Protecting Users’ privacy is particularly important to Already Now Sp. z o.o. For this reason, Users of the www.aniaschmidt.com website (the “Website”) are guaranteed high standards of privacy protection. Already Now Sp. z o.o., as the data controller, safeguards the security of data provided by Users.

The Controller’s aim is also to properly inform Users about their rights and obligations related to the processing of personal data, especially in light of the provisions of personal data protection set out in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “GDPR”). Therefore, to protect the privacy of Users of the Website, this document explains the legal bases for processing personal data provided by Users in connection with their use of www.aniaschmidt.com (the “Website”), the methods of collecting, processing, and protecting personal data, and Users’ rights.

A User is any natural person whose data are processed who uses the www.aniaschmidt.com website or electronic services available through the Website.

The Controller of personal data provided by the User on the www.aniaschmidt.com Website is Already Now Sp. z o.o., Warsaw, NIP (Tax ID): 7792567512 (the “Controller”).

User Consent

Using the www.aniaschmidt.com Website by the User means the User accepts that the Controller collects and uses personal data in accordance with this Privacy Policy. Personal data of Website Users are processed by the Controller on the basis of the User’s consent and, in certain cases described herein, under the Controller’s legitimate interests. The User has the right to withdraw previously given consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. If this Privacy Policy changes and the User continues to use the Website, such continued use will be deemed consent to the current conditions of the Privacy Policy.

Personal Data Processed by the Controller

How personal data are obtained

The Controller obtains personal data directly from the User via the Website, through available features and communication tools, and by the User sending messages to the Controller via those tools. Providing personal data by the User is voluntary.

Types of personal data processed

• First and last name

• Email address

• Phone number

• Address

• Message content

• Message subject

• Company name

• Tax ID (NIP)

Purposes of processing personal data

How the Controller processes the User’s data depends on how the User uses the Website and its features. The Controller processes the User’s personal data for the following purposes:

• Communication with the User. The Controller uses the User’s personal data to communicate in a personalized manner. Information communicated to the User concerns offered products or services, personal data security, network updates, reminders, as well as suggested offers from the Controller or its partners. Communication also includes customer service. Personal data are used to assist the User, resolve technical issues, and respond to complaints or claims.

• Providing commercial offers by electronic means. Personal data shared via the Website’s communication features are used for the Controller’s marketing communications, in particular to present commercial offers to the User electronically.

• Providing commercial offers by phone. Personal data shared via the Website’s communication features are used for the Controller’s marketing communications, in particular to present commercial offers to the User by phone.

• Sending information electronically under the Controller’s newsletter sign-up. Data provided through the newsletter sign-up form are used to inform the User by email about new products, services, promotions, or events of the Controller or its partners.

• Enabling the User to post comments or reviews. The Controller uses the User’s personal data to allow commenting/reviewing of the Controller’s activities, services, or products, or those of cooperating entities.

The Controller may also process personal data obtained via the Website for the following purposes:

• To conclude and perform a potential contract between the User and the Controller and to serve the User as a customer, under Article 6(1)(b) GDPR.

• For financial settlements with a User who is a customer of the Controller, arising from a potential contract between the parties, as well as for potential claims against such User under the Controller’s legitimate interests pursuant to Article 6(1)(f) GDPR, and to fulfill the Controller’s legal obligations toward tax authorities under separate provisions, pursuant to Article 6(1)(c) GDPR.

• To carry out the Controller’s marketing activities under the Controller’s legitimate interests within the meaning of Article 6(1)(f) GDPR, and in accordance with the declarations of will regarding marketing communications made to the Controller. Consents granted for marketing communications (e.g., to send commercial information electronically or to contact by phone for direct marketing) may be withdrawn at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

• To fulfill the Controller’s legal obligations toward the User as specified in the GDPR, under Article 6(1)(c) GDPR.

Disclosure of Personal Data

The User’s personal data are or may be disclosed to the following categories of recipients:

• Entities cooperating in the provision of services.

User Rights

At every stage of processing, the User enjoys a range of rights enabling access to their data, verification of processing accuracy, correction, as well as the right to object to processing. The User may request deletion of data, restriction of processing, or data portability. To exercise these rights, the User may contact the Controller at: Already Now Sp. z o.o., Rondo ONZ 1, 00-124 Warsaw, anna@careerpartnersinstitute.com.

Right to lodge a complaint with a supervisory authority

A User whose personal data are processed by the Controller has the right to lodge a complaint with the supervisory authority competent for personal data protection matters (the President of the Personal Data Protection Office in Poland).

Cookies

The Controller informs that, while using the Website, fragments of code called “cookies” are saved on the User’s end device. These are text files corresponding to HTTP requests addressed to the Controller’s server. Cookies are installed by every browser used to visit the Website. Cookies are used on the Website to:

• maintain the technical correctness and continuity of the session between the Website’s server and the User’s device;

• optimize the User’s use of the Website and adjust how pages are displayed on the User’s device;

• ensure secure use of the Website;

• collect visitor statistics to help improve the structure and content of the pages;

• display content tailored to the User’s preferences on the User’s device.

Detailed information about the cookies used by the Controller and how to manage them is available in the Cookies Policy.

Other Important Information

Protection of personal data security

The Controller implements appropriate measures to ensure the security of the User’s personal data. Secure use of the Website is ensured by systems and procedures that protect against access and disclosure to unauthorized persons. The systems and processes used by the Controller are regularly monitored to detect potential threats. Personal data obtained by the Controller are stored in computer systems with strictly limited access.

Storage of personal data

The retention period for Users’ personal data depends on the purposes for which the Controller processes the data. The Controller stores personal data for as long as is necessary to achieve specified purposes, i.e.:

• for the duration of the Controller’s business operations.

In each of the above cases, after the necessary processing period ends, data may be processed solely for the purpose of pursuing claims arising from the relationship between the parties, until such claims are finally resolved through legal means.

Changes to the Privacy Policy

To keep the information in this Privacy Policy up to date and compliant with applicable law, this Privacy Policy may change. If the content of the Privacy Policy changes, the date of its update indicated at the end will be modified accordingly. To stay informed about how personal data are protected, the Controller recommends that Users regularly review the provisions of this Privacy Policy.

Contact Information

For any information concerning this Privacy Policy, the User may contact the data controller: Already Now Sp. z o.o., Rondo ONZ 1, 00-124 Warsaw; email: anna@careerpartnersinstitute.com. It is also possible to contact us by post at: Already Now Sp. z o.o., Rondo ONZ 1, 00-124 Warsaw.

Last updated: 17 March 2025.