Privacy and Personal Data Protection Policy
What is the Privacy Policy?
The Privacy Policy defines the rules for the processing and protection of personal data provided by Users in connection with their use of the website available at https://forumamputacji.pl/.
Who is the Controller of Users’ personal data?
The Controller of the personal data of Website Users is the Znowu w Biegu Rehabilitation Centre Foundation (“we”, “us”). You can contact the Controller at the registered office address: ul. Odrzańska 13/2, 30-408 Kraków, e-mail: centrum@znowuwbiegu.pl.
How do we collect your personal data?
The Website performs functions related to obtaining information about Users and their behaviour in the following ways:
- through data voluntarily entered in forms available on the Website, including: conference registration form, contact form, donation form, Newsletter subscription form,
- through tracking codes monitoring traffic on the website (including, among others, cookies stored on end-user devices),
- through saving information about connection parameters (including time stamp, IP address, device information).
For what purpose and on what legal basis do we process your personal data?
We process Users’ personal data for the following purposes:
- providing website services – for this purpose, we process information such as: IP address, cookie information, web browser data, data concerning activity on our website, session data (legal basis: Article 6(1)(a) and (f) of the GDPR),
- handling a matter or providing a response to a question or request submitted to us via e-mail or contact forms (legal basis: Article 6(1)(f) of the GDPR),
- conducting quality analyses of the services we provide in order to improve their functionality and preparing statistics on the use of our website using cookies, IP addresses, web browser data, website activity data and session data (legal basis: Article 6(1)(f) of the GDPR),
- accepting, processing and recording donations made to the Foundation, fulfilling the Controller’s legal obligations related to this process, as well as establishing and pursuing claims and defending against claims (legal basis: Article 6(1)(b), (c) and (f) of the GDPR),
- sending marketing and promotional information regarding the Controller’s activities electronically to the provided e-mail address – only on the basis of the consent given (legal basis: Article 6(1)(a) of the GDPR).
Do you have to provide us with your personal data?
Providing personal data is voluntary, but necessary to achieve the above-mentioned purposes related to correspondence, maintaining the website, or receiving marketing information from us. Providing personal data by a donor is voluntary, but necessary to make a donation through the online form and to fulfil obligations related to its processing.
For how long will we process your personal data?
Users’ personal data will be processed:
- until the use of our website ends – in the case of providing website services,
- for the duration of correspondence and may be deleted by the Controller at any time after a request for deletion has been submitted,
- in the case of processing donors’ data, for the period necessary to achieve the purpose, and thereafter for tax and accounting purposes – for a period of 5 years from the end of the calendar year in which the tax payment deadline expired, and for the purposes of possible establishment or pursuit of claims or defence against claims – for a period of 3 years, and in the case of ongoing proceedings, until their final conclusion and until the limitation period for claims expires,
- until consent is withdrawn, if processing is carried out on the basis of consent given to us.
Who will we share your personal data with?
Recipients of personal data may include entities authorised under applicable law.
Users’ personal data may also be transferred to entities processing it on our behalf and under a data processing agreement, including:
- IT service providers,
- entities providing marketing services or website and electronic mail hosting services for us.
Recipients of donors’ data in connection with making a donation will include electronic payment operators handling the transferred donations.
What are your rights in relation to the processing of personal data?
Website Users have the right to:
- access their personal data,
- receive a copy of their personal data,
- rectification of personal data,
- deletion of personal data,
- restriction of processing of personal data,
- data portability,
- object to the processing of personal data,
- withdraw consent to the processing of personal data at any time without affecting the lawfulness of processing carried out before its withdrawal – if processing is based on consent given to us,
– in cases and under conditions specified in the GDPR.
You may exercise the above rights by contacting the Controller.
Users also have the right to lodge a complaint with the President of the Personal Data Protection Office if they believe that their personal data is processed by us in breach of GDPR provisions.
How do we protect your data?
To ensure the security of entrusted personal data, we have implemented procedures designed to prevent breaches of personal data security. These procedures comply with applicable law, in particular:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (GDPR),
- the Act of 10 May 2018 on Personal Data Protection.
We protect Users’ personal data using measures such as:
- encryption and access control,
- regular backups and software updates,
- firewalls and intrusion detection systems,
- physical security measures and employee training.
Links to other websites.
Our service may contain links to other websites. Such websites are not supervised by us in any way. These websites may have their own privacy policies and terms and conditions, which we recommend reviewing.
Information about cookies
The Website uses cookies, which are IT data, in particular text files, stored on the User’s end device and intended for use with websites. Cookies usually contain the name of the website they originate from, the period for which they are stored on the end device, and a unique identifier. Cookies are used to remember user settings.
The User has the right to decide on the extent to which cookies can access their device. At any time, you can change your settings or select detailed preferences regarding cookie types.
Cookie management is possible by changing your web browser settings. However, please note that restricting the use of cookies may affect some functionalities available on our services.
