Privacy policy

DRAFT VERSION for approval by the Foundation. Passages marked [TO BE CONFIRMED] require a decision by the Foundation before publication.

1. Data controller

The controller of personal data provided through the niemozliwego.pl website is Fundacja Pomocy Dzieciom "ULICA", ul. Św. Huberta 2, 40-543 Katowice, KRS 0000253040, NIP 2220812557, REGON 240328909 (hereinafter: the Foundation).

Contact regarding personal data: biuro@fundacjaulica.pl, tel. +48 512 577 677, or by post to the Foundation's address.

[TO BE CONFIRMED] The Foundation has not appointed a Data Protection Officer.

2. What data we process and for what purpose

  • Contact form - first name, last name, e-mail, phone and message content - to reply to your message (Art. 6(1)(f) GDPR - the Foundation's legitimate interest in conducting correspondence).
  • Registrations for training, supervision, conferences and events, Masterclass registrations - the data indicated in the form (including first name, last name, e-mail, phone, workplace, invoice details) - to accept the registration, organise participation and settle payment (Art. 6(1)(b) GDPR - steps prior to entering into a contract and its performance; for invoices, Art. 6(1)(c) GDPR - legal obligation).
  • Volunteer applications - the data indicated in the form, including information required by child protection regulations - to carry out recruitment and conclude a volunteering agreement (Art. 6(1)(b) and (c) GDPR).
  • School applications for research and programmes - contact details of the school and contact person - to process the application and deliver the programme (Art. 6(1)(f) GDPR).
  • Orders for materials from the Foundation's shop - order, invoice and shipping details - to fulfil the order (Art. 6(1)(b) and (c) GDPR).
  • Newsletter - e-mail address - to send information about the Foundation's activities (Art. 6(1)(a) GDPR - consent, which you may withdraw at any time).
  • Website security - IP address and browser information recorded when a form is submitted - to protect the website against spam and abuse (Art. 6(1)(f) GDPR).
  • Visit statistics (Google Analytics) - only with your consent given in the cookie window (Art. 6(1)(a) GDPR).

3. Donations and payments

Online payments and donations are handled by Tpay, operated by Krajowy Integrator Płatności S.A., based in Poznań. When you proceed to payment, you provide your data directly to the payment operator, which processes it in accordance with the rules described in the Tpay privacy policy. The Foundation receives the information necessary to record the payment.

4. How long we keep data

[TO BE CONFIRMED - proposal]

  • contact form correspondence - up to 12 months after the matter is closed,
  • registrations for training and events - for the duration of their delivery and then until the limitation period for claims expires (as a rule 3 years, in accordance with the Civil Code),
  • accounting documents - for 5 years from the end of the calendar year in which the tax payment deadline expired (Tax Ordinance),
  • data processed on the basis of consent - until consent is withdrawn.

5. Who we share data with

Data may be received by entities that provide services to the Foundation and act on its behalf: the website and e-mail hosting provider (SEOHOST), the Foundation's e-mail provider [TO BE CONFIRMED], the accounting office [TO BE CONFIRMED] and, once you have consented to analytics cookies, Google Ireland Limited (Google Analytics). We do not sell personal data.

In connection with the use of Google services, data may be transferred to the USA. Google applies mechanisms provided for in the GDPR, including standard contractual clauses and participation in the EU-U.S. Data Privacy Framework.

6. Cookies

The website uses cookies and browser storage:

  • essential - among other things, to remember your cookie choice; they are always active,
  • analytics - Google Analytics, activated only after you give consent.

You can change your consent at any time by clicking the cookie icon in the bottom left corner of the screen. YouTube videos are loaded only after you click, in privacy-enhanced mode (youtube-nocookie.com).

7. Your rights

You have the right to access your data, rectify it, erase it, restrict its processing, data portability and to object to processing based on legitimate interest. You can withdraw your consent at any time - this does not affect the lawfulness of processing carried out before its withdrawal. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (uodo.gov.pl).

8. Voluntary provision of data

Providing data is voluntary, but without the data marked as required in the form we will not be able to accept your registration or reply to your message.

9. Changes to the policy

The policy may be updated, e.g. when the tools used on the website change. Date of last update: [TO BE COMPLETED on publication].

Legal bases and sources