Privacy policy

Privacy Policy and Cookies

Last updated: July 2026. Learn how we protect your personal data and how we process it.

§ 1. General Provisions and Data Administrator

  1. This Privacy Policy defines the rules for processing personal data and using cookies within the Student360 website.
  2. The administrator of users' personal data is: Mateusz Niski, with its registered office at:
    Poland, Braniewo 14-500
    ul. Mielczarskiego 22m.6,
    contact e-mail for privacy matters: kontakt@student360.pl (hereinafter: the "Administrator").
  3. The Administrator cares for the confidentiality and security of personal data, applying appropriate technical and organizational measures in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

§ 2. Scope, purposes and legal grounds for data processing

  1. Registration and login (Google and Facebook / Meta): Logging into the service is done exclusively via external identity providers (Google Account and Facebook Account). The Administrator has no insight into passwords or user accounts on these services. During the login process, the Administrator only obtains basic profile data, i.e., e-mail address and first and last name, which are necessary to create and identify the User Account (legal basis: Article 6 paragraph 1 letter b GDPR – performance of a contract).
  2. Provision of the data cloud service (5 GB): The processing of files, scans, and notes uploaded by the user within the private storage space is carried out solely for the purpose of executing the digital services contract (legal basis: Article 6 paragraph 1 letter b GDPR).
  3. Payment processing (Stripe): Payments on the service are handled via the payment operator Stripe. The Administrator does not store or have access to users' payment card numbers or sensitive banking data. Only transaction data necessary to settle and book the fee is processed (legal basis: Article 6 paragraph 1 letters b and c GDPR – tax obligation and performance of a contract).
  4. Customer support and complaints: When contacting the Administrator (e.g., via e-mail), the user provides their personal data (e-mail address, name, and message content) for the purpose of conducting correspondence and handling potential requests (legal basis: Article 6 paragraph 1 letter f GDPR – legitimate interest of the Administrator).

§ 3. Analytical tools and Cookies (Google Analytics)

  1. The service uses cookies and the Google Analytics analytical tool provided by Google LLC to collect anonymized statistics regarding website traffic and how users navigate the service.
  2. Data collected by Google Analytics includes, among others, information about the browser, operating system, time spent on the service, or visited subpages. This information is generated automatically and is not used to identify specific natural persons.
  3. The user can independently manage cookies or block their saving at any time by changing their web browser settings or using dedicated plug-ins that block analytical scripts.

§ 4. Recipients of personal data

  1. Users' personal data may be entrusted to trusted third parties used by the Administrator to ensure the proper functioning of the service, such as:
    • Electronic payment operator (Stripe) – for processing financial transactions.
    • Cloud infrastructure and hosting providers – for secure storage of user data and files.
    • Analytical tools provider (Google LLC) – for the scope of collecting statistics.
  2. The Administrator does not sell or share users' personal data with third parties for marketing purposes.

§ 5. User rights (GDPR)

  1. In accordance with GDPR, every user has the following rights regarding their personal data:
    • Right of access to their data and to receive a copy thereof,
    • Right to rectification (correction) of their data,
    • Right to erasure ("right to be forgotten") in certain cases,
    • Right to restriction of data processing,
    • Right to object to data processing,
    • Right to lodge a complaint with the President of the Personal Data Protection Office (UODO) if the user considers that their data processing violates the law.
  2. To exercise their rights or in case of questions regarding privacy, the user can contact the Administrator at the e-mail address: kontakt@student360.pl.

§ 6. Final provisions

  1. The Administrator reserves the right to make changes to this Privacy Policy, of which users will be informed well in advance.
  2. In matters not regulated by this Privacy Policy, the provisions of generally applicable Polish and EU law shall apply.