Privacy Policy
Last updated: July 4, 2025
This Privacy Policy describes how Genafio ("we", "us", or "our"), operating at genafio.pro, collects, uses, stores, and protects information about you when you access or use our website and online educational services. By using our services, you acknowledge that you have read and understood this policy.
1. Who We Are
Genafio is an online education platform focused on corporate culture learning. Our registered address is Kisielewskiego 80A, 42-215 Częstochowa, Poland. If you have any questions about this Privacy Policy or how we handle your data, you may contact us at:
- Email: [email protected]
- Phone: +48 58 305 22 85
- Address: Kisielewskiego 80A, 42-215 Częstochowa, Poland
2. Information We Collect
2.1 Information You Provide Directly
We collect information that you voluntarily provide when registering an account, enrolling in a course, submitting a contact form, or communicating with us. This may include:
- Full name
- Email address
- Phone number
- Organization or employer name
- Payment and billing information (processed through third-party payment providers)
- Messages, feedback, and correspondence you send to us
2.2 Information Collected Automatically
When you visit our website or use our platform, certain technical data is collected automatically, including:
- IP address and approximate geographic location
- Browser type and version
- Operating system
- Pages visited, time spent, and navigation paths
- Referring URLs
- Device identifiers
- Session duration and interaction events
2.3 Cookies and Tracking Technologies
We use cookies, local storage, and similar technologies to maintain session state, remember your preferences, and analyze how our platform is used. You may control cookie behavior through your browser settings. Disabling certain cookies may affect platform functionality.
2.4 Learning Activity Data
When you engage with our courses and lectures, we may collect data related to your progress, completion status, quiz responses, and interaction with multimedia content. This data is used to provide and improve the educational experience.
3. How We Use Your Information
We use collected information for the following purposes:
- To create and manage your account
- To provide access to courses, lectures, and educational materials
- To process payments and issue receipts or invoices
- To communicate with you about your account, purchases, or support requests
- To send service-related notifications and updates
- To send promotional or educational communications where you have given consent or where we have a legitimate interest
- To analyze usage patterns and improve our platform
- To detect, prevent, and respond to fraud, abuse, or security incidents
- To comply with applicable legal obligations
4. Legal Basis for Processing
We process your personal data on the following legal grounds:
- Contract performance: Processing necessary to deliver the services you have requested or purchased.
- Legitimate interests: Processing necessary for our legitimate business interests, such as improving our platform, preventing fraud, and communicating with users, provided these interests are not overridden by your rights.
- Consent: Where you have explicitly consented to a specific processing activity, such as receiving marketing communications.
- Legal obligation: Processing required to comply with applicable laws and regulations.
5. Sharing of Information
5.1 Service Providers
We may share your information with trusted third-party service providers who assist us in operating the platform, processing payments, delivering communications, or analyzing usage. These providers are contractually bound to process data only on our behalf and in accordance with this policy.
5.2 Business Transfers
If Genafio undergoes a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and the applicable privacy terms.
5.3 Legal Requirements
We may disclose your information if required to do so by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
5.4 No Sale of Personal Data
We do not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide our services. We also retain data to the extent necessary to comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it in a secure manner.
Specific retention periods vary by data type:
- Account information: retained for the duration of the account and up to 3 years after closure
- Transaction records: retained for the period required by applicable financial regulations
- Communication records: retained for up to 2 years from the date of last contact
- Technical logs: typically retained for up to 12 months
7. Your Rights
Depending on your location and applicable law, you may have the following rights regarding your personal data:
- Access: The right to request a copy of the personal data we hold about you.
- Rectification: The right to request correction of inaccurate or incomplete data.
- Erasure: The right to request deletion of your personal data under certain circumstances.
- Restriction: The right to request that we limit how we process your data in certain situations.
- Portability: The right to receive your data in a structured, machine-readable format.
- Objection: The right to object to processing based on legitimate interests or for direct marketing purposes.
- Withdrawal of consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable timeframe and in accordance with applicable law. We may need to verify your identity before fulfilling certain requests.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission, access controls, regular security assessments, and staff training.
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.
9. International Data Transfers
Your information may be processed and stored in countries other than the one in which you reside. When we transfer data internationally, we ensure that appropriate safeguards are in place to protect your information in accordance with applicable data protection standards, such as standard contractual clauses or equivalent mechanisms.
10. Children's Privacy
Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a minor, please contact us at [email protected] and we will take prompt steps to delete that information.
11. Third-Party Links and Services
Our platform may contain links to third-party websites, embedded content, or integrated tools. This Privacy Policy applies only to our own services. We are not responsible for the privacy practices of third-party websites and encourage you to review their policies before providing any personal information.
12. Cookies Policy
12.1 Types of Cookies We Use
| Category | Purpose | Duration |
|---|---|---|
| Essential | Required for core platform functionality and secure login sessions | Session |
| Functional | Remember your preferences and settings across visits | Up to 12 months |
| Analytics | Understand how users interact with the platform to improve it | Up to 24 months |
| Marketing | Deliver relevant communications where consent is given | Up to 12 months |
12.2 Managing Cookies
You can manage or disable cookies through your browser settings at any time. Most browsers allow you to refuse new cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling essential cookies may prevent certain features from functioning correctly.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by sending a notification to the email address associated with your account.
Your continued use of our services after any changes take effect constitutes your acceptance of the revised policy. We encourage you to review this page periodically.
14. Contact Us
If you have any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, please reach out to us through any of the following channels:
- Email: [email protected]
- Phone: +48 58 305 22 85
- Postal address: Kisielewskiego 80A, 42-215 Częstochowa, Poland
- Website: genafio.pro
We are committed to resolving any concerns about your privacy in a fair and timely manner.