← Back to Documents

Privacy Policy

·

This Privacy Policy explains how the European Centre for AI in Schools (ECAIS) Foundation collects, uses and protects personal data. It outlines who is responsible for processing personal data, whose data may be processed, and how to contact the Foundation regarding privacy and data protection matters.

Privacy Policy

European Centre for AI in Schools (ECAIS) Foundation

Last updated: July 13,2026

A. General Information

Data Controller

The controller of the personal data referred to in this Policy is the European Centre for AI in Schools (ECAIS) Foundation, with its registered office in Warsaw (02-672), Poland, Domaniewska 45.

This Policy concerns the personal data of people who contact us, cooperate with us or represent our partners, take part in our progragmmes and events, subscribe to our newsletter, and use our website.

Contact

For any matter relating to personal data, you can write to us at: info@ecais.eu.

Scope of the Policy and Pupils' Data

ECAIS works on research, standards and practical solutions for the responsible use of artificial intelligence in education. As part of this work, we do not collect pupils' personal data. When we cooperate with schools, the school remains the controller of its pupils' data. In such cases we process only the data of contact persons and representatives of the institution.

Your Rights

Every person whose data we process has the right to:

access their data
rectify or supplement the data if it is incorrect or incomplete
request erasure of the data (the "right to be forgotten")
restrict the processing of the data
receive the data in a structured, commonly used, machine-readable format and transmit it to another controller
object to processing carried out on the basis of our legitimate interests
withdraw consent at any time (if data is processed on the basis of consent; withdrawal does not affect the lawfulness of processing before its withdrawal)
lodge a complaint with the President of the Personal Data Protection Office (Prezes UODO).

Automated Decisions and Profiling

Your data is not used to make decisions fully automatically, that is, without human involvement. We also do not create profiles of individuals based on the collected information.

Do You Have to Provide Data?

Providing personal data is generally voluntary. In some situations, however, it is necessary so that we can:

conduct correspondence and respond to your queries
establish and carry out cooperation
enable you to take part in a program, training or event
fulfil obligations arising from legal provisions, including keeping the required accounting records

Transfers Outside the EEA

We use tools and services from providers that may be based outside the European Economic Area (EEA), for example hosting, e-mail, mailing systems or analytics providers. When we transfer data outside the EEA, we apply the safeguards required by the GDPR, in particular the EU Standard Contractual Clauses.

B. Categories of Personal Data Processing

1. Correspondence and Inquiries

We process the data of people who contact us through the contact form, by e-mail or by phone.

Purpose of Processing

Conducting correspondence, responding to queries, and handling the requests addressed to us.

Legal Basis

Our legitimate interests (Article 6(1)(f) GDPR), consisting in maintaining contact and handling requests. If the contact concerns establishing cooperation, the basis may be steps taken prior to entering into a contract (Article 6(1)(b) GDPR).

Storage Period

For as long as necessary to handle the matter, and then for the period required to protect against potential claims.

Data Recipients

Authorized collaborators and IT service providers (e-mail, hosting). We disclose data to public authorities only where required by law.

2. Cooperation with Partners and Institutional Contacts

We process the data of people representing schools, public institutions, research organizations and partners with whom we cooperate or plan to cooperate.

Purpose of Processing

Establishing and maintaining cooperation, carrying out joint projects, exchanging information, and managing relationships with partners.

Legal Basis

Performance of a contract or steps taken prior to entering into it (Article 6(1)(b) GDPR), our legitimate interests in maintaining professional contacts and partner relationships (Article 6(1)(f) GDPR), and, in respect of settlements, obligations arising from law (Article 6(1)(c) GDPR).

Storage Period

For the duration of the cooperation, and then for the period required by law (accounting documents for at least 5 years) and until any potential claims become time-barred (as a rule, 6 years).

Data Recipients

Authorized collaborators, IT service providers, and advisers (for example legal and accounting). Data may be disclosed to public authorities where required by law.

3. Participation in Progragmmes, Training and Events

We process the data of people who register to take part in our progragmmes, training sessions, workshops and events.

Purpose of Processing

Organizing progragmmes, training, workshops and events, handling applications and registration, communicating with participants, and documenting our activities.

Legal Basis

Performance of a contract or steps taken prior to entering into it, for example registration and participation (Article 6(1)(b) GDPR), consent for data provided voluntarily (Article 6(1)(a) GDPR), our legitimate interests in organizing and evaluating events (Article 6(1)(f) GDPR), and, in respect of settlements, obligations arising from law (Article 6(1)(c) GDPR).

Storage Period

For as long as necessary to organize and settle the event, and then for the period required by law and until any claims become time barred.

Data Recipients

Authorized collaborators, IT and registration platform providers, and entities co-organizing a given event.

4. Newsletter and Publications

If you subscribe to the newsletter, we use your e-mail address to send you information about our activities and publications.

Purpose of Processing

Sending the newsletter, publications, invitations to events, and information about our activities.

Legal Basis

Your consent (Article 6(1)(a) GDPR) given when subscribing.

Storage Period

Until consent is withdrawn. We may retain archival data to demonstrate that consent was withdrawn lawfully.

Data Recipients

Mailing system providers, including those based outside the EEA, with the safeguards required by the GDPR.

Additional Information

You can withdraw consent at any time, for example by using the link in the message. Withdrawal does not affect the lawfulness of earlier mailings.

5. Recruitment

If you take part in recruitment for a position or for cooperation with the Foundation, we process the data provided in your application.

Purpose of Processing

Conducting the recruitment process and contacting candidates.

Legal Basis

Obligations arising from law and steps taken prior to entering into a contract (Article 6(1)(c) and (b) GDPR), and, in respect of data provided voluntarily and for the purposes of future recruitment, your consent (Article 6(1)(a) GDPR).

Storage Period

Until the given recruitment ends, and in the case of consent to take part in future recruitment, no longer than [e.g. 12 months].

Data Recipients

Authorized collaborators and IT service providers supporting recruitment.

6. Data Collected When Using the Website

When you visit our website, we store basic technical information necessary for its proper and secure operation (for example, your browser and system data). We also use cookies and similar technologies.

Purpose of Processing

Ensuring the correct and secure operation of the website and, with your consent, analyzing traffic and how the site is used.

Legal Basis

Our legitimate interests for technical data and necessary cookies (Article 6(1)(f) GDPR), and, for analytics cookies, your consent (Article 6(1)(a) GDPR).

Storage Period

For as long as necessary for security and statistical purposes. Cookies remain active until they expire or until you delete them in your browser.

Data Recipients

The website hosting provider (the Figma platform) and analytics tool providers. In some cases, data may be transferred outside the EEA, with the safeguards required by the GDPR.

Additional Information

You can manage cookies yourself in your browser settings.

← Back to Documents

Privacy Policy

·

This Privacy Policy explains how the European Centre for AI in Schools (ECAIS) Foundation collects, uses and protects personal data. It outlines who is responsible for processing personal data, whose data may be processed, and how to contact the Foundation regarding privacy and data protection matters.

Privacy Policy

European Centre for AI in Schools (ECAIS) Foundation

Last updated: July 13,2026

A. General Information

Data Controller

The controller of the personal data referred to in this Policy is the European Centre for AI in Schools (ECAIS) Foundation, with its registered office in Warsaw (02-672), Poland, Domaniewska 45.

This Policy concerns the personal data of people who contact us, cooperate with us or represent our partners, take part in our progragmmes and events, subscribe to our newsletter, and use our website.

Contact

For any matter relating to personal data, you can write to us at: info@ecais.eu.

Scope of the Policy and Pupils' Data

ECAIS works on research, standards and practical solutions for the responsible use of artificial intelligence in education. As part of this work, we do not collect pupils' personal data. When we cooperate with schools, the school remains the controller of its pupils' data. In such cases we process only the data of contact persons and representatives of the institution.

Your Rights

Every person whose data we process has the right to:

access their data
rectify or supplement the data if it is incorrect or incomplete
request erasure of the data (the "right to be forgotten")
restrict the processing of the data
receive the data in a structured, commonly used, machine-readable format and transmit it to another controller
object to processing carried out on the basis of our legitimate interests
withdraw consent at any time (if data is processed on the basis of consent; withdrawal does not affect the lawfulness of processing before its withdrawal)
lodge a complaint with the President of the Personal Data Protection Office (Prezes UODO).

Automated Decisions and Profiling

Your data is not used to make decisions fully automatically, that is, without human involvement. We also do not create profiles of individuals based on the collected information.

Do You Have to Provide Data?

Providing personal data is generally voluntary. In some situations, however, it is necessary so that we can:

conduct correspondence and respond to your queries
establish and carry out cooperation
enable you to take part in a program, training or event
fulfil obligations arising from legal provisions, including keeping the required accounting records

Transfers Outside the EEA

We use tools and services from providers that may be based outside the European Economic Area (EEA), for example hosting, e-mail, mailing systems or analytics providers. When we transfer data outside the EEA, we apply the safeguards required by the GDPR, in particular the EU Standard Contractual Clauses.

B. Categories of Personal Data Processing

1. Correspondence and Inquiries

We process the data of people who contact us through the contact form, by e-mail or by phone.

Purpose of Processing

Conducting correspondence, responding to queries, and handling the requests addressed to us.

Legal Basis

Our legitimate interests (Article 6(1)(f) GDPR), consisting in maintaining contact and handling requests. If the contact concerns establishing cooperation, the basis may be steps taken prior to entering into a contract (Article 6(1)(b) GDPR).

Storage Period

For as long as necessary to handle the matter, and then for the period required to protect against potential claims.

Data Recipients

Authorized collaborators and IT service providers (e-mail, hosting). We disclose data to public authorities only where required by law.

2. Cooperation with Partners and Institutional Contacts

We process the data of people representing schools, public institutions, research organizations and partners with whom we cooperate or plan to cooperate.

Purpose of Processing

Establishing and maintaining cooperation, carrying out joint projects, exchanging information, and managing relationships with partners.

Legal Basis

Performance of a contract or steps taken prior to entering into it (Article 6(1)(b) GDPR), our legitimate interests in maintaining professional contacts and partner relationships (Article 6(1)(f) GDPR), and, in respect of settlements, obligations arising from law (Article 6(1)(c) GDPR).

Storage Period

For the duration of the cooperation, and then for the period required by law (accounting documents for at least 5 years) and until any potential claims become time-barred (as a rule, 6 years).

Data Recipients

Authorized collaborators, IT service providers, and advisers (for example legal and accounting). Data may be disclosed to public authorities where required by law.

3. Participation in Progragmmes, Training and Events

We process the data of people who register to take part in our progragmmes, training sessions, workshops and events.

Purpose of Processing

Organizing progragmmes, training, workshops and events, handling applications and registration, communicating with participants, and documenting our activities.

Legal Basis

Performance of a contract or steps taken prior to entering into it, for example registration and participation (Article 6(1)(b) GDPR), consent for data provided voluntarily (Article 6(1)(a) GDPR), our legitimate interests in organizing and evaluating events (Article 6(1)(f) GDPR), and, in respect of settlements, obligations arising from law (Article 6(1)(c) GDPR).

Storage Period

For as long as necessary to organize and settle the event, and then for the period required by law and until any claims become time barred.

Data Recipients

Authorized collaborators, IT and registration platform providers, and entities co-organizing a given event.

4. Newsletter and Publications

If you subscribe to the newsletter, we use your e-mail address to send you information about our activities and publications.

Purpose of Processing

Sending the newsletter, publications, invitations to events, and information about our activities.

Legal Basis

Your consent (Article 6(1)(a) GDPR) given when subscribing.

Storage Period

Until consent is withdrawn. We may retain archival data to demonstrate that consent was withdrawn lawfully.

Data Recipients

Mailing system providers, including those based outside the EEA, with the safeguards required by the GDPR.

Additional Information

You can withdraw consent at any time, for example by using the link in the message. Withdrawal does not affect the lawfulness of earlier mailings.

5. Recruitment

If you take part in recruitment for a position or for cooperation with the Foundation, we process the data provided in your application.

Purpose of Processing

Conducting the recruitment process and contacting candidates.

Legal Basis

Obligations arising from law and steps taken prior to entering into a contract (Article 6(1)(c) and (b) GDPR), and, in respect of data provided voluntarily and for the purposes of future recruitment, your consent (Article 6(1)(a) GDPR).

Storage Period

Until the given recruitment ends, and in the case of consent to take part in future recruitment, no longer than [e.g. 12 months].

Data Recipients

Authorized collaborators and IT service providers supporting recruitment.

6. Data Collected When Using the Website

When you visit our website, we store basic technical information necessary for its proper and secure operation (for example, your browser and system data). We also use cookies and similar technologies.

Purpose of Processing

Ensuring the correct and secure operation of the website and, with your consent, analyzing traffic and how the site is used.

Legal Basis

Our legitimate interests for technical data and necessary cookies (Article 6(1)(f) GDPR), and, for analytics cookies, your consent (Article 6(1)(a) GDPR).

Storage Period

For as long as necessary for security and statistical purposes. Cookies remain active until they expire or until you delete them in your browser.

Data Recipients

The website hosting provider (the Figma platform) and analytics tool providers. In some cases, data may be transferred outside the EEA, with the safeguards required by the GDPR.

Additional Information

You can manage cookies yourself in your browser settings.

← Back to Documents

Privacy Policy

·

This Privacy Policy explains how the European Centre for AI in Schools (ECAIS) Foundation collects, uses and protects personal data. It outlines who is responsible for processing personal data, whose data may be processed, and how to contact the Foundation regarding privacy and data protection matters.

Privacy Policy

European Centre for AI in Schools (ECAIS) Foundation

Last updated: July 13,2026

A. General Information

Data Controller

The controller of the personal data referred to in this Policy is the European Centre for AI in Schools (ECAIS) Foundation, with its registered office in Warsaw (02-672), Poland, Domaniewska 45.

This Policy concerns the personal data of people who contact us, cooperate with us or represent our partners, take part in our progragmmes and events, subscribe to our newsletter, and use our website.

Contact

For any matter relating to personal data, you can write to us at: info@ecais.eu.

Scope of the Policy and Pupils' Data

ECAIS works on research, standards and practical solutions for the responsible use of artificial intelligence in education. As part of this work, we do not collect pupils' personal data. When we cooperate with schools, the school remains the controller of its pupils' data. In such cases we process only the data of contact persons and representatives of the institution.

Your Rights

Every person whose data we process has the right to:

access their data
rectify or supplement the data if it is incorrect or incomplete
request erasure of the data (the "right to be forgotten")
restrict the processing of the data
receive the data in a structured, commonly used, machine-readable format and transmit it to another controller
object to processing carried out on the basis of our legitimate interests
withdraw consent at any time (if data is processed on the basis of consent; withdrawal does not affect the lawfulness of processing before its withdrawal)
lodge a complaint with the President of the Personal Data Protection Office (Prezes UODO).

Automated Decisions and Profiling

Your data is not used to make decisions fully automatically, that is, without human involvement. We also do not create profiles of individuals based on the collected information.

Do You Have to Provide Data?

Providing personal data is generally voluntary. In some situations, however, it is necessary so that we can:

conduct correspondence and respond to your queries
establish and carry out cooperation
enable you to take part in a program, training or event
fulfil obligations arising from legal provisions, including keeping the required accounting records

Transfers Outside the EEA

We use tools and services from providers that may be based outside the European Economic Area (EEA), for example hosting, e-mail, mailing systems or analytics providers. When we transfer data outside the EEA, we apply the safeguards required by the GDPR, in particular the EU Standard Contractual Clauses.

B. Categories of Personal Data Processing

1. Correspondence and Inquiries

We process the data of people who contact us through the contact form, by e-mail or by phone.

Purpose of Processing

Conducting correspondence, responding to queries, and handling the requests addressed to us.

Legal Basis

Our legitimate interests (Article 6(1)(f) GDPR), consisting in maintaining contact and handling requests. If the contact concerns establishing cooperation, the basis may be steps taken prior to entering into a contract (Article 6(1)(b) GDPR).

Storage Period

For as long as necessary to handle the matter, and then for the period required to protect against potential claims.

Data Recipients

Authorized collaborators and IT service providers (e-mail, hosting). We disclose data to public authorities only where required by law.

2. Cooperation with Partners and Institutional Contacts

We process the data of people representing schools, public institutions, research organizations and partners with whom we cooperate or plan to cooperate.

Purpose of Processing

Establishing and maintaining cooperation, carrying out joint projects, exchanging information, and managing relationships with partners.

Legal Basis

Performance of a contract or steps taken prior to entering into it (Article 6(1)(b) GDPR), our legitimate interests in maintaining professional contacts and partner relationships (Article 6(1)(f) GDPR), and, in respect of settlements, obligations arising from law (Article 6(1)(c) GDPR).

Storage Period

For the duration of the cooperation, and then for the period required by law (accounting documents for at least 5 years) and until any potential claims become time-barred (as a rule, 6 years).

Data Recipients

Authorized collaborators, IT service providers, and advisers (for example legal and accounting). Data may be disclosed to public authorities where required by law.

3. Participation in Progragmmes, Training and Events

We process the data of people who register to take part in our progragmmes, training sessions, workshops and events.

Purpose of Processing

Organizing progragmmes, training, workshops and events, handling applications and registration, communicating with participants, and documenting our activities.

Legal Basis

Performance of a contract or steps taken prior to entering into it, for example registration and participation (Article 6(1)(b) GDPR), consent for data provided voluntarily (Article 6(1)(a) GDPR), our legitimate interests in organizing and evaluating events (Article 6(1)(f) GDPR), and, in respect of settlements, obligations arising from law (Article 6(1)(c) GDPR).

Storage Period

For as long as necessary to organize and settle the event, and then for the period required by law and until any claims become time barred.

Data Recipients

Authorized collaborators, IT and registration platform providers, and entities co-organizing a given event.

4. Newsletter and Publications

If you subscribe to the newsletter, we use your e-mail address to send you information about our activities and publications.

Purpose of Processing

Sending the newsletter, publications, invitations to events, and information about our activities.

Legal Basis

Your consent (Article 6(1)(a) GDPR) given when subscribing.

Storage Period

Until consent is withdrawn. We may retain archival data to demonstrate that consent was withdrawn lawfully.

Data Recipients

Mailing system providers, including those based outside the EEA, with the safeguards required by the GDPR.

Additional Information

You can withdraw consent at any time, for example by using the link in the message. Withdrawal does not affect the lawfulness of earlier mailings.

5. Recruitment

If you take part in recruitment for a position or for cooperation with the Foundation, we process the data provided in your application.

Purpose of Processing

Conducting the recruitment process and contacting candidates.

Legal Basis

Obligations arising from law and steps taken prior to entering into a contract (Article 6(1)(c) and (b) GDPR), and, in respect of data provided voluntarily and for the purposes of future recruitment, your consent (Article 6(1)(a) GDPR).

Storage Period

Until the given recruitment ends, and in the case of consent to take part in future recruitment, no longer than [e.g. 12 months].

Data Recipients

Authorized collaborators and IT service providers supporting recruitment.

6. Data Collected When Using the Website

When you visit our website, we store basic technical information necessary for its proper and secure operation (for example, your browser and system data). We also use cookies and similar technologies.

Purpose of Processing

Ensuring the correct and secure operation of the website and, with your consent, analyzing traffic and how the site is used.

Legal Basis

Our legitimate interests for technical data and necessary cookies (Article 6(1)(f) GDPR), and, for analytics cookies, your consent (Article 6(1)(a) GDPR).

Storage Period

For as long as necessary for security and statistical purposes. Cookies remain active until they expire or until you delete them in your browser.

Data Recipients

The website hosting provider (the Figma platform) and analytics tool providers. In some cases, data may be transferred outside the EEA, with the safeguards required by the GDPR.

Additional Information

You can manage cookies yourself in your browser settings.