CertyfikatB1
Log in

Privacy policy

Version of October 19, 2026

This policy describes what data certyfikatb1.pl processes, for what purpose, and what rights the user has.

  1. §1Data controller

    1. 1.The controller of the personal data of the Service's users is CertyfikatB1 (the Operator). Contact about data: kontakt@certyfikatb1.pl.

  2. §2What data we process

    1. 1.Account data: e-mail address, name or display name, password in encrypted form, date of account creation, profile settings (language, grammatical forms, flashcard direction, level and planned exam date).
    2. 2.Learning data: started and finished tests, answers, results, exercises, flashcards, texts written in the writing exercises and their automatic assessment.
    3. 3.Technical data: IP address and browser information within a sign-in session, and anonymous statistics of visits and page performance.

  3. §3Purposes and legal bases

    1. 1.Providing the service: running the account, saving results and progress, checking tests (performance of a contract, Art. 6(1)(b) GDPR).
    2. 2.Automatic assessment of written texts with a language model of an external provider; only the text of the task is sent, without account data (performance of a contract).
    3. 3.Security, prevention of abuse and aggregated usage statistics (legitimate interest, Art. 6(1)(f) GDPR).
    4. 4.Messages from the Service – about new materials, session dates, changes to the service, and the offer and promotions – are sent on the basis of the consent given when creating the account (Art. 6(1)(a) GDPR); it can be withdrawn at any time with the link in a message or by e-mail to the Operator. Messages needed for the account to work are sent as part of performing the contract.

  4. §4Recipients of data

    1. 1.Data is stored with hosting and database providers in the European Union. Providers outside the EEA are used only under standard contractual clauses or an adequacy decision.
    2. 2.Visit and performance statistics are collected without cookies and without identifying people.
    3. 3.We do not sell user data and do not share it with other parties for marketing purposes.

  5. §5Retention

    1. 1.Account and learning data are kept until the account is deleted. After deletion the data is erased, except data that the law requires us to keep (for example accounting documents).
    2. 2.Sign-in sessions expire after 30 days at the latest.

  6. §6Your rights

    1. 1.You have the right to access your data, to rectify or erase it, to restrict processing, to data portability and to object to processing based on legitimate interest.
    2. 2.Requests may be sent to the Operator's address. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).

  7. §7Cookies

    1. 1.The Service uses only necessary cookies: to keep the sign-in session and to remember the chosen language. We do not use marketing or tracking cookies.
    2. 2.Browser settings allow cookies to be deleted or blocked; blocking the session cookie makes signing in impossible.

  8. §8Changes to this policy

    1. 1.We announce significant changes in the Service or by e-mail. The current version is always available at this address.