§ 1 Preliminary information
- In this document you will find the rules for the processing of personal data in connection with the use of the website https://4liberty.eu/, hereinafter: “Service“)
- The information is provided on the basis of Article 13 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Data Protection Directive) (General Data Protection Regulation), (hereinafter: “GDPR“).
- The owner of the website and the administrator of your personal data is Fundacja Liberte!, hereinafter referred to as the “Service Owner” or “Personal Data Administrator”).
- If you have any doubts related to the processing of your personal data or the content of the Privacy Policy, you can contact me at any time at the following e-mail address: info@4liberty.eu
§ 2 Purposes and legal basis for the processing of personal data
Personal data will also be processed by the Administrator for the purposes of:
- provision of services offered on the Website – legal basis of Article 6(1)(b) of the GDPR,
- proper performance by the Administrator of the agreement for the provision of services by electronic means – legal basis Article 6(1)(b) GDPR,
- responding to messages received by email or correspondence or establishing further cooperation based on the message – legal basis of Article 6(1)(f) GDPR. The legitimate interest is to contact the person sending the message in order to respond or establish cooperation,
- providing answers to questions and issues presented during a telephone contact with the Administrator or to establish further cooperation on the basis of a conversation – legal basis Article 6(1)(f) GDPR. The legitimate interest is to answer issues and questions presented during the conversation or to establish cooperation,
- Consideration of possible complaints, defense against reported claims that may arise in connection with the Administrator’s provision of services, including electronic services, or with regard to the processing of personal data – legal basis Article 6(1)(f) GDPR. The legitimate interest is the defense of the Administrator against claims and the processing of complaints,
- pursuing claims and take collection actions if the Administrator has the right to do so – legal basis of Article 6(1)(f) of the GDPR. The Administrator’s legitimate interest is to pursue claims,
- collecting data and sending the newsletter – legal basis article 6(1)(a) GDPR – consent of the data subject,
- performing ongoing analysis of the Service and to ensure its proper operation and improve its security – legal basis Article 6 (1) (f) GDPR,
- marketing purposes – legal basis article 6(1)(a) GDPR – consent of the data subject,
The purpose of processing the personal data provided in the Contact Form is to establish contact with the person completing the Form and to respond in accordance with the information provided in the Form – based on Art. 6 section 1 letter f of the GDPR, i.e. legally
legitimate interest pursued by the Administrator. The legitimate interest is contact with the person filling out the form and fulfilling the request.
Your data may̨ also be processed for the following collateral purposes: archiving of data and maintenance of compilations, analysis and statistics – legal basis Article 6(1)(f) GDPR, consisting of maintenance of internal compilations and statistics of its customers and completed orders by the Data Administrator.
§3 Categories of processed data:
The Data Administrator processes your personal data, i.e.:
- identification data: first name, last name, nickname or social media nickname,
- address and contact data: phone number and email address,
- bank account or payment card number (in the case of a donation),
In the case of processing the data indicated in the contact form, the Administrator will also process the data provided to him in the content of the form.
If you make contact or establish cooperation and enter into a contract in the framework of your business activity, the Administrator will also process the name of your company or the company you represent, the address of your registered office and your VAT number, identification number or another, which will be processed for the purpose of executing the contract or for billing purposes (e.g. issuing an invoice).
§4 Source of data:
Administrator collects personal data only from data subjects.
Provision of personal data is voluntary, but necessary for the Administrator to provide services to you and necessary for the execution of the concluded contract or to undertake a contact.
§5 Period of data storage:
Your personal data will be processed by the Data Administrator:
- to perform the contract and provide services – for the duration of the contract,
- to respond to the message received by email or correspondence – until the end of the correspondence between the parties or the end of the cooperation undertaken based on the message,
- to respond to questions and issues presented during telephone contact with the Administrator – until the end of the telephone conversation or termination of cooperation undertaken based on the conversation,
- for the purpose of considering possible complaints, defense against claims raised – until the statute of limitations for potential claims against the Administrator,
- to pursue claims and take collection actions if the Administrator is entitled to do so – until the statute of limitations for potential claims,
- for the purposes of compiling statements, analyses and statistics- for the duration of the contract, and then no longer than the period after which the statute of limitations for claims arising from the contract expires,
- for archival and accounting purposes – after the expiration of the contract, personal data shall be processed for a maximum period of 5 years, unless a shorter period is provided for by law.
Data processing of which is based on consent will be processed until it is withdrawn. The withdrawal of consent does not affect the legality of processing that was carried out on the basis of consent before its withdrawal.
§6 Recipients of data:
Your personal data may be shared with entities cooperating with the Data Administrator for the purpose of performing the contract concluded with you. In particular, the data processed by the Data Administrator may be accessed by its employees and associates.
Your personal data may also be accessed by other entities performing tasks commissioned by the Administrator, which are related to the Administrator’s business activities, such as:
- Website hosting,
- maintenance of the website and maintenance of the IT systems in which the data is processed,
- providing analytical, IT, legal services, etc.
All entities to which the Administrator entrusts the processing of personal data shall guarantee the application of appropriate measures for the protection and security of personal data required by law.
§7 Rights of data subject:
The data subject is entitled to:
- access to personal data,
- correction of data (The Administrator will comply with a data subject’s request to edit and update incorrect personal information promptly and in most cases within 30 days from the receipt of the request for correction.),
- delete or restrict processing (in cases provided by law),
- data portability at a data subject’s request (does not apply to data that constitute a business secret, shall not adversely affect́ the rights and freedoms of others, including trade secrets or intellectual property, and shall be exercised to the extent technically possible),
- object to their processing (Where the Administrator processes a data subject’s personal information based upon the lawful basis of legitimate interest, then the individual has the right to object to this processing).
- lodge a complaint to the supervisory authority. If a data subject is not satisfied with the Administrator’s response, they have the right to complain to or seek advice from a supervisory authority and/or bring a claim against the Administrator in any court of competent jurisdiction.
- withdraw consent – a data subject who has provided the Administrator with consent to process their personal information has the right to withdraw any consent previously provided to the Administrator at any time. If a data subject withdraws their consent, this will not affect the lawfulness of the Administrator’s collecting, using and sharing of their personal information up to the point in time that consent was withdrawn. Even if a data subject withdraws their consent, the Administrator may still use the information that has been anonymized and does not personally identify the data subject.
You can exercise your rights under GDPR (Articles 16 – 21) by contacting the Data Administrator by mail: info@4liberty.eu
§8 Automated decision-making, profiling
Data Subject will not be subject to decisions with a legal or similarly significant effect (including profiling) that are based solely on the automated processing of their personal data.
§9 Transfer of data to a third country or international organization
The Administrator does not transfer personal data to a third country or international organization.
§10 Security
The data controller guarantees the confidentiality of any personal data provided to it. Technical and organizational measures are used to ensure the protection of the processed data in accordance with the requirements set forth in applicable laws related to the protection of personal data. Personal data are collected with due diligence and properly protected against access by unauthorized persons.
The Administrator collects and processes only the necessary personal data and for the shortest possible time, and for any activity not related to the performance of the sales contract or the provision of services you must give separate consent.
§ 11 Final provisions
- In the event of a change in the applicable privacy policy, in particular when required by the technical solutions used or changes in the legal provisions regarding the privacy of data subjects, appropriate modifications will be made to this Privacy Policy, which will be effective within 14 days of their publication. on the Website.
- In all matters related to the Privacy Policy, as well as with all questions related to personal data, please contact us electronically at the e-mail address provided in this Privacy Policy.