Privacy Policy

How CEMBA Alumni & Student Association collects and processes personal data on this website.

Last updated: 3 March 2026

This Privacy Policy explains how STOWARZYSZENIE ABSOLWENTÓW KANADYJSKIEGO PROGRAMU EXECUTIVE MBA (the "Association", "we", "us") collects and processes personal data when you use our website (the "Website").


We care about privacy and process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Polish law.

1. Data Controller (who is responsible)

The controller of your personal data is:


STOWARZYSZENIE ABSOLWENTÓW KANADYJSKIEGO PROGRAMU EXECUTIVE MBA

KRS: 0000223207

NIP: 5213408058

REGON: 140569869

Registered address: Stefana Batorego 8, Building S, Room 2.06, 02-591 Warszawa, Poland


Contact for privacy matters: office@alumni.cemba.pl

2. What this policy covers

This policy applies to the Website (informational site, contact forms, membership inquiry forms, newsletter sign-up, and embedded content, if any).


If you use the Association's mobile app, it may have additional features and separate privacy details. Where relevant, we may provide app-specific notices in the app itself.

3. What data we collect

Depending on how you interact with the Website, we may process:


A) Data you provide directly

  • Contact form: name, email address, message content
  • Membership inquiry form: full name, email, optional phone number, cohort year, optional message, consent confirmation
  • Newsletter subscription (if enabled): email address (and optionally name)
  • Any other information you choose to send us via forms or email

    • B) Automatically collected technical data

    When you visit the Website, our systems may collect:

  • IP address (often in shortened/anonymized form, depending on configuration)
  • device type, browser type, operating system
  • approximate location inferred from IP (city/region level)
  • pages viewed, time spent, referrer URL
  • cookie identifiers (if cookies are enabled)

    • 4. Why we process your data (purposes)

    We process your data to:

  • respond to your messages and inquiries
  • manage membership inquiries and contact you about next steps
  • send newsletters or updates (if you opt in)
  • publish and manage public information about events/news (non-personal content)
  • maintain website security, prevent abuse, and troubleshoot issues
  • improve the Website and its content based on qualitative feedback and operational needs

    • 5. Legal bases for processing (GDPR)

    We process personal data based on one or more of the following legal grounds:

  • Consent (Art. 6(1)(a)) when you subscribe to a newsletter, check a consent box, or voluntarily submit certain information
  • Legitimate interests (Art. 6(1)(f)) to respond to inquiries, operate the Website securely, prevent fraud/abuse, and improve the Website
  • Contract / pre-contract steps (Art. 6(1)(b)) if your inquiry relates to joining or participating in Association activities and we need data to take steps at your request
  • Legal obligation (Art. 6(1)(c)) if we must keep specific records due to legal requirements

    • 6. Cookies and similar technologies

    The Website may use cookies and similar technologies to ensure proper functioning and security.


    We currently do not use analytics tools on this Website and we do not use cookies for advertising.


    You can manage cookies through your browser settings (block or delete cookies). Blocking some cookies may affect how the Website functions.

    7. Who we share data with (processors)

    We do not sell your personal data.


    We may share personal data only when necessary with trusted service providers who help us operate the Website and communications (acting as "processors"), such as:

  • website hosting / infrastructure providers
  • email providers used to receive and respond to messages
  • form handling or database tools used to store inquiries (if applicable)

    • These providers are permitted to process data only on our instructions and must protect it.

    8. International transfers (outside the EEA)

    Some service providers may store or process data outside the European Economic Area (EEA). If transfers occur, we will ensure appropriate safeguards (e.g., EU Standard Contractual Clauses) where required by law.

    9. How long we keep data (retention)

    We keep personal data only as long as necessary for the purposes described:

  • Contact inquiries: typically up to 24 months after last contact, unless longer retention is required for legal claims
  • Membership inquiries: typically up to 24 months, unless you become a member (then relevant data may be retained for membership management)
  • Newsletter subscriptions: until you unsubscribe (and then we keep minimal suppression records to respect your choice)
  • Security logs: typically up to 12 months, unless needed longer for security investigations

    • Retention may vary depending on operational needs and legal obligations.

    10. Your rights under GDPR

    You have the right to:

  • access your personal data
  • correct inaccurate data
  • request deletion ("right to be forgotten")
  • restrict processing
  • object to processing based on legitimate interests
  • data portability (where applicable)
  • withdraw consent at any time (where processing is based on consent)

    • To exercise your rights, contact us at: office@alumni.cemba.pl

    11. Complaints

    If you believe your data is processed unlawfully, you can lodge a complaint with the supervisory authority. In Poland, this is: President of the Personal Data Protection Office (UODO).


    We recommend contacting us first so we can try to resolve it quickly.

    12. Security

    We take reasonable technical and organizational measures to protect personal data from unauthorized access, loss, or misuse. However, no system is 100% secure, and we cannot guarantee absolute security.

    13. Children

    The Website is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will take appropriate steps.

    14. Changes to this policy

    We may update this Privacy Policy from time to time. The "Last updated" date will reflect the latest version. Significant changes may be communicated on the Website.

    15. Contact

    For privacy-related questions or requests, contact:


    STOWARZYSZENIE ABSOLWENTÓW KANADYJSKIEGO PROGRAMU EXECUTIVE MBA

    Stefana Batorego 8, Building S, Room 2.06, 02-591 Warszawa, Poland

    Email: office@alumni.cemba.pl