Privacy policy

Identity of the Controller

The controller of personal data is Fundacja Warta Uwagi, Poland, Mazowieckie, 26-600 Radom, ul. Warszawska 70, KRS: 0000979215, NIP: 9462718535, responsible for ensuring the operation of the website wartauwagi.pl. In the remainder of this Privacy Policy, we refer to ourselves as the “Foundation” or the “Controller”.

Contact details of the Controller

You can contact the Controller:

• by email at: biuro@wartauwagi.pl
• by post – by sending correspondence to the Foundation’s address:

  Fundacja Warta Uwagi Poland, Mazowieckie, 26-600 Radom, ul. Warszawska 70

Purpose and legal basis of processing

Personal data will be processed:

• based on Article 6(1)(f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), i.e. our legitimate interest, for the purpose of:
  • responding to your message or resolving the issue you raised,
  • marketing purposes consisting of promoting our services and ourselves,
  • defending against potential claims related to donations,
  • handling complaints and requests.
• based on Article 6(1)(b) GDPR for the purpose of:
  • performance of a contract for the provision of services (execution of a donation agreement, payment confirmation).
• based on Article 6(1)(c) GDPR for the purpose of:
  • fulfilling legal obligations imposed on the Foundation related to accounting documentation.

What data do we process?

If you make donations via our website, we collect basic data necessary to process payments: name, surname, company name, tax ID (NIP), and correspondence address, email address or phone number, as well as payment data such as payment amount and bank account number from which the payment was made. Payment service providers share this data with us.

If you contact us, we may process the data you provide: name and surname, correspondence address, email address, phone number, and any information you provide during contact.

Who do we share or entrust data with?

Your personal data may be transferred to entities with which we cooperate. As part of our activities, we also work with external service providers. Personal data may be shared with them only for the purposes listed below. We use providers who process personal data solely on our instructions (e.g. hosting providers, accounting services, e-payment providers). Your personal data is processed solely to enable service provision, support and technical issue resolution, complaint handling if submitted, responding to your requests, improving services, storing data for archival purposes, and ensuring accountability. Additionally, legal regulations require us to process your data for tax and accounting purposes. Data may be transferred to payment companies to complete transactions. We ensure that we do not sell or share your data with other companies or organizations. Under no circumstances will your email address or other data be used for any other purpose without your consent.

Social plugins

Our website uses plugins from various social networks. When you visit pages containing social plugins, your browser establishes a direct connection with the social network servers. The plugin content is transmitted directly to your browser and integrated into the page. When the plugin is enabled, the social network receives information that the user has visited a specific page. If you are logged into one or more social networks, they may associate the visit with your account. If you use a plugin (e.g. clicking “Like”), your browser sends the information directly to Facebook, where it is stored.

Some social networks may transfer user data outside the European Economic Area. For detailed information on data processing purposes and scope, please refer to the privacy policy of the respective platform. There you can also find information about your rights and privacy settings.

We may process your personal data: username or full name (if visible on your profile), image, comments, or reactions to our posts if you visit our social media accounts (Facebook, Instagram, LinkedIn, YouTube, TikTok, X). Data is processed based on Article 6(1)(f) GDPR for the purpose of promoting the Foundation’s activities.

Your personal data will be processed until you stop following our social media accounts, delete your comments, or unfollow us.

Data retention period

Personal data will be stored for the time necessary to perform the donation agreement, respond to inquiries or resolve issues you raise, as well as for the duration of our marketing activities or until you object to further processing for marketing purposes. Accounting records containing personal data are stored for 5 years from the end of the calendar year in which the donation was made.

Rights of data subjects

• You have the right to access your personal data and obtain a copy (Art. 15 GDPR).
• Right to rectification (correction) of your personal data (Art. 16 GDPR).
• Right to erasure (“right to be forgotten”) – Art. 17 GDPR. Despite requesting deletion, we may retain certain data where processing is necessary to establish, pursue, or defend claims or to comply with legal obligations. This includes: name, surname, email address (for complaint handling and claims), and correspondence/address data.
• Right to restriction of processing (Art. 18 GDPR).
• Right to lodge a complaint with the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw.
• Right to data portability (Art. 20 GDPR).
• Right to object to processing (Art. 21 GDPR).

Voluntary or mandatory provision of data

Providing personal data during email or telephone contact is voluntary but necessary to respond to your inquiry. Providing data for donation processing is voluntary but necessary to execute the agreement.

Transfer of data outside the EEA

As a rule, your personal data will not be transferred outside the EEA. Data is stored on servers located within the European Union. However, data may be transferred to third countries (USA) in connection with social media activities.

Automated decision-making (including profiling)

Your data will not be processed in an automated manner and will not be profiled.