1. Personal Data Controller

The personal data controller is Grzegorz Wieczorek, an individual conducting business activity at the address: Główna 30, 05-806 Nowa Wieś. For questions regarding the processing of personal data, please contact via email: gregoriusevening@gmail.com

2. Scope of Collected Data

The Controller collects the following personal data:

First name,
Email address,
Payment data (processed by Stripe).

3. Purpose and Legal Basis for Data Processing

Personal data is processed for the following purposes:

Order processing and delivery of the “Canva+ Design” course – based on Art. 6(1)(b) GDPR (contract performance).
Contact with the customer in connection with the provision of services – based on Art. 6(1)(b) GDPR (contract performance).
Marketing and promotion of the Controller’s services – based on Art. 6(1)(f) GDPR (legitimate interest of the Controller).

4. Data Retention Period

Personal data is stored for the period required by applicable law and for the time necessary to achieve the processing purposes. In the case of data processed based on consent – until its withdrawal.

5. Data Recipients

The Controller may share personal data with the following third parties:

Stripe – for payment processing.
MailerLite – for sending newsletters and other marketing materials.
LearnDash – for providing online course services. Personal data is not transferred outside the European Economic Area (EEA).

6. User Rights

Each person whose data is processed has the right to:

Access their personal data.
Rectify their data.
Erase data (“right to be forgotten”).
Restrict data processing.
Object to data processing.
Data portability. To exercise these rights, please contact the Controller at email: gregoriusevening@gmail.com

7. Cookies

The Controller uses cookies on its website for the following purposes:

Analysis of website traffic (e.g., using Google Analytics).
Content personalization. Each user can manage cookie settings in their browser.

8. Return Policy

The return policy is available at: https://canvakurs.pl/en/return-policy/

9. Data Security

The Controller implements appropriate technical and organizational measures to ensure the security of processed personal data.

10. Final Provisions

This Privacy Policy enters into force on the date of its publication. Any changes to the content of the document will be published on the Controller’s website.

Last updated: November 12, 2025