analytics data, where consented to, is retained according to the retention settings of the analytics tool in use and does not identify individual visitors.

5. Recipients of data

We do not sell personal data. Limited categories of recipients may include email service providers used to receive correspondence, and analytics service providers used only where you have given cookie consent for that category. Any such providers are bound by appropriate data processing terms consistent with Article 28 GDPR where applicable.

6. International transfers

Where a service provider we use is located outside the European Economic Area, we take steps to ensure an adequate level of protection is applied, such as reliance on the European Commission's Standard Contractual Clauses or an applicable adequacy decision, before any such transfer occurs.

7. Your rights

Under GDPR, you have the right to request access to personal data we hold about you, rectification of inaccurate data, erasure of data no longer necessary for the purposes described above, restriction of processing in certain circumstances, and data portability where technically feasible. You also have the right to object to processing based on legitimate interest and to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. To exercise any of these rights, contact us at [email protected].

8. Right to lodge a complaint

If you believe our processing of your personal data infringes applicable law, you may lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, PUODO), or with the supervisory authority of your habitual residence within the European Union.

9. Automated decision-making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you. The study path tool available on our homepage performs no data collection, stores nothing on our servers, and generates only illustrative suggestions based on values you enter directly into your browser session.

10. Changes to this policy

We may update this policy periodically to reflect changes in our practices or applicable law. The date at the top of this page indicates when it was last revised. Continued use of the site after an update constitutes acknowledgment of the revised policy.

11. Contact

Questions regarding this policy or requests concerning your personal data may be directed to Gehanu at [email protected], by telephone at +48 728 518 695, or by post to Dworcowa 81/piętro X, Bydgoszcz, Poland.