Skolista

Privacy Policy

This translation is provided for convenience; the Polish version of the document is legally binding.

Effective date: 6 July 2026

1. Personal data controller

The controller of personal data is Ivan Radziukevich, operating a sole proprietorship, with the principal place of business at: ul. Nowa 31/3, 85-119 Bydgoszcz, Poland, NIP: 9532798428, REGON: 526222130.

Contact for personal data matters: infoclistpl@gmail.com.

2. What data we process

a) Data of visitors to the Skolista service (currently available at skolista.pl):

  • IP address and technical browser data (user-agent), stored in the hosting provider's server logs.
  • date and time of the visit and the addresses of pages visited.

b) Cookies:

  • NEXT_LOCALE — a functional cookie that remembers the selected interface language (Polish / Russian / English). It is not used for tracking or profiling.

The service does not use analytics, advertising or tracking tools (no Google Analytics, pixels, etc.).

c) School data presented in the service:

  • The service presents information about non-public schools in Poland sourced from the public RSPO register (Rejestr Szkół i Placówek Oświatowych) and from publicly available school websites. This data primarily concerns institutions; where it contains personal data (e.g. contact details of school management), we process it on the basis of legitimate interest (informing parents about educational offerings).

3. Purposes and legal bases of processing

PurposeLegal basis (GDPR)
Providing and operating the service, IT securityArt. 6(1)(f) — legitimate interest
Remembering the language preference (functional cookie)Art. 6(1)(f) — legitimate interest
Presenting school data from public registersArt. 6(1)(f) — legitimate interest

4. Cookies

The service uses only the strictly necessary (functional) NEXT_LOCALE cookie, which remembers the language selection. Under the law, strictly necessary cookies do not require prior consent. You can manage cookies in your browser settings.

(If we introduce analytics or advertising tools in the future, a cookie consent banner will appear before they are activated.)

5. Data recipients / processors

To provide the service, we use trusted providers (data processors):

  • Vercel Inc. (USA) — service hosting, processing of server logs.
  • Supabase (region: European Union — Ireland) — the service's database.

6. Data transfers outside the EEA

The database (Supabase) is located within the EEA (Ireland). The hosting provider (Vercel Inc.) is based in the USA — data transfers take place on the basis of Standard Contractual Clauses (SCC) approved by the European Commission.

7. Retention period

  • Server logs — for the period necessary for security and diagnostics (in accordance with the hosting provider's policy).
  • NEXT_LOCALE cookie — until it expires or is deleted by the user.

8. Rights of data subjects

You have the right to: access your data, rectify it, erase it, restrict processing, object to processing, and data portability. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa.

To exercise your rights, contact: infoclistpl@gmail.com.

9. School data — source and objection

School data comes from the public RSPO register and from public school websites. If you represent a school and would like to correct or remove the presented data, write to infoclistpl@gmail.com — we will handle the request in accordance with the GDPR.

10. Changes to this policy

We reserve the right to update this policy. The current version is always available in the service.