INICIA SESIÓN

Política de privacidad

This Privacy policy concerns the principles of personal data processing within the internet website eTutor.eu (hereinafter referred to as website or platform) and services provided by LangMedia sp. z o.o.

Personal data administrator

The administrator of Users’ personal data (hereinafter referred to as Service Provider) is:

LangMedia sp. z o.o.
ul. Rapackiego 5
53-021 Breslavia, POLONIA
NIF: PL 6711762204, REGON: 320522802
Número del Registro Nacional de Tribunales: 0000306795 (VI División Comercial del Registro Nacional de Tribunales bajo el Tribunal de Distrito en Breslavia – Fabryczna)
Capital Social: PLN 113 400,00
e-mail: ayuda@es.etutor.eu
tel:

For more information, you can contact the Data Protection Officer we have designated at Haz clic en la imagen o escribe tu dirección de correo electrónico. Correspondence address: Data Protection Officer LangMedia sp. z o.o., ul. Rapackiego 5, 53-021 Breslavia, POLONIA.

In this Privacy Policy GDPR refers to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Data security

Employees of the Service Provider are authorised to process personal data, participate in training in accordance with the internal Security Policy and sign statements on maintaining personal data confidentiality.

All servers on which personal data are stored are located within the European Union territory.

We use technical and cryptographic security solutions to protect the processed data against unauthorised access, modification, or removal. We regularly install security patches on our servers.

Due to the use of artificial intelligence (AI) algorithms based on external models such as GPT-4 by the Website to conduct conversations with the User during lessons (quests), the Service Provider ensures that any data provided by the User into the chat window and transmitted via the API is anonymized or pseudonymized whenever possible, in order to minimize the risk of identifying data subjects.

For security and privacy protection reasons, Users are strictly advised not to share any personal data or information that may lead to the identification of natural persons during the course of the conversation.

Payments security

In the case of payment transactions, the data (such as the card number) are not processed on our servers, but only on the servers of the authorised companies handling payments, which make use of the security solutions compliant with the legal requirements and the regulations of the organisations that issue payment cards. These companies provide us with the information on the status of particular payment transactions.

By paying via PayPal, payment details are transferred to Paypal (Europa) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. The details are transferred pursuant to art. 6 sec. 1 letter b of GDPR and only to the extent necessary to process payments. You can find more information about data protection in the PayPal privacy policy at: www.paypal.com/pl/webapps/mpp/ua/privacy-full

By paying via PayU, payment details are transferred to PayU S.A. with its registered office in Poznań (60-166 Poznań, ul. Grunwaldzka 182), entered in the Register of Entrepreneurs kept by the District Court Poznań – Nowe Miasto and Wilda in Poznań, 8th Commercial Department of the National Court Register under KRS number 0000274399, NIP number: 779-23-08-495, Polish payment services provider monitored by the Polish Financial Supervision Authority, entered into the register of Polish payment services providers kept by the Polish Financial Supervision Authority under the number IP1/2012. The details are transferred pursuant to art. 6 sec. 1 letter b of GDPR and only to the extent necessary to process payments. You can find more information about data protection in the PayU privacy policy at: https://poland.payu.com/zasady-prywatnosci-w-payu/

What information is collected?

We collect the data related to you whenever you use our websites and applications, create an account on one of our websites, subscribe to the newsletter, participate in our contests or contact us.

Information provided by the User while creating an account

When an account is created, we ask you to provide the following information:

  • first name and surname,
  • e-mail address,
  • access password.

The provision of this data is voluntary, but necessary to conclude an agreement to maintain your account on the platform and provide access to paid courses.

When registering an account for identification purposes on the eTutor website, a login name, which is the User's individual name, is automatically assigned by the Service Provider or entered by the User. After registration, the login name may be changed once by the User (except for privileged users).

If you have a privileged account and access to the administrator panel in eTutor.eu, you must also give your phone number to which the Service Provider will send a text message with a code to verify the person using the account.

In some cases, with the User’s prior consent, an account is created on the basis of the data provided to us by the User’s employer or other entity paying for the course on behalf of the User.

Optional account information provided by the User

When the account has been created, the User may add additional information to his or her profile:

  • photo (avatar) - visible to the general public,
  • phone number,
  • correspondence address,
  • gender,
  • year of birth.

We allow you to log in to the website via external services such as Facebook, Google and Apple. In this case, we will receive basic data from your account, such as your name and email address or email alias in the case of Apple. We do not obtain data such as passwords, photos or other data from external services.

When you log in to the website or create an account using an external website, such as Facebook, we collect your account’s ID, first name, surname, e-mail address and gender.

The Administrator allows you to log in to the website via:

  • Facebook Connect provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA or, for the users living within the territory of the EU – Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter: Facebook). It is not necessary to register if you use Facebook. In order to log in, the User is redirected to the Facebook portal, where they can log in with their User data and thus log in to their account on the eTutor.eu website. Further information about Facebook and privacy setting can be found in the data protection guidelines at https://en-gb.facebook.com/about/privacy/update
  • Google account provided by Google Ireland Ltd. (Gordon House, 4 Barrow Street, Dublin, Ireland (hereinafter: Google). It is not necessary to register if you use a Google account. In order to log in, you will be redirected to the Google page where you can log in with your user data and thus log in to their eTutor account. Further information about Google and privacy settings can be found in the data protection guidelines at https://policies.google.com/privacy.
  • The Apple ID (Sign in with Apple) function offered by Apple Distribution International Limited, with its registered office at Hollyhill Industrial Estate, Hollyhill, Cork, Ireland (hereinafter: Apple). No additional registration is required to use this feature. To log in, you will be redirected to the Apple website, where you can log in with your user data and thus log in to your eTutor account. In this case, we will receive basic data from your account, such as your name and email address or email alias. When logging in via Apple, you can use the ‘Hide my email address’ option, which allows Apple to create a unique email alias that redirects to your real email address, thus preventing your real email address from being disclosed unless you disclose it yourself. Further information about Apple and privacy settings can be found in the data protection guidelines at: https://www.apple.com/legal/privacy/.

Content sent by the User

When you use our services, we collect and process the following data:

  • history of orders and payments made using the sites, including the payer’s data (in case of payments made to our bank account - first name, surname, address, bank account number),
  • messages sent to us by e-mail, message module on the website, contact form, chat module, social networks and by phone,
  • IP addresses and information related to the devices used to access our services,
  • history of using the websites and mobile applications of the Website Provider,
  • learning history (including the information about the completed lessons, exercises, tests and repetitions, words and grammatical structures learnt, written assignments and recordings),
  • history of search queries in the websites, including queries in Diki dictionary,
  • messages and comments published in the language questions section, on the forum or in the suggestions section,
  • messages exchanged between the Users on the platform,
  • ad views and interactions with the ads,
  • lists of vocabulary and grammar items, and other content you store on the website.

Private messages exchanged between the Users are treated as confidential and they are not disclosed to third parties without the User’s consent, except for the situation where such disclosure is required under the relevant provisions of law.

The website offers the function of inviting other people, who have not created an account on our website yet, where the friends’ e-mail addresses can be provided in order to send invitations recommending our services to them. The provided addresses are used to send an invitation on your behalf.

Logs

When the websites are used, the following information may be recorded each time after sending a request to the Service Provider’s server:

  • date and time of sending a request,
  • content and status of the request (for example URL address of the visited web page together with the enclosed parameters),
  • IP address of the computer submitting the request,
  • the amount of data sent in reply,
  • the headers sent by the User’s device (specifying, among others, the browser, operational system, the set language, the web page from which the redirection took place, the content of cookies)

Cookies, browser memory and device cache, pixel tags

In order for the eTutor.eu website to function properly, it uses cookies.

Cookies are files downloaded to your device (computer or mobile device) to store data, which can then be updated and downloaded by the entity responsible for their installation.

We classify the cookies used on our site into:

  • Essential cookies – their presence is required for proper operation and display of the site. They are usually set in response to specific user activities, treated as a service request, such as setting privacy preferences, logging in or filling out forms. Importantly - they do not store any personal data. Our website cannot function properly without these cookies.

and others (optional), which we use only if you agree:

  • Functional cookies – they are used for improving the functionality and personalisation of the website. They may come directly from us or from entities whose services we use on our website. If you do not agree to such cookies, it is possible that some elements of the website will not function properly.
  • Technical cookies – they allow the user to navigate the website and use various options or services thereon, such as traffic and data transmission control, session identification, counting visits, or using security elements during navigation.
  • Preference cookies – they remember the information based on which you access the service, with certain characteristics that may differentiate your experience from that of other users, such as the language, design or content of the service depending on the type of browser through which you access the service or the region from which you access it.
  • Analytical cookies – they are provided by us or third parties and allow us to determine the number of users and thus carry out measurement and statistical analysis of users' use of the services offered. For this purpose, your browsing on our website is analysed in order to improve our product or service offerings to you.
  • Marketing cookies – they are provided by us or third parties, and allow us to analyze your web traffic in order to tailor the ads displayed on the website to your profile.

In addition, the above-mentioned cookies can be classified according to their storage time:

  • Session cookies – they are temporarily transferred to your device and stored in your browser's memory until the session ends. They allow us to maximize the functionality of the site. We use the information we collect in this way to improve the quality of the site and the user experience.
  • Persistent cookies – these stay on your device longer, allowing us to recognize you as a returning user of the site, so we are better able to tailor the displayed content to your preferences. We also use mechanisms such as browser local storage (for example Web Storage) or device memory (in the case of mobile applications) that can store both the data necessary to provide the requested service (for example your session data, preferences and settings) and additional information, such as unique identifiers or temporary data to speed up the loading of content.

If you limit the application of the listed mechanisms, it may affect the functionalities available on the Website. Using the appropriate browser settings, you can also delete previously saved data.

During your visit to our website, a banner will be displayed with information about the use of cookies. If you select the “Enable all” option, it will mean that you accept all the cookies on our website and confirm that you have read the information about these cookies and the purposes of their use, as well as the cases in which the data collected with the help of these cookies is transferred to our partners.

In the case of essential cookies, your consent is not required, as cookies of this kind ensure the full and uninterrupted functioning of our website.

If you do not want our cookies to be stored on your device, you can select the “Reject all” option. By selecting this option, you will reject all but essential cookies that we use on our website.

We also use pixel tags, which are elements placed, for example, in an email message or in the code of a website, that allow us to monitor activity, such as opening an email or viewing a particular page. Pixel tags are often used in conjunction with cookies.

The providers of some Cookies are third parties that provide services to the website, which is clearly indicated above the name of the cookies.

The list of these entities and tools can change, but they include, among others:

Google Ads – a remarketing tool from Google LCC that allows to display personalized ads of the eTutor.eu service, more information:
https://policies.google.com/technologies/ads?hl=pl,

Google Analytics – a tool that collects information about the visits to the eTutor.eu website, the subpages viewed and the time the User spent on the website, more information:
https://www.google.com/analytics/terms/

Facebook Pixel – a tool that allows to target personalized ads to Facebook Users, more information:
https://www.facebook.com/privacy/explanation,

Hotjar – a tool that allows the Administrator to conduct analysis of the User's activity on the website, including collecting data about the behaviour and preferences of Users on our website, more information:
https://www.hotjar.com/privacy/

HubSpot - a marketing automation and contact management tool that monitors and reports on your online activity, more information:
https://legal.hubspot.com/privacy-policy

Pinterest Ads – a marketing automation and contact management tool that monitors and reports on your online activity, more information: https://policy.pinterest.com/pl/privacy-policy

TikTok Ads – the remarketing tool from TikTok Information Technologies UK Ltd, which allows to display personalized ads of eTutor.eu service, more information: https://ads.tiktok.com/i18n/official/policy/privacy.

Bing Ads (now known as Microsoft Advertising) - a remarketing tool from Microsoft, which allows to display personalized ads for the eTutor.eu service, more information: https://privacy.microsoft.com/pl-pl/privacystatement

What is the purpose and basis of processing your personal data?

We process your personal data only if we have legal basis to do so.

Data processing purposes on the basis of art. 6 sec. 1 point a of the GDPR (your consent):

  • maintaining an account based on optional personal data, i.e. personal data other than those required to create and maintain a basic account,
  • direct marketing via email or push notifications (e.g. informing users about our products or services, or informing third parties such as our partners or corporate group entities), provided that your separate consent has been obtained on the basis of art. 398 sec. 1 of the Electronic Communications Law.

The purposes of processing personal data on the basis of art. 6 sec. 1 point b of the GDPR (processing required to conclude an agreement that you are a party hereto or to take actions upon your request prior to conclusion of the agreement):

  • concluding and executing the agreement, which covers maintaining your account in the website and handling payments,
  • logging into the website using an external provider's account (Facebook, Google, Apple, including via an email alias) in order to simplify the registration and login process, ensure access to the User's account and contact in connection with the provision of services covered by the contract,
  • providing high quality services, maintaining the services, solving technical problems,
  • sending notifications about transactions made and subscriptions approaching their end,
  • settle the agreement after it has been completed.

The purposes of processing personal data on the basis of art. 6 sec. 1 point c of the GDPR (fulfilling our legal obligations) are as follows:

  • bookkeeping and tax settlements,
  • keeping accounting documents for the period of time specified by legal regulations,
  • handling complaints,
  • recording the history of changes to ensure accountability of processed personal data,
  • deleting the account at the User's request.

The purposes of processing personal data on the basis of art. 6 sec. 1 point f of the GDPR (our legitimate interest) are as follows:

  • handling Users’ inquiries sent by e-mail, contact form, or by phone,
  • monitoring activity on the websites and mobile applications in order to develop the services we provide as well as increase their quality,
  • settlements with the partners through which you order our services,
  • direct marketing via e-mail or push notifications (for example, informing users or third parties, i.e. our partners or corporate group entities, about our products or services), provided that your separate consent has been obtained based on the act on provision of electronic services or the telecommunications law,
  • fulfilling the obligations towards the partners who provide us with contents and software we require to provide our services,
  • carrying out promotions, contests and loyalty programs you can participate in,
  • improving the existing services and products (for example, the written assignments sent to us help us develop the system for detecting and correcting errors and also analyse the most frequent types of errors),
  • developing new services and products,
  • carrying out surveys and statistical analyses,
  • offering better adjusted contents, including the search results and the content of the courses,
  • improving the matching of ads, which enable us to provide some services free of charge,
  • ensuring security, detecting violations, enforcing legal claims.

Profiling

We use the collected data also for profiling the Users, i.e. processing it in an automated way to anticipate the behaviour and personal preferences of the Users. However, it does not cause any legal effects towards you and does not have any relevant impact on your situation.

Who do we transfer your data to?

Personal data processing entrusted to other entities

We entrust the processing of your personal data to:

  • the entities which support our IT systems, provide hosting services, data storage services, and telecommunication services, support electronic mail,
  • suppliers of AI models used on the Website,
  • the entities which handle mailings on our behalf,
  • the entities which handle payments on our behalf,
  • the entities which handle bookkeeping and tax settlements,
  • the entities which provide us with legal and consulting services,
  • the partners which promote our services,
  • the group administrators, if you use our services through an organisation (for instance your employer),
  • the teachers and subcontractors who provide us with services related to conducting language courses, if the service you use covers teacher’s assistance or residential course (e.g. blended learning),
  • in case of lessons with a tutor, to the entities which provide supporting tools for organising, conducting and billing the lessons.

In case of the courses paid for through another company or an organization (for instance your employer) we transfer the personal data of the course Users for the purpose of billing (first name, surname, e-mail address), and in case of some of our customers, with your consent, also for the purpose of monitoring your learning progress. Expressing such consent may be a condition to cover the costs of your course by an external entity.

We enter into appropriate contracts with each entity to which we entrust the processing of your data to ensure data protection in accordance with the requirements of the GDPR.

Personal data processing entrusted to the entities outside the European Union

We use services of the suppliers from different countries, including the suppliers with their registered offices located outside the European Union (for example in the USA). Legal regulations related to personal data protection in these countries are different from the regulations applied in the EU. In such cases, the Controller ensures an adequate level of data protection by applying the safeguards provided for in the GDPR. We may transfer your personal data to:

⎯ countries for which the European Commission has issued decisions on the adequacy of personal data protection without the need to meet additional requirements;

⎯ other countries on the basis of Standard Contractual Clauses with additional safeguards (technical and legal) or Binding Corporate Rules or on the basis of Article 49(1)(c) of the GDPR, if the transfer is necessary for the conclusion or performance of a contract concluded in the interest of the data subject between the Controller and a User outside the EEA. Examples of such service providers as of the date of this privacy policy are Amazon Web Services based in the USA, Google Inc. based in the USA, Facebook Inc. based in the USA, and Open AI based in the USA.

Such suppliers, as of the date of this privacy policy, include Amazon Web Services with its registered office in the USA, Google Inc. with its registered office in the USA, Facebook Inc. with its registered office in the USA, and Open AI based in the USA.

What you are entitled to

In relation to the processing of your personal data, you are entitled to request:

  • access to your personal data,
  • correction of the incorrect data and filling in missing information,
  • to limit the processing of your personal data,
  • to stop processing your personal data and profiling which results from our legitimate interests related to your specific situation,
  • to stop processing your personal data for the purposes of direct marketing and profiling related to direct marketing,
  • removal of the data being processed,
  • removal of the data published unjustifiably on our websites,
  • making the data processed in an automated way available in a structured and commonly used format, for example to transfer it to another data administrator.

The ability to exercise the abovementioned rights may depend on the legal basis for processing your personal data by us and on the purpose for processing your personal data. Please send the applications related to the processing of personal data by e-mail or by post.

You can view or modify most of the personal data related to your account in Account settings. There is also a functionality which enables you to request removal of your account.

In order to authorise the submitted applications related to personal data our employee may also ask you to provide additional information to confirm the identity of the person submitting the application.

You have the right to withdraw your consent to processing personal data at any time. The withdrawal of consent does not affect the lawfulness of processing your personal data based on consent before its withdrawal.

You also have the right to withdraw your consent to a specific channel of communication related to direct marketing at any time, according to the provisions of the Electronic Communications Act. You can withdraw your consent to receive marketing communications from us at any time via the email preference page in Account Settings by clicking on the resignation link provided in an email message sent to you or by sending such information to the email address: ayuda@es.etutor.eu.

Data retention period

  1. Your personal data is processed by the Administrator for the period necessary to achieve the purposes for which the data is processed or until an objection is considered, if the basis for processing is the legitimate interest of the Administrator, or until consent is withdrawn, if the basis for processing is consent (data retention period).
  2. Below you will find detailed data retention periods depending on the category of data.
    Data Type Storage period Legal basis
    User identification data For the entire period of activity of the User's account on the Website, Mobile Application + 2 years after its cessation Performance of the contract (Article 6(1)(b) GDPR) and the Administrator's legitimate interest in the form of handling complaints, pursuing or defending against claims (Article 6(1)(f) GDPR)
    Activity history on the Website (course progress, test results) For the entire period of activity of the User's account on the Mobile Application Service + 2 years after its cessation Performance of the contract (Article 6(1)(b) GDPR) and the Administrator's legitimate interest in the form of handling complaints, pursuing or defending against claims (Article 6(1)(f) GDPR)
    Data processed during the User’s conversation with the artificial intelligence algorithm in the course of lessons (quests) For a period of 30 days Performance of a contract (Article 6(1)(b) GDPR)
    Data related to courses ordered by the Ordering Party For the entire period of activity of the User's account on the Website, Mobile Application + 2 years after its cessation Legal obligations (Article 6(1)(c) GDPR) arising from tax or accounting legislation, as well as the Administrator's legitimate interest - performance of the contract with the Ordering Party (Article 6(1)(f) GDPR)
    Server logs Up to 6 months Legitimate interest of the Administrator - ensuring security (Art. 6(1)(f) GDPR)
    Technical data (IP, device) For the entire period of activity of the User's account on the Website, Mobile Application + 2 years after its cessation Legitimate interest of the Administrator - ensuring security (Art. 6(1)(f) GDPR)
    Improving the quality of the service and user experience For the duration of the analysis of user activity or until you express an effective objection Legitimate interest of the administrator (Article 6(1)(f) GDPR) consisting in conducting analyses of User activity on the Website, Mobile Application, as well as User preferences in order to improve the functionalities used
    Development of new functionalities For the period of active use or until you delete your account from the Website, Mobile Application or until you express an effective objection Legitimate interest of the controller (Article 6(1)(f) GDPR) to develop and improve the services provided
    Satisfaction survey For the period of active use or until you delete your account from the Website, Mobile Application or until you express an effective objection The legitimate interest of the controller (Article 6(1)(f) GDPR) to improve the quality of the services provided
    Data processed on the basis of consent Until consent is withdrawn User consent (art. 6(1)(a) GDPR)
    Sending direct marketing messages via email, push notifications Until you withdraw your consent to receive communications or information (under the provisions of the Electronic Services Act or telecommunications law) In relation to your consent to a particular marketing communication channel
    To enable you to participate in a competition or promotional action (which are not in the nature of a public promise) Until the end of the competition or promotional action Necessity of the processing for the performance of the contract (Article 6(1)(b) GDPR)
    To enable participation in a competition or promotional action (which are in the nature of a public promise) Until the end of the competition or promotional action Legitimate interest of the controller (Article 6(1)(f) GDPR) to fulfil obligations arising from making a public promise, organising competitions or similar actions
    Fulfilment of tax, legal and accounting obligations 6 years or for the period specified in mandatory legal provisions Legal obligation (Art. 6(1)(c) GDPR)
  3. The data retention period may be extended if the processing is necessary for the establishment, exercise or defence of legal claims for the duration of the limitation period of such claims, as well as for the duration of any judicial, administrative or enforcement proceedings. After that time, data may be retained only if and to the extent required by applicable law.

Supervisory authority

If you have any objections to the way we process your personal data, please contact us first. You are also entitled to make a complaint to the supervisory authority:

Urząd Ochrony Danych Osobowych (Personal Data Protection Office)
ul. Stawki 2
00-193 Warszawa
Website: https://www.uodo.gov.pl/

Changes to the Privacy Policy

The Service Provider reserves a right to make changes to this Privacy Policy, in compliance with the relevant legal regulations. The valid version of the Privacy Policy will be available on the following web page: https://es.etutor.eu/regulamin/polityka-prywatnosci/.


Privacy Policy updated on: 9 July 2025.