Privacy notice

Privacy notice

We treats personal data processed within our systems and in the framework of our procedures very seriously. We ensure high standard of data security. According to requirements of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – hereinafter referred to as the GDPR – You will find out how We process Your personal data below and the rights that You have.

1. The controller of the personal data

We, AURORA WORLD Sp. z o.o. with its registered office at ul. Warszawska 40/2a, 40-008 Katowice, Poland entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court for Katowice – Wschód, VIII Commercial Division of the National Court Register under KRS number 0000815149, NIP (Tax Identification Number): 9542809955, REGON number: 384922259, hereinafter referred to as the AURORA WORLD, are the controller of Your personal data.

You can contact Us using:

- telephone number: +48 32 722 07 11,
- e-mail address:
- abovementioned address.

2. Data protection officer

Agnieszka Marecka is the data protection officer at AURORA WORLD:

- telephone +48 32 722 07 11,
- e-mail:

3. Purpose and legal basis for processing personal data

The processing of Your personal data is done for the purpose of executing a contract to which You are a party, or to take actions at Your request before concluding the contract (Article 6 par. 1 letter b of the GDPR). In extraordinary situations, AURORA WORLD may process Your personal data due to the need to comply with legal obligations to which AURORA WORLD is subject (Article 6 par. 1 letter c of the GDPR), or the processing is necessary to protect Your vital interests or another natural person (Article 6 par. 1 letter d of the GDPR), or processing is necessary for the purposes of the legitimate interests pursued by AURORA WORLD (Article 6 par. 1 letter f of the GDPR), in particular, for the purpose related to:

1. marketing of Our products and services,

2. monitoring and improvement of the quality of Our services, including monitoring of telephone conversations and meetings, carrying out customer satisfaction surveys of services provided,

3. if applicable, solving disputes, enforce our contractual agreements and to establish, exercise or defend legal claims.

In all situations, Your personal data, including sensitive personal data are processed solely on the basis Your consent granted for the purpose specified in its content (Article 6 par. 1 letter a of the GDPR).

4. Recipients of data

AURORA WORLD discloses or may disclose Your personal data to the following recipients or categories of recipients, in particular to:

a) public authorities and relevant state offices, competent to process visa applications and to issue visas (e.g. Embassy of Canada to Poland);
b) entities that participate in the processes necessary to perform contracts concluded with clients, including banks, credit card operators, electronic and online payment agents,
c) entities which support AURORA WORLD in business processes, including in particular entities processing personal data for AURORA WORLD (so-called data processors), inter alia:
- hosting companies,
- legal services and accounting services,
- companies and external entities carrying out processes which are a part of the activities necessary to conclude the contract with a client.

5. Time of data processing

We will retain Your personal data (including sensitive data provided on the basis of Your consent) for only as long as it is necessary for the uses set out in this Privacy Notice and/or to meet legal and regulatory requirements. After this period, We will securely erase personal data. If data is needed after this period for analytical, historical or other legitimate business purposes, We will take appropriate measures to anonymise this data.

Insensitive data processed on the basis of separate consent might be stored until You no longer wish for Your data to be processed by Us.

6. The rights of data subjects

AURORA WORLD will respect Your legal rights to Your personal data.
Below are the rights that You have under GDPR, and what AURORA WORLD does to protect those rights:

The right to be informed
AURORA WORLD is publishing this Privacy Notice to keep You informed as to what We do with Your personal data. We strive to be transparent about how We use Your data.

The right to access
You have the right to access Your information. Please contact Us if You wish to access the personal information AURORA WORLD holds about You.

The right to rectification
If the information AURORA WORLD holds about You is inaccurate or not complete, You have the right to ask Us to rectify it. If that data has been passed to a third party with Your consent or for legal reasons, then We must also ask them to rectify the data. Please Us if You need Us to rectify Your information.

The right to erasure
This is also called ‘the right to be forgotten’. If You want AURORA WORLD to erase all Your personal data and We do not have a legal reason to continue to process and hold it, please contact Us.

The right to restrict processing
You have the right to ask AURORA WORLD to restrict how We process Your data. This means We are permitted to store the data but not further process it. Restriction is allowed if:
- You challenges correctness of the personal data;
- the processing is unlawful and You opposes to erasure of the personal data, requesting to limit their use instead;
- AURORA WORLD no longer needs the personal data for processing but it is necessary for the data subject to establish an enquiry or defend their claims;
- You has objected to the processing
– pending determination of whether the legitimate grounds on the part of the controller take precedence over the grounds of objection.
If You want Us to restrict processing of Your data, please contact Us.

The right to data portability
AURORA WORLD must allow You to obtain and reuse Your personal data for Your own purposes across services in a safe and secure way without this affecting the usability of Your data. Please contact Us if You want information how to port Your data elsewhere. This right only applies to personal data that You have provided to Us as the Data Controller. The data must be held by Us by consent or for the performance of a contract.

The right to object
You have the right to object to AURORA WORLD processing Your data even if it is based on Our legitimate interests, direct marketing (including data aggregation), and processing for the purposeless of statistics. If You wish to object please contact Us.

The right to withdraw consent
If You have given Us Your consent to process Your data but change Your mind later, You have the right to withdraw Your consent at any time, and AURORA WORLD must stop processing Your data. If You want to withdraw Your consent, please contact Us.

The right to complain to a Supervisory Authority
You have the right to complain to the Personal Data Protection Office if You that considers that AURORA WORLD processes personal data contrary to the provisions of the GDPR and We has not responded to Your requests to solve a problem. You can find their contact details here:

7. Transfer of personal data to third countries

The personal data that AURORA WORLD collect from You may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by organisations operating outside the EEA who work for Us or provide Us services. We put in place appropriate protections to make sure Your personal data remains adequately protected and that it is treated in line with this Notice. These protections include, but are not limited to, appropriate contract clauses, such as standard contract clauses approved by the European Commission , and appropriate security measures.

Transfer of personal data to Canada is necessary for carrying out the contract of the visa agency. The European Commission’s decision of 20th December 2001 stated that Canada offers an adequate level of data protection by its domestic legislation or of the international commitments it has entered into.

The client has the right to obtain a copy of the data transferred by AURORA WORLD.

8. Information on voluntary data submission

Providing personal data is entirely voluntary. However providing data is a condition for concluding a visa contract with AURORA WORLD or it is necessary to achieve the objectives arising from the legitimate interests of AURORA WORLD. Failure to provide all the data in the form will prevent conclusion and execution of the indicated contract.

9. Protecting Your personal data

We know how important it is to protect and manage Your personal data. We take appropriate security measures to help protect Your personal data from accidental loss and from unauthorised access, use, alteration and disclosure.

10. About cookies and similar technologies

Cookies are small data files that allow a website to collect and store a range of data on Your desktop computer, laptop or mobile device. Cookies help Us to provide important features and functionality on our websites and mobile apps, and We use them to improve Your customer experience. Please see our separate Cookie notice

11. Changes to our Notice

This Notice replaces all previous versions. We may change the Notice at any time so please check it regularly on our website for any updates. If the changes are significant, We will provide a prominent notice on our website including, if We believe it is appropriate, electronic notification of Privacy Notice changes.

Last update: November 2018