Privacy Policy
1. Data controller
The controller of personal data is STI sp. z o.o., ul. Nowogrodzka 64/43, 02-014 Warsaw, Poland, Tax ID (NIP) 5213733858, REGON 364388284, KRS 0000906349 (the "Controller").
For matters concerning personal data, contact us at rodo@executive.academy. For general matters, write to office@executive.academy.
2. What data we process and for what purpose
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Handling email and phone inquiries | Name, email address, phone number, message content | Art. 6(1)(f) (legitimate interest — handling the inquiry) |
| Scheduling meetings via Microsoft Bookings or Google Calendar | Data provided when booking, including name, email address, meeting time, and information shared voluntarily | Art. 6(1)(f) (organizing and running the meeting) |
| Newsletter (once launched) | Name and email address | Art. 6(1)(a) (voluntary consent) |
| Site statistics and analytics (Google Analytics) | Website usage data (analytics cookies) | Art. 6(1)(a) (consent given in the cookie banner) |
| Marketing and remarketing (once tools are enabled) | Marketing cookie identifiers | Art. 6(1)(a) (consent given in the cookie banner) |
| Security and server logs | IP address, date and type of request (hosting logs) | Art. 6(1)(f) (legitimate interest — security) |
3. Recipients of data and processors
Data may be shared with technical and business service providers only to the extent needed for the given service to operate. Not every provider listed below is active at all times.
- Tiiny — website hosting and related technical logs;
- OVH — domain management;
- Microsoft — Microsoft 365, email, and Microsoft Bookings;
- Google — Google Fonts and Google Analytics, and, once enabled, also Google Ads, Google Workspace, Gemini, and Google Calendar;
- MailerLite — newsletter, once launched;
- Meta — Meta Pixel and remarketing, once enabled;
- Hotjar — on-site behavior analytics, once enabled;
- OpenAI, Anthropic, and Microsoft — AI tools, as described in section 7;
- providers of embedded video content (YouTube / Vimeo) and the chat provider — once these features are enabled;
- accounting office and advisors (for accounting and legal duties)
Analytics, marketing, and functional tools are activated only after you give the relevant consent in the cookie banner.
4. Google Fonts and transfers outside the EEA
The site uses Google Fonts loaded from Google's servers, which may involve transferring your IP address to Google. When using services from providers such as Microsoft, Google, MailerLite, Meta, Hotjar, OpenAI, and Anthropic, data may be transferred outside the European Economic Area, in particular to the United States. Such transfers take place under the mechanisms provided for in the GDPR, including adequacy decisions, standard contractual clauses, or other appropriate safeguards.
5. Retention period
- Correspondence — until the matter is closed and for the statute-of-limitations period for any related claims.
- Meeting-booking data — for as long as needed to organize the meeting and any follow-up correspondence, and for the statute-of-limitations period for any related claims.
- Newsletter data — until consent is withdrawn.
- Data processed via cookie tools — until consent is withdrawn or the given cookie expires.
6. Your rights
You have the right to: access your data, rectify it, erase it, restrict its processing, transfer it, object to its processing, and withdraw consent at any time (without affecting the lawfulness of processing carried out before the withdrawal).
You also have the right to lodge a complaint with the supervisory authority — the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, PUODO), ul. Stawki 2, 00-193 Warsaw, Poland.
For data-related matters, write to: rodo@executive.academy.
7. Artificial intelligence tools
To deliver services, analyze inquiries, prepare materials, and streamline communication, the Controller may use AI tools provided by Microsoft, Google, OpenAI, and Anthropic. Data is shared with a given tool only when needed for a specific purpose and only to the extent necessary to achieve it.
The Controller does not use AI tools to make automated decisions about Users that produce legal effects or similarly significant effects. Special-category data is not shared with AI tools without an appropriate legal basis.
8. Cookies
Detailed information about cookies, their categories, and how to manage consent can be found in the Cookie Policy. You can change your choice at any time via the "Cookie settings" link in the site footer.
9. Changes to this policy
This policy may be updated as the site evolves, in particular before a new tool, integration, or service is launched. The current version is always available at this address.