Open training rules

§ 1.
Definitions

1. Regulations – these Training Regulations.
2. Organiser – the organiser of open training sessions, including examinations (hereinafter: “Training”, “Workshops” or “Open Training”) in the field of personal data protection is ODO 24 sp. z o.o. with its registered office in Warsaw at Kamionkowska 45, 03-812 Warsaw, entered in the Register of Entrepreneurs maintained by the District Court for the capital city of Warsaw in Warsaw, 14th Commercial Division of the National Court Register under KRS number 0000434350, VAT ID (NIP) 7010353442, REGON 146289510, with share capital of PLN 50,000.00.
3. Participant – a natural person interested in participating in open training or taking part in open training who enters into or intends to enter into an agreement with the Organiser for the provision of services including conducting training, or who has been registered for training by the Entity Registering the Participant.
4. Entity Registering the Participant – an entity that has concluded or intends to conclude an agreement with the Organiser for the provision of services including conducting training for Participants.
5. Consumer – a Participant or Entity Registering the Participant who is a natural person who enters into or intends to enter into an agreement with the Organiser for the provision of services including conducting training, where such training is not directly related to their business or professional activity.
6. Controller – the controller of Participants’ personal data in connection with training is the Organiser. The privacy policy forms § 9 of these Regulations.
7. GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
8. DPO – Data Protection Officer within the meaning of Articles 37–39 of the GDPR.

§ 2.
General provisions

1. The Organiser declares that it runs open training courses in the field of:personal data protection and information security, including:
   1. Practical DPO course (32h).
   2. GDPR Fundamentals (8h)
   3. DPO in practice (8h).
   4. DPIA and risk analysis (8 hours).
   5. GDPR in HR (7h).
   6. GDPR in IT (8h).
   7. Risk Analysis Academy (11h30min + 2h consultations).
   8. Other open training courses when their delivery is announced on the the Organiser’s website (ODO24.pl) in the “Training” tab.
2. The Organiser delivers open training within the scope, dates, remotely or on-site at locations described in detail on the the Organiser’s website (ODO24.pl) in the “Training” tab.
3. The Organiser declares that it has the knowledge and experience allowing it to conduct training in the scope described in paragraph 1; and2 above.
4. Participation in training conducted by the Organiser does not constitute a mandatory requirement for performing the role of DPO.
5. Participation in training is intended for anyone seeking to gain or expand professional knowledge on the law and practice in the field of data protection and acquiring or expanding the skills required to perform DPO tasks arisingwith GDPR.

§ 3.
Training Participation Conditions

1. A condition for participation in training is registration of the Participant by completing an online registration form or a written form available on the Organiser’s websitecomes from public funds.
2. The Organiser’s website (ODO24.pl) provides current information aboutabout promotions and discounts applicable to training courses offered. trainings.
3. VAT exemption applies when at least 70% of the funds used to pay for the training, workshop or coursethe funds from which the training, workshop or course is paid comes from public funds – in such a case the Participant or Entity Registering the Participant who makes the payment is obliged to submit an appropriate declaration and send it to the Organiser’s e-mail address as a scan of the completed form together with a stamp bearing the Participant’s or Entity Registering the Participant’s contract. A template declaration form will be sent after completing the online registration form referred to in the preceding paragraph.
4. Payment for training, workshops and courses must be made to theOrganiser’s bank account number: 29 1020 1127 0000 1102 0465 7567 at Bank Handlowy w Warszawie S.A., no later than 2 (two) businessbusiness days before the scheduled training date. The date of performance of the service is deemed to be the date on which the Organiser’s bank account is creditedthe Organiser.
5. Payment made at least 14 (fourteen) days before the scheduled training date, according to the choice available on the Organiser’s website (ODO24.pl) whenbefore the scheduled training date entitles the Participant to receive a discount or a free book, according toregistering the Participant for the specific training, entitles the Participant to receive a discount or a free book.registration of the Participant for the specific training.
6. The transfer title must include the proforma invoice number and the Participant’s surname. For on-site training, instead of the proforma invoice number, you may indicate the city where thetraining.
7. Subject to paragraph 8 below, if payment is not made within the deadline referred to in paragraph 4 of this section, it is considered that the Participant or the Entity Registering the Participant has withdrawn from the training under the rules set out in §6(2) of thesethese Regulations.
8. If the amount due for participation in the training is not received within the deadline specified in these Regulations, and the Participant or Entity Registering the Participant declares that payment has been made, the Organiser may agree to allow the Participant to take part in the training after prior submission of confirmation ofpayment by bank transfer to the Organiser’s e-mail address ([email protected]).

§ 4.
Training

The training fee includes:

1. participation in the training,
2. training materials – in electronic or paper form, depending on the choice made when registering for thespecific training,
3. certificate of participation in the training, workshop or course – in electronic or paper form, depending on the form of training materials chosen, as described above,
4. GDPR documentation templates in electronic form – within the scope depending on the type of training selected, as indicatedon the Organiser’s website (ODO24.pl) in the description of the specific type offor the training under the link “See full list of documents”,
5. practical information enabling free use of the ODO Nawigator tool, which is used for efficient management of thepersonal data protection system (application available viathe Internet),
6. for training delivered on-site, alsocatering.

§ 5.
Cancellation and change of training venue by the Organiser

1. The Organiser reserves the right to cancel training up to 2 business days before the scheduled start date of the training, in particular where the minimum number of 8 Participants is not reached or due to unforeseen events or other events beyond the Organiser’s control.
2. If training is cancelled, payments made for participation shall be refunded in full to the bank accounts from which they were paid within 7 business days of the date of cancellation of the training, unless the Organiser agrees another refund date with the party that concluded the agreement – the Participant or Entity Registering the Participant. registering the Participant.
3. If the course is delivered on-site, the Organiser reserves the right to change the training venue within the locality where the training takes place, no later than 2 business days before the scheduled start date of the training.
4. In the case referred to in paragraph 3 above, information about a change of training venue or cancellation will be sent to the e-mail address provided in the form or communicated by the Organiser by telephone to the Participant or a person representing the Entity Registering the Participant who completed the online registration form.online registration form.

§ 6.
Withdrawal from training by the participant

1. The Participant and the Entity Registering the Participant have the right to withdraw from participation in training, subject to the provisions of paragraphs 2 and 3 of this section.
2. Withdrawal from participation in training without incurring costsmay only take place by e-mail (e-mail: [email protected]);the withdrawal notice must reach the Organiser’s mailbox no later than 2 business days before the scheduled start date of the training. Where the agreement with the Organiser is concluded by the Entity Registering the Participant, withdrawal may only be made by the Entity Registering the Participant. In the case of the training referred to in §2 para. 1 point h) (Risk Analysis Academy), cancellation without incurring costs must take place no later than 5 business days before the planned first meeting (“Step 1”), and in the case of later cancellation, the relevant rules on cost reimbursement and damage repair referred to in para. 3 and 4 below shall apply accordingly.
3. Withdrawal from participation less than 2 business days before the scheduled start date results in a charge to the contracting party – the Participant or Entity Registering the Participant – of50% of the gross costs of participation, where the contracting party is not a Consumer.Where the contracting party is a Participant or Entity Registering the Participant who is not a Consumer.
4. Where the contracting party – the Participant or Entity Registering the Participant – is a Consumer; withdrawal referred to in the preceding sentence may result in a charge on the general rules applicable to the contracting party – the Participant or Entity Registering the Participant, in an amount related to the withdrawal, reflecting the actual loss incurred by the Organiser.

§ 7.
Licence

1. The Organiser grants the Participant or the Entity Registering the Participant a free non-exclusive licence touse all documents/materials provided to theParticipant during open training to which the Organiser holds copyright to the extent necessary the Organiser holds copyright to the extent necessary to fulfil its obligations under applicable personal data protection law, in the fields of exploitation specified below. The licence referred to in the preceding sentence is granted without territorial or time limits from the date on which a document or material constituting a work was first made available, within the meaning of the Act of 4 February 1994 on copyright and related rights (i.e. Journal of Laws 2022, item 2509, as amended), regardless of the form of itsof 4 February 1994 on copyright and related rights (i.e.Journal of Laws 2022, item 2509, as amended), regardless of the form of itsfixation.
2. The licence referred to above covers the following fields ofexploitation:
   1. in the field of fixation and reproduction of the work – making copies of the work by any technique, including printing and digitally;digitally;
   2. in the field of dissemination of the work – display, performance and making the work available so that anyone may access it at a place and time of their choice (including introduction into the memory ofcomputers of the Participant, Entity Registering the Participant and their internalnetworks);networks);
   3. making modifications and other derivative works of the work and using and disposing of such modifications and derivative works in the fields of exploitation specified above.

§ 8.
Complaints

1. A party to the agreement – the Participant or Entity Registering the Participant – is entitled to lodge a complaint regarding the course or quality of the training. Where the Participant or Entity Registering the Participant who concluded the agreement with the Organiser is not a Consumer, a complaint may be lodged within 7 days of the date on which the training took place.
2. Complaints may be submitted in writing to the Organiser’s address or electronically by e-mail to the Organiser’s e-mail addressat [email protected]. It is recommended that the complaint include information and circumstances concerning the subject of therequest and the complainant’s contact details.complaint.
3. The Organiser handles complaints without delay, no later than within 14 days of receipt. If a complaint cannot be resolved within that period, the Organiser will, within that period, notify the complainant in writing of the reasons for the delay and the expected date for considering the complaint.

§ 9.
Privacy policy

1. In accordance with Article 13(1) and Article 14(1) of the GDPR, we inform you thatthe controller of your personal data is ODO 24 sp. z o.o.,with its registered office at Kamionkowska 45, 03-812 Warsaw. For matters related to personal data protection, in particular exercising yourrights, we encourage you to contact us at [email protected] or in writing at the controller’s registered office.at the controller’s registered office address.
2. Your personal data will be processed within the scope you provide via registration forms and otherODO 24 contact forms for the purpose of providing services related to delivering training on the basis of Article 6(1)lit. b GDPR (activities necessary to perform the contract to whichyou are the data subject or to take steps at your request prior to entering into a contract), at the data subject's request prior to entering into a contract), contact with the training participant to provide organisational information about the training, access to the ODO Navigator and post-training materials on the basis of Article 6(1)lit. f GDPR (legitimate interests of the controller), pursuing possible claims against the Participant on thebasis of Article 6(1) lit. f GDPR (legitimate interests of the controller), and conductingmarketing activities (including using electronic communication means) on the basis of Article 6(1) lit. f GDPR (legitimate interests of thecontroller), and conductingmarketing activities (including using electronic communication means) on the basis of Article 6(1) lit. f GDPR (legitimate interests of thecontroller) – where marketing uses a telephone number or e-mail address, the controller will obtain consent for that communication channel in accordance with the Act on Electronic Communications.
3. Your personal data may be disclosed to:
   1. state authorities or other entities authorised under separate provisions,
   2. ODO 24 sp. z o.o. associates implementing the training process, in particular trainers cooperating with ODO 24 sp. z o.o. for the purpose of delivering the training, sp. z o.o. for the purpose of delivering the training,
   3. banks where settlements are necessary,
   4. other external entities supporting ODO 24 sp. z o.o. in IT, accounting or marketing campaigns; such entities will process data on the basis of an agreement with ODO 24 sp. z o.o. and only in accordance with its instructions.
4. Your personal data will be stored in the European Economic Area (EEA); however, due to technologiesused for data processing by Microsoft Ireland Operations Limited, based in Dublin, acting as a processor for ODO 24 sp. z o.o.; your personal data mayfor ODO 24 sp. z o.o., your personal data maybe processed outside the EEA. Under the European Commission decision, recipient countries in the USA provide an adequate level of protection of personal data consistent with EEA standards. The Commission decision concerning the USA covers companies participating in the Data Privacy Framework, including Microsoft. Privacy Framework, including Microsoft.
5. Your personal data will be processed until performance of the contract and thereafter for:
   1. pursuing claims related to performance of the contract (as a rule, for the limitation period for claims arising from the contract),as a rule for up to 6 years from the end of the contract,performance of the contract),
   2. compliance with legal obligations arising from law, including inparticular tax and accounting obligations (as a rule for 5 years from the end of the calendar year in whichthe tax payment deadline expired), the tax payment deadline expired),
   3. data for marketing purposes: until you object, i.e. until you inform us in any way that you do not wish toremain in contact with us or receive information about our activities, or until claims become time-barred. our activities, or until claims become time-barred. time-barred.
6. You have the right to access your data, rectify, erase, restrict processing,data portability, object, and where processing is based on consent, withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. data portability, the right to object, and where you have given additional consent, the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. at any time without affecting the lawfulness of processing based on consent before its withdrawal. which was based on consent before it was withdrawn.
7. If you believe that processing of your personal data infringes the GDPR, you have the rightto lodge a complaint with the President of the Personal Data Protection Office (UODO).
8. Providing personal data in the registration form is a condition for entering into a contract. Without providing personal data, ODO 24 will not be able to provide servicesrelated to delivering the training. personal data, ODO 24 will not be able to provide services related to delivering the training.
9. Your data will not be used for automated decision-making, including profiling, that produceslegal effects concerning you or similarly significantly affects you. automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.legal effects concerning you or similarly significantly affects you.

§ 10.
Final provisions

1. The training participant is not entitled to record image or sound during training unless the Organiser gives prior written consent. prior written consent to record image or sound.
2. The Organiser may contact the Participant or Entity Registering the Participant to confirm receipt of electronic training materials within 6 months of delivering the training. electronic training materials within 6 months of delivering the training.
3. The Participant or entity registering the participant agrees to VAT invoices being issued by the Organiser without the signature of the person authorised to receive VAT invoices. authorised to receive VAT invoices.
4. Where the Participant is not the person completing the online registration form to conclude the agreement, the completing the online registration form to conclude the agreement, the Entity Registering the Participant provides the Organiser with the Participant’s personal data for processing for the purpose of delivering the training to the extent necessary to organise it. In such a case, the Entity Registering the Participant undertakes to inform the Participant on behalf of the Organiser of the information arising from the Participant on behalf of the Organiser of the information arising fromArticle 14 of the GDPR.
5. The training participant must not be under the influence of alcohol or other intoxicating substances, on pain of exclusion from the training on thattraining day.
6. A party to the agreement – the Participant or Entity Registering the Participant – A party to the agreement – the Participant or Entity Registering the Participant – declares that they have read these Regulations and accept their provisions.