1. Data controller
The controller of your personal data is Bamboo Montessori sp. z o.o., ul. Lipińskiego 13/D, 30-349 Kraków, Poland, tax ID (NIP) 6762459036, REGON 122668226, KRS 0001254004.
For any matter concerning personal data, write to office@bamboomontessori.com or call +48 696 809 642.
2. What data we process and why
- Phone and email enquiries — the data you give us (e.g. name, phone number, email address, message) is used to answer your question. Legal basis: our legitimate interest in handling correspondence (Art. 6(1)(f) GDPR) and, if you ask about enrolment, steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
- Enrolment forms and meeting bookings — data from the forms (Microsoft Forms) and from booking a meeting with the head of school (Microsoft Bookings), including your child's data, is used to accept the application, run the admission process and arrange the meeting (Art. 6(1)(b) GDPR).
- Statistics and ad measurement — only with your consent (Art. 6(1)(a) GDPR) we use Google Analytics and Google Ads to understand how visitors use the site and whether our ads lead to enquiries. Without consent Google receives only anonymous signals, with no cookies.
- Operating and securing the site — the server automatically logs technical data (such as IP address and browser type) to keep the site running and protected against abuse (Art. 6(1)(f) GDPR).
3. Who we share data with
We use external service providers who may have access to the data:
- Microsoft Ireland Operations Ltd — website hosting, email, Microsoft Forms and Microsoft Bookings;
- Google Ireland Ltd — Google Analytics and Google Ads (only after you consent to cookies).
These providers may transfer data to the USA, on the basis of the European Commission's decision on the EU-US Data Privacy Framework or standard contractual clauses approved by the Commission. We do not sell personal data.
4. How long we keep data
- correspondence — as long as needed to deal with the matter, then until any possible claims become time-barred;
- admission data — until the admission process ends; if your child is admitted, for the term of the contract and as long as the law requires;
- Google Analytics data — for the period set in the service, no longer than 14 months;
- data processed on the basis of consent — until you withdraw it.
5. Your rights
You have the right to access, rectify and erase your data, to restrict its processing, to data portability, and to object to processing based on our legitimate interest. You can withdraw your cookie consent at any time; this does not affect the lawfulness of processing carried out before the withdrawal.
You also have the right to lodge a complaint with the Polish data protection authority, the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warszawa).
Providing data is voluntary, but without it we cannot answer your enquiry or accept an application. We do not make decisions about you based solely on automated processing.
6. Cookies
Cookies are small files that a website stores in your browser. The site does not need them to work — we use them only for statistics and ad measurement, and only if you consent:
| Name | Provider | Purpose | Expiry |
|---|---|---|---|
_ga | Google Analytics | distinguishing visitors | 2 years |
_ga_PERDTY8D72 | Google Analytics | keeping track of the current visit | 2 years |
_gcl_au | Google Ads | measuring enquiries from ads | 90 days |
Google may also use its own cookies on its own domains — details: policies.google.com/technologies/cookies.
Your choice (consent or refusal) is remembered in your browser's storage (localStorage, key bm_consent). It is not a cookie and is never sent anywhere. You can change your settings with the button below or with the “Cookie settings” link in the site footer. You can also delete or block cookies in your browser settings.