1. General information

This Privacy Policy sets out the rules for the processing of personal data by the Powszechnego Czynia Foundation (hereinafter referred to as the "Foundation" or "Administrator") in connection with the use of the website, making donations, subscribing to the newsletter, participating in events, projects and social campaigns, as well as contacting the Foundation.

The Foundation takes special care to protect the privacy of donors, project participants, volunteers, partners and all persons using the website.

Personal data are processed in accordance with:

• Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR),
• the Personal Data Protection Act,
• other applicable legal provisions.

The Administrator may update this Policy.

2. Definitions

Administrator – the entity deciding on data processing
Personal data – information about a natural person
Processing – data operations
Processor – entity processing data on behalf of the Administrator

3. Data controller

The administrator of your personal data is: Powszechnego Czytania Foundation
address: ul. Przyokopowa 33, 01-208 Warsaw, registered under KRS numbers: 0000756841, NIP: 7010891702, REGON: 381776001.

4. How do we collect personal data?

We may obtain personal data:

• Directly from you, e.g. when you: make a donation, subscribe to a newsletter, register for an event, contact the Foundation, use forms on the website, volunteer, or participate in competitions or projects.

• Indirectly from other entities, e.g. partners cooperating with the Foundation, payment operators, social networking sites, publicly available sources, employers or institutions represented by you.

• Automatically when using the website, e.g.: IP address, device type, operating system, browser, cookies, statistical data regarding the use of the website.

Providing data is voluntary, but in some cases necessary to perform a service or contract.

5. Scope of data processed

We may process:

• name and surname,
• residential or correspondence address,
• email address,
• phone number,
• company/school/institution details,
• bank account number,
• payment card details (handled by the payment operator),
• data regarding donations,
• data regarding participation in events,
• data regarding activity on the website,
• statistical data,
• data from social media,
• image (if consent is given).

6. Purposes and basis of processing

We process data for the purpose of:

• accepting donations,
• payment processing,
• project implementation,
• contact with donors,
• sending thanks,
• sending the newsletter (with consent),
• informing about the Foundation's activities,
• keeping statistics,
• ensuring the security of the website,
• fulfillment of legal obligations,
• pursuing claims.

We process data pursuant to Article 6 of the GDPR, in particular when:

• you have given your consent – Article 6(1)(a) of the GDPR,
• processing is necessary for the performance of the contract – Article 6(1)(b),
• processing results from a legal obligation – Article 6(1)(c),
• the processing results from the legitimate interest of the Controller – Article 6 paragraph 1 letter f,
• processing is necessary to protect vital interests – Article 6(1)(d).

7. Recipients of your personal data

• Depending on the place and purpose of your data, it may be transferred to: Foundation employees, hosting company, IT providers, payment operators, GetResponse SA provider, accounting firm, law firm, project partners, public institutions.
• The Foundation does not sell personal data.

8. Donations and Payment Processors

• In the case of donations, data may be transferred to payment operators: PayU SA, Stripe Payments Europe Ltd., PayPal, PayPro SA.
• Payment operators are separate data controllers for payment processing.
• The Foundation does not store full payment card details.
• Data is transferred solely for the purpose of payment processing.

9. Newsletter and marketing communications

If you consent or subscribe to our newsletter, we may send you information about the Foundation's activities, projects, events and opportunities to support it, as well as promotional materials.

Consent may be withdrawn at any time via: link in the newsletter, contacting the Foundation.

We use the Get Response platform to manage our newsletter.

Data may be stored outside the EEA using standard contractual clauses.

10. WordPress, Hosting, and Technical Tools

The website runs on WordPress and can use:

• hosting services,
• plugins,
• analytical tools,
• marketing tools,
• integration with social media.

Providers of these services may process data only on the instructions of the Controller.

11. Cookies and analytical tools

The website uses cookies to:

• proper functioning of the website,
• keeping statistics,
• security,
• content matching,
• marketing,
• improving the functioning of the website.

You can change cookie settings in your browser. Details can be found in Cookies Policy

We may use external tools:

• Google Analytics
• Meta / Facebook Pixel
• marketing tools
• WordPress tools

12. Data transfer outside the EEA

Data may be transferred outside the EEA only using safeguards consistent with the GDPR, in particular: standard contractual clauses, decisions of the European Commission, and the consent of the individual.

13. Data storage period

We store data for the period: required by law, for the duration of the consent, for the duration of the cooperation, required for settlements, necessary to pursue claims, and resulting from tax and accounting regulations.

14. Data security

We use technical and organizational measures to protect data against: loss, access by unauthorized persons, disclosure, and destruction.

15. Rights of the data subject

We inform you that you have the right to: 

• request access to your personal data 
• request data rectification, 
• requesting the completion of incomplete personal data, including by providing an additional declaration, 
• deletion of data or restriction of processing, 
• object to the further processing of your personal data, 
• transfer of your personal data, 
• obtain a copy of your data,
• The right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing your data based on consent before its withdrawal. 
• lodging a complaint with the supervisory authority responsible for personal data protection, which is: the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.

16. Contact details

In case of any questions, doubts or comments regarding the information contained in this Policy or other issues related to the Processing of Users' Personal Data by the Controller, including for the purpose of exercising the rights referred to in point 15 of this Policy, please contact the Data Protection Officer by e-mail at the following address: [email protected] or by traditional mail to the following address: Data Protection Inspector, Powszechnego Czytania Foundation, ul. Krakowskie Przedmieście 87/89, 00-079 Warsaw.