Privacy Policy

version 3.0 of 23 June 2026

This Privacy Policy describes the rules for processing personal data in connection with the use of the Website available at www.siliusforum.com and in connection with contact and cooperation with the Controller. It is informational in nature and does not constitute a source of obligations for Visitors.

Capitalised terms (in particular the Website, User, Visitor) have the meanings assigned to them in the Website Terms and Conditions. The rules for the use of cookies are set out in the Cookie Policy.

In the event of any discrepancy between this Privacy Policy and the consents to the processing of personal data granted by a natural person, the legal basis for determining the scope of the Controller’s actions shall be the consents freely given or the provisions of law applicable to the given factual situation.

§ 1 Personal Data Controller

1.The personal data controller is Jolanta Kuruc, conducting business activity under the name Silius Forum Jolanta Kuruc, ul. Działkowa 90, 59-220 Legnica, Poland, NIP (Tax Identification Number): 6911525443, REGON (statistical number): 369918835 (hereinafter: the “Controller”).

2.The Controller may be contacted on all matters concerning the protection of personal data at the e-mail address: office@siliusforum.com.

3.The Controller informs that it retains correspondence for statistical purposes and in order to improve its system of assistance with regard to the GDPR, as well as in respect of the handling of complaints and any decisions on administrative interventions taken on the basis of reports in the matters indicated. Addresses and data collected in this way will not be used for communication for any purpose other than handling the request and, in particular, will not be used for marketing purposes or disclosed to third parties.

4.Where the Controller is contacted in order to carry out specific actions, the Controller may again ask the person concerned to provide data, including personal data, for example in the form of first name, surname, residential address and e-mail address, in order to confirm their identity, enable a reply in the given matter and perform the requested action. Providing such data is not obligatory but may be necessary to perform the action or obtain the information of interest to the person concerned.

§ 2 General Principles of Processing

1.The Controller processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: the “GDPR”), and other applicable personal data protection legislation.

2.In accordance with the aforementioned legislation, personal data means information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a first name and surname, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

3.The Controller ensures that the data obtained from you is kept confidential and secure and is processed only where this is necessary. Data is processed lawfully, fairly and in a transparent manner, to the extent necessary to achieve the purpose, while maintaining confidentiality and appropriate security measures.

4.Providing data is voluntary but, in certain cases, necessary — for example, to respond to an enquiry or to consider an application to the Mentoring Programme or a consultation request.

5.In each case, the scope of data required to conclude the relevant agreement is indicated in advance on the Website (we mark the data whose provision is necessary to conclude the agreement / use a given functionality). A consequence of failing to provide personal data may be the inability to effectively use the functionality of the Website.

§ 3 Purposes and Legal Bases of Processing

The Controller processes personal data for the following purposes and on the following legal bases:

1.Handling enquiries and correspondence sent via the contact form or by e-mail — in order to provide a response and conduct correspondence; legal basis: Article 6(1)(b) GDPR (steps taken at the data subject’s request) and Article 6(1)(f) GDPR (legitimate interest: communication, archiving, accountability).

2.Handling applications to the Mentoring Programme and consultation requests — in order to carry out the qualification process and to conclude and perform the agreement; legal basis: Article 6(1)(b) GDPR and, with regard to legal obligations (tax and accounting), Article 6(1)(c) GDPR.

3.Creating and maintaining an individual account in the Microsoft 365 environment and providing the Participant with an e-mail address in the siliusforum.com domain for the duration of the Mentoring Programme — in order to perform the agreement on participation in the Programme; legal basis: Article 6(1)(b) GDPR.

4.Ensuring the security of the Website, documenting the course of cooperation, and establishing, pursuing or defending claims — legal basis: Article 6(1)(f) GDPR.

5.Statistical purposes and improving the quality of service and the system of providing assistance with regard to personal data protection — based on the analysis of retained correspondence; legal basis: Article 6(1)(f) GDPR (legitimate interest of the Controller).

6.The Controller does not carry out marketing activities, does not send a newsletter or commercial information, and does not use personal data for profiling.

§ 4 Categories of Personal Data

1.The personal data controller may process the following categories of personal data:

a.Contact and identification data provided in correspondence or in the form — in particular first name and surname, e-mail address and telephone number.

b.The content of the enquiry, application to the Mentoring Programme or consultation request — including a written description of the issue, contextual data and the position held — as well as further correspondence.

c.Data relating to the individual account created in the Microsoft 365 environment for the purpose of participation in the Mentoring Programme, including the assigned e-mail address in the siliusforum.com domain and login credentials.

d.Technical data relating to the use of the Website, including data collected in server logs (e.g. IP address) and through necessary and functional cookies and similar technologies — in accordance with the Cookie Policy.

§ 5 Data Recipients and External Tools

1.Personal data may be entrusted to entities processing it on the basis of data processing agreements and disclosed to public authorities where this results from the provisions of law.

2.In connection with operating the Website and carrying out cooperation, the Controller uses external tools and platforms, in particular:

•the provider of hosting and maintenance of the Website — SEOHOST.pl / SEOHOST sp. z o.o. with its registered office in Poznań, entered in the National Court Register (KRS) under number 0000939910, NIP: 9721323212, REGON: 520718284 (the Website is based on the WordPress system; a data processing agreement has been concluded);

•Microsoft 365 and Microsoft Copilot — for the organisation of work, communication and documentation, including making backups in the OneDrive service. This service is provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, which has obtained positive verification and entry on the Data Privacy Framework list;

•Google (Google Fonts) — fonts are loaded remotely, which involves transferring the User’s IP address to Google in order to display the Website correctly. This mechanism does not set cookies. This technology is provided by Google Ireland Limited (registered under number 368047), with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland;

•WhatsApp — as an auxiliary (emergency) contact channel, provided by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, registered in Ireland under number 607470, VAT identification number: IE 3480619JH;

•other service providers supporting the Controller in technical, organisational, legal or accounting matters — solely to the extent necessary to provide those services.

3.Backups of the Website are made using the UpdraftPlus plugin and stored on the hosting server (SEOHOST.pl) and in the OneDrive service (Microsoft).

4.Some tool providers may process data outside the European Economic Area — in such cases, the transfer takes place using the appropriate safeguards provided for in the GDPR.

§ 6 Data Retention Period

1.Correspondence and data from enquiries — for the period necessary to handle the matter and thereafter for archiving and accountability purposes, no longer than 3 years, unless a longer period results from the provisions of law or from the need to establish, pursue or defend claims.

2.Data relating to the application and performance of the Mentoring Programme or consultation — for the duration of the cooperation and thereafter for the period required by law (in particular tax and accounting law) and for the limitation period for claims.

3.The individual account in the Microsoft 365 environment and the assigned e-mail address in the siliusforum.com domain are deleted after the end of participation in the Mentoring Programme.

§ 7 Rights of Data Subjects

1.In accordance with Article 15 GDPR, you have the right to obtain from the Controller information as to whether your personal data is being processed.

2.If the Controller processes your personal data, you have the right to:

a.access to your personal data;

b.obtain information about the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of the data, the envisaged period for which your data will be stored or the criteria used to determine that period, the rights available to you under the GDPR and the right to lodge a complaint with the supervisory authority, the source of the data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of such data outside the European Union;

c.obtain a copy of your personal data.

3.In addition, you may request the rectification of personal data (Article 16 GDPR), the erasure of personal data (Article 17 GDPR), object to the processing of personal data (Article 21 GDPR) and, where technically feasible, request the transfer of the personal data provided to another organisation (Article 20 GDPR).

4.In connection with the right to be forgotten, the Controller will update or erase your data unless it has a legal obligation to retain it for the purposes of conducting business or maintaining legal compliance. In certain cases, you have the right to request the restriction of the processing of personal data (Article 18 GDPR). You may also contact the Controller if you have any objections as to the manner in which your personal data is collected, stored or used.

5.The Controller endeavours to handle without undue delay any requests concerning the above operations on your personal data, but no later than within 30 days of receiving the request. Owing to the complex nature of a request, the Controller is entitled to handle your request within a period exceeding 30 days, of which it will inform the User in advance.

6.The Controller seeks to resolve complaints definitively, but if you remain dissatisfied with the response received, you may lodge a complaint with the supervisory authority competent for personal data protection matters. In Poland, the supervisory authority within the meaning of the GDPR is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw).

7.To the extent that processing is based on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing carried out before the withdrawal.

8.For matters concerning the exercise of the above rights, please contact the Controller at the e-mail address: office@siliusforum.com.

§ 8 Cookies and Automated Processing

1.The Website uses cookies on the terms set out in the Cookie Policy available on the Website.

2.The Controller does not take, in respect of data subjects, decisions based solely on the automated processing of personal data, including profiling, that would produce legal effects concerning them or similarly significantly affect them.

§ 9 Changes to the Privacy Policy

1.The Controller may update this Privacy Policy, in particular in connection with changes to the Website or to the law. The version published on the Website applies.

2.The Controller informs about changes by publishing the updated Privacy Policy on the Website. Changes take effect on the date of publication, unless another date is indicated.

3.This Privacy Policy applies from 23 June 2026.

4.Previous versions of the Privacy Policy:

•Privacy Policy 1.0 — in force from 22 May 2024 to 1 March 2026.

•Privacy Policy 2.0 — in force from 2 March 2026 to 22 June 2026.