Privacy Policy
OF THE ROBERT DOBRZYCKI FOUNDATION
for the website https://rdfoundation.org/
I. GENERAL INFORMATION
- The controller of your personal data is the Robert Dobrzycki Foundation, with its registered office in Warsaw, at Rondo Daszyńskiego 1, 00-843 Warsaw (hereinafter the “Foundation” or the “Controller”).
- This Privacy Policy sets out the rules for the collection and processing of personal data and the rules for the use of cookies on the website https://rdfoundation.org/ (hereinafter: the “Website”).
- Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), the Act on the Provision of Services by Electronic Means, and the Electronic Communications Law Act.
- Contact with the Controller on matters relating to the protection of personal data:
e-mail: [email protected]
postal address: Rondo Daszyńskiego 1, 00-843 Warsaw - The Foundation has not appointed a Data Protection Officer. All matters concerning personal data should be directed to the e-mail address indicated above.
II. WHAT DATA WE COLLECT AND FOR WHAT PURPOSE
1. Data provided voluntarily
When using the Website (e.g. by sending a message via the contact form, subscribing to the newsletter or using other functions), you may provide data such as:
- first name and surname,
- e-mail address,
- the content of the message,
- other contact details necessary to provide the services, which you will be asked to provide.
This data is processed in order to fulfil your request, contact you and for informational purposes.
2. Technical data
Information about how the Website is used is collected automatically, as well as technical data, including:
- IP address (partially anonymised),
- data concerning the device and browser,
- operating system,
- data concerning the session and activity on the Website.
This data is used for statistical and technical purposes – e.g. to administer the Website and ensure its security.
Providing data is voluntary but necessary in order to use the contact form, obtain a response to a submitted enquiry, or receive the newsletter. Failure to provide the data will make it impossible to perform these functions.
III. PURPOSES AND LEGAL BASES FOR PROCESSING
The Foundation processes personal data lawfully on the following bases:
- Handling enquiries and correspondence – on the basis of Article 6(1)(b) GDPR (steps taken with a view to concluding a contract) or Article 6(1)(f) GDPR (the legitimate interest of the Controller consisting in conducting communication).
- Sending the newsletter and information about the Foundation’s activities – on the basis of Article 6(1)(a) GDPR (consent).
- Keeping statistics and analysing traffic on the Website – on the basis of Article 6(1)(f) GDPR (the legitimate interest of the Controller consisting in optimising the Website).
- Ensuring the security of the Website and IT systems – on the basis of Article 6(1)(f) GDPR.
- Fulfilling legal obligations – on the basis of Article 6(1)(c) GDPR.
IV. DISCLOSURE OF DATA
- Personal data may be disclosed solely to authorised employees and to entities processing data on the Foundation’s behalf (e.g. providers of technical tools), only to the extent necessary to achieve the purposes for which the data was collected.
- The data is not sold or transferred to third parties for marketing purposes without your explicit consent.
- Personal data processed in connection with the use of the Website is not transferred outside the European Union or the European Economic Area (EU/EEA).
- All data is processed and stored solely on servers located within the EU/EEA.
Should this situation change, the Foundation undertakes to update this Privacy Policy beforehand and to ensure the appropriate safeguards required by the provisions of the GDPR.
V. COOKIES AND SIMILAR TECHNOLOGIES
I. Cookies Policy
Cookies and other traffic-monitoring technologies
Does the Website use cookies?
The Website uses cookies and other traffic-monitoring technologies. By starting to use the Website without changing the settings of the device and software used to access the Website in a way that prevents the receipt of cookies, the User consents to receiving unique cookies, which will be saved in the memory of their computer or other device in order to ensure the correct operation of the Website and to fulfil the further purposes of their use. Such files may be generated and saved in the memory of the device used by the User, both by the Website and by third-party systems associated with the Website.
What are cookies?
Web browsers may store text files – so-called cookies – on the disk of the computer or other device used by the internet user. Cookies store information necessary for the proper functioning of websites, in particular those that use authorisation mechanisms. The purpose of such files is to ensure the correct functioning of the Website and the services available through it, in particular services available after logging in. Cookies also make it possible to analyse Users’ activity on the Website. Cookies may be of a session nature (present in the browser and device until the User leaves the Website) or of a permanent nature (they remain in the browser and device according to the file’s parameters or until they are manually deleted, and may be generated or updated e.g. on each visit to the Website).
The cookies used by the Website collect information about Users. Such information is collected solely for the purposes of ensuring the correct operation of the Website and for analytical, statistical and marketing purposes, as well as to improve the quality of the services provided and to tailor services and information to the User.
Not all traffic-monitoring technologies used by the Website consist solely in saving cookies on the User’s device. Some of them consist in analysing information received by the devices and software operating the Website, e.g. information concerning the device and software used by the User, including the operating system and web browser, and other information of this kind whose transmission results from the technical solutions and standards operating on the Internet. Depending on the technology applied, the data obtained through its use may be combined with data obtained through the use of other tools, including cookies.
Detailed information on the traffic-monitoring technologies and cookies used by the Website.
Is this necessary?
Every User may prevent cookies from being placed in the memory of their device. To do so, use the option to disable this mechanism, which is available in every web browser. It is worth remembering, however, that not accepting cookies in the web browser may limit or entirely prevent the correct use of the Website, the services made available through it, and other websites and services made available through the Website.
Setting the web browser in a way that allows cookies to be placed in the device’s memory is regarded as the User’s consent to the use of cookies by the Website.
Below are links to information on how to change cookie settings in the most popular browsers:
- Firefox
- Chrome
- Internet Explorer
- Microsoft Edge
- Opera
- Safari
Social media
Within the Website, technologies made available by social media providers are used in various ways, e.g. to share content posted on the Website, to promote the Website and to improve its operation. The Website contains links to popular online services such as Facebook, Twitter, LinkedIn, YouTube, Vimeo, Instagram and Pinterest. The Website may also periodically contain a plugin of the Facebook online service.
User registration and the Facebook plugin
The Facebook service belongs to Facebook Inc., with its registered office at 1601 S. California Ave, Palo Alto, CA 94304, USA.
- The Website makes it possible to create a user account using a Facebook account. Clicking “Log in with Facebook” will cause the browser to automatically establish a connection with the Facebook service, and while logged in to Facebook it is possible to link the content of the Website with a Facebook profile. Through this, Facebook can attribute the visit to our site to a Facebook account. Further information can be found in Facebook’s privacy policy. As part of creating an account, the Website will receive the following data from Facebook:
- E-mail address;
- First name;
- Avatar;
- Facebook ID.
- Like Button plugin
The plugin is located on the so-called “Like Button”, which makes it possible to like the Website on Facebook. Clicking this link will cause the browser to automatically establish a connection with the Facebook service. After clicking the “Like Button”, while logged in to Facebook, it is possible to link the content of the Website with a Facebook profile. Through this, Facebook can attribute the visit to our site to a Facebook account. Further information can be found in Facebook’s privacy policy.
Links to third-party websites
For the benefit of the Website’s Users, we place links leading to other websites on it. We try to select carefully those websites which we are convinced are useful and meet high standards. Nevertheless, we do not guarantee the standards of every website linked to from the Website, nor do we bear responsibility for materials found on other websites.
Please remember that third-party websites linked to from the Website may collect personally identifiable information. The ways in which information is handled on such websites are not subject to this Privacy Policy. We recommend that, after connecting to another website, the User always reviews its applicable privacy policy before voluntarily providing personally identifiable information.
Risks associated with using the website and the technical measures available to users to minimise them
The Foundation ensures that it makes every effort to collect and process the data provided by Users with due care and in a manner ensuring a high level of security. The Foundation implements measures aimed at protecting personal data against loss, misuse and unauthorised access, disclosure, modification and destruction. All data concerning a User using an account transmitted via the Internet is encrypted using the HTTPS protocol.
Despite the efforts undertaken, using the Website via the Internet involves risks typical of online activity. In particular, we draw attention to the risks associated with:
- malicious software (e.g. viruses, malware);
- the possibility of unauthorised persons gaining access to the User’s data and the data contained in their account;
- the possibility of false messages being sent, or false pages being created that deceptively resemble the Website, used to phish the User’s data, including their password;
- the possibility of data flowing through the network being intercepted.
In order to minimise the risks indicated above, we recommend following security rules when using the Internet – in accordance with the principle of limited trust:
- You should use only verified networks and devices:
- where possible, the User should use only trusted devices that they own, on trusted networks, and avoid public networks that many people or unidentified persons have access to (e.g. public Wi-Fi networks);
- it is recommended that the User adequately secures the device they use (e.g. with antivirus software and properly configured firewalls) as well as the transmission of data via it (e.g. using VPN services);
- You should open only verified content:
- in order to log in to the Website securely, check that the correct page has been loaded:
- it is not recommended to navigate to the Website’s login page from search engine results;
- verify the Website’s address and the connection protocol, and in particular whether the address of the login panel page begins with “https://” – which indicates a connection using an encrypted protocol. The login panel address should not begin with “http://”. The use of an encrypted protocol is typically symbolised by a closed padlock icon, which may look different depending on the browser. It is also recommended to make sure that such a symbol is not merely a graphic icon displayed by the page and that it leads to a browser window containing information about the connection and the security certificate;
- it is recommended to verify whether the web browser used by the User regards the connection as secure, whether the security certificate is valid, and whether the certificate information displayed by the browser refers to the Website;
- verify the source of received messages and links, and the addresses to which the sent links actually lead;
- pay particular attention to the reliability of links to pages such as the login page, user panel, data confirmation, etc., received in e-mail messages, via messaging apps, etc. In its e-mail messages, the Website never asks for passwords, logins or other information of this kind sufficient to gain control over an account, nor does it include links to pages requiring such information. The necessary functions and content are available from within the Website;
- in order to log in to the Website securely, check that the correct page has been loaded:
- You should use only appropriate tools:
- it is recommended to use software (programs, applications, etc.) originating from official sources. This applies in particular to the web browser, as it is the basic tool enabling access to the Website;
- use tools that prevent the operation of malicious software;
- update the software used, paying particular attention to security updates;
- the use of unofficial, unverified tools and channels for accessing particular content and services (especially via overlays, plugins and add-ons) is strongly discouraged;
- You should use strong and unique passwords consisting of a combination of upper- and lower-case letters, digits and special symbols.
VI. THIRD-PARTY DATA AND LINKS FROM THE WEBSITE
- If you provide the Foundation with the data of third parties (e.g. contact details of another person), you should obtain their consent to such transfer of data.
- The Website may contain links to external services; the Foundation is not responsible for the privacy protection rules applied outside the Website.
VII. DATA RETENTION PERIOD
- Data processed for the purpose of handling correspondence is stored for the duration of the communication and, after it ends, for a maximum of 12 months.
- Data processed on the basis of consent (e.g. the newsletter) is stored until consent is withdrawn.
- Data processed for accounting, tax or legal purposes is stored for the period required by legal provisions.
- Technical and statistical data is stored for a period of up to 24 months.
VIII. YOUR RIGHTS
In connection with the processing of personal data, you have the following rights:
- Access to personal data – you may exercise the right of access to your data at any time;
- Rectification and completion of data – you have the right to request that the Controller rectify without undue delay your personal data that is inaccurate, and to request the completion of incomplete personal data;
- Right to erasure of data – you have the right to request that the Controller erase your personal data without undue delay in each of the following cases:
- where the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
- where the data subject has withdrawn the consent on which the processing is based and there is no other legal basis for the processing;
- where you object to the processing referred to in point (e) below and there are no overriding legitimate grounds for the processing of this data;
- where the personal data is processed unlawfully;
- where the personal data must be erased in order to comply with a legal obligation provided for in European Union law or Polish law;
- where the personal data was collected in connection with the offering of information society services.
- for exercising the right to freedom of expression and information,
- for compliance with a legal obligation requiring processing under European Union law or Polish law,
- for the establishment, exercise or defence of claims.
- Right to restriction of processing – you have the right to request that the Controller restrict processing in cases where:
- you contest the accuracy of the personal data – for a period enabling the Controller to verify the accuracy of the data;
- the processing is unlawful and you oppose the erasure of the personal data, requesting the restriction of its use instead;
- the Controller no longer needs the personal data for the purposes of the processing, but it is required by you for the establishment, exercise or defence of claims;
- you have objected to the processing referred to in point (e) below – pending verification of whether the legitimate grounds of the Controller override yours.
- Right to object – you have the right to object to the processing of your personal data where the Controller processes this data in its legitimate interest, i.e. processing data for the purpose of direct marketing. The data controller may refuse to uphold the objection if it demonstrates the existence of compelling legitimate grounds for the processing that override your interests, rights and freedoms, or grounds for the establishment, exercise or defence of claims.
- Right to withdraw consent – to the extent that the processing of your personal data is based on your consent, you have the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
- Right to data portability – to the extent that your data is processed for the purpose of concluding and performing a contract, or processed on the basis of consent, and the processing is carried out by automated means, you have the right to receive from the Controller, in a structured, commonly used and machine-readable format, your personal data which you provided before or during cooperation with the Foundation. You also have the right to transmit this personal data to another controller.
- Right to lodge a complaint – you have the right to lodge a complaint about the processing of personal data by the Controller with the supervisory authority, which in Poland is the President of the Personal Data Protection Office.
All the rights indicated above apply to the extent arising from the provisions of the GDPR. You may exercise these rights by sending an enquiry to the e-mail address: [email protected] or the postal address: Rondo Daszyńskiego 1, 00-843 Warsaw.
IX. DATA SECURITY / SPECIAL CATEGORIES OF PERSONAL DATA
- The Foundation applies technical and organisational measures ensuring the protection of data against unauthorised access, loss or disclosure.
- The Controller does not process special categories of personal data, i.e. personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data uniquely identifying a natural person, or data concerning that person’s health, sexuality or sexual orientation; nor personal data relating to criminal convictions, breaches of law or related security measures.
- The Controller does not carry out automated decision-making, including profiling, based on the personal data provided.
X. CHANGES TO THE PRIVACY POLICY
The Foundation reserves the right to make changes to this Privacy Policy in the event of changes in legal provisions, technological developments or organisational changes. The current version of the Policy will be published on the Website. Date of the last update: ……………………….