Privacy policy

Data controller

The controller is Dawid Hamera, sole trader operating as Dawid Hamera Educational Services, ul. Stefana Lewandowskiego 32A/17, 70-237 Szczecin, Poland, tax ID (NIP) 8513238923. For any data matter, contact kontakt@korepetytorhamera.pl.

What data we process

Account and contact data (name, email, login data handled by the authentication provider); billing and invoice data (card data is handled only by the payment provider, not stored by us); course usage data (chosen course and group, progress, submitted work, grades and feedback, attendance); recordings of live sessions (image and voice of participants who keep camera or microphone on; you may join with both off); and technical data (IP, device and browser data, logs and error information for security and proper operation).

Purposes and legal bases (GDPR)

Concluding and performing the contract, including running the account and course (Art. 6(1)(b)); issuing and storing invoices and meeting tax obligations (Art. 6(1)(c)); recording live sessions and sharing them within the group, and ensuring security and pursuing or defending claims, based on legitimate interest (Art. 6(1)(f)); and non- transactional messages such as marketing only with your consent (Art. 6(1)(a)), which you can withdraw at any time.

Students under 18

For minors, the account and contract are handled by a parent or legal guardian, who gives any required consent for a student under 16. Students' data is processed only to deliver the course and is not used for marketing.

Processors and recipients

We use trusted providers acting on our instructions: Clerk (authentication, USA), Supabase (database and file hosting, EU region, Frankfurt), Stripe (payments, Ireland and USA), inFakt (invoicing, Poland), Resend (email, EU region), Zoom (live sessions and recordings, USA), Vimeo (video hosting, USA), Cloudflare (DNS and CDN, USA), Vercel (app hosting, USA) and Sentry (error monitoring, USA). Session recordings are shared only with the relevant group.

Transfers outside the EEA

Some providers are outside the European Economic Area, in particular in the USA. Such transfers rely on appropriate safeguards, in particular the European Commission's standard contractual clauses or the provider's participation in the Data Privacy Framework.

Retention

Account data is kept while the account exists and as needed to finish contracts; invoice data for the period required by tax law (generally 5 years from the end of the relevant year); student work and progress for the course and a reasonable period after; recordings for the course and deleted after it ends, at the latest after the school year, unless needed to defend claims.

Your rights

You have the right to access, rectify, erase, restrict and port your data, to object to processing based on legitimate interest, and to withdraw consent at any time. Contact kontakt@korepetytorhamera.pl. You may also lodge a complaint with the Polish data protection authority (Prezes Urzedu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa).

Cookies

We use only cookies strictly necessary for the site to work (authentication session and the video player in the student panel). We do not use marketing, profiling or analytics cookies, so no cookie banner or separate consent is needed. Payment cookies are set only on the payment provider's domain.