Pursuant to Article 13(1)-(2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU L 119, p. 1) – hereinafter GDPR – we inform you that the controller of your data is PRZEKRÓJ Foundation, based in Warsaw. You may contact us by:
The Administrator has appointed a Data Protection Officer with whom you may contact in writing, by regular mail at: IOD, PRZEKRÓJ Foundation, Aleja Róż, 10/12 00-556 Warsaw, or email: [email protected].
Your data may be processed for the following purposes:
If you have entered into a contract with us, purchased products from our online store, made a subscription order, or set up a usage account, we process your data on the basis of Article 6(1)(b) of the RODO, i.e. in connection with the performance of the contract for the purpose of its execution, communicating about its performance by e-mail, telephone calls and traditional, paper correspondence. If you are a representative of our Client/Contractor or a person appointed to contact us on behalf of the Client/Contractor, we process your personal data for the purpose of business contact, which is our legitimate interest (Article 6(1)(f) RODO). Business contact for us is all electronic and paper correspondence, as well as telephone contact regarding the concluded cooperation and the service provided, in particular making arrangements, arranging business meetings, answering questions, directing information from our side.
We keep the data processed for contact purposes for the time necessary for the execution of the contact/answering of questions, and then for 2 years from the moment of resolution of the matter or termination of the contact. Data necessary for the execution of a contract/resolution of a complaint are processed for the time necessary for its execution, and then until the statute of limitations for mutual claims that may arise from the conclusion of the contract.
Provision of personal data is necessary for the execution of the contract. If you do not provide the data, we will not be able to fulfill the order Provision of data of persons representing the Customer/Contractor is voluntary, nevertheless, without personal data we will not be able to contact you regarding the execution of the order.
We also process contract-related data for tax and accounting purposes, in which case the legal basis is Article 6(1)(c) of the RODO in connection with the Accounting Act of September 29, 1994, the Act of August 29, 1997. – Tax Ordinance and the Value Added Tax Act of March 11, 2004. We process the data within the statutory deadlines. Provision of data is necessary. Failure to provide them will prevent us from fulfilling our legal obligations.
If you contact us by email, through contact forms or through a phone call in order to obtain information about our products, arrange an appointment, get more information about our offer, we process your personal data on the basis of the Administrator’s legitimate interest from Article 6(1)(f) of the RODO, which we consider to be answering an inquiry, maintaining a conversation, providing information. We keep the data processed for contact purposes for the time necessary to complete the contact/answer questions/send the requested material, and then until the end of the calendar year following the year in which the resolution of the case took place or the contact ended. We keep correspondence for such a period of time for the purposes of evidence, securing or defending against claims, which is our legitimate interest as referred to in Article 6(1)(f) of the RODO. Provision of personal data is voluntary, nevertheless, failure to do so will result in our inability to fulfill the purposes of responding to your inquiry etc.
In connection with its business activities, the Administrator collects personal data, e.g. during business meetings or through the exchange of business cards, via LinkedIn, etc., to be able to initiate and maintain business contacts. Such data is processed in order to realize the legitimate interest of the Administrator and its Contractor from Article 6(1)(f) of the RODO, consisting of networking in connection with business activities. We process the data for the duration of the Administrator’s legitimate interest, unless an objection to the processing of the data is made beforehand. Providing personal data is voluntary, failure to do so will prevent us from fulfilling the contact.
We use personal data processed for the purpose of sending a newsletter, which is a database of news about our activities, on the basis of the Administrator’s legitimate interest from Article 6(1)(f) of the RODO in connection with expressed consent to receive commercial information by electronic means from Article 10 of the Act on Providing Services by Electronic Means. We process personal data until you object to the processing or until you withdraw your consent. Providing data is voluntary, however, it is necessary to receive the newsletter. Failure to provide data will prevent us from sending you such information.
In the case of consent to receive marketing/trade information from the Administrator via e-mail and/or telephone, personal data is processed for the purpose of providing the aforementioned information. The legal basis for the processing of personal data is consent under Article 6(1)(a) of the RODO in connection with Article 10 of the Act on Providing Services by Electronic Means and Article 172 et seq. of the Act, Telecommunications Law to the extent of certain forms of contact and the legitimate interest of the Administrator under Article 6(1)(f) of the RODO in connection with direct marketing. If personal data are processed for the purposes of direct marketing, the data subject has the right to object at any time to the processing of his or her personal data for such marketing, to the extent that the processing is related to direct marketing. We use data processed on the basis of consent until the consent is withdrawn. Consent can be withdrawn at any time by writing to: [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. We use data related to the above purpose until you object to the processing or withdraw your consent as mentioned above. Provision of data is voluntary, however, lack of data will prevent us from sending marketing messages, which will lead to ignorance of our latest offers or promotional actions.
We use the personal data processed in connection with the submitted complaint on the basis of Article 6(1)(f) of the RODO, which is the realization of our legitimate interest to duly consider and handle claims. If special category personal data is provided in the claim, we will process this data on the basis of Article 9(2)(f) of the RODO. We will process this data until the claim is processed and for the necessary time after the claim process is completed for evidentiary purposes. Providing the data is necessary for the complaint process. Failure to provide the data will prevent us from processing the complaint.
When the need arises, we may process personal data for the purposes of investigating, establishing claims or defending against claims – on the basis of Article 6(1)(f) of the RODO – which should be understood as the realization of the Administrator’s legitimate interest in asserting its property or non-property rights or protecting against claims directed against the Administrator – until the expiration of the statute of limitations for possible claims, and in the case of the initiation of proceedings – until their final legal conclusion. Providing personal data is necessary, failure to do so will prevent us from fulfilling our legitimate interests.
We have social network plug-ins Facebook, Instagram, Twitter, Vimeo, YouTube, LinkedIn for the purpose of contacting their users and presenting content prepared by the PRZEKRÓJ Foundation on these portals and promoting our own activities (including: informing about new events), as well as for analytical and statistical purposes, which constitutes a legitimate interest of the PRZEKRÓJ Foundation from Art. 6(1)(f) of the RODO, consisting of enabling us to contact users of the portals, promote our own activities and provide information about them, as well as for other purposes indicated below. We process personal data of users of these portals when they visit our profiles or interact with them (likes, comments, sent messages). If you like or comment on our post, this will be visible to other users. We store your personal data until you object to further processing by clicking “dislike”, revoking your liking of an entry or deleting your comment on an entry, and thereafter for the period required by obligations imposed by law and/or until the expiration of the statute of limitations for any claims related to the purposes of processing. Provision of personal data is fully voluntary, lack of data will not result in negative consequences.
Scope of data: First name, last name, email address, profile photo, information you indicate in your profile, location information, content of correspondence, other content posted by you on our profile.
Category of persons: We process data of people who have liked our profile, subscribed to our fanpage by clicking the “Like” or “Observe” icon, published their comment under a post, published a post on our fanpage, indicated liking or other reaction to a post or comment, contacted us by sending a message, shared a post from our fanpage with other users, data of people participating in a contest.
Purpose of data processing:
– Running the profile,
– informing about our activities,
– promoting events, products,
– responding to reactions, comments, messages,
– conducting contests,
– marketing and promotion of our activities,
– analyzing the activity of users of our profile, among other things, in order to collect data on the number of likes, comments and shares of our profile or content posted on it.
Legal basis for data processing: We process data on the basis of the Administrator’s legitimate interests for the purposes indicated in the column opposite and to ensure order and security on our profiles, to build positive relationships, for marketing purposes and to analyze user activity.
In the case of contests, if you are the winner of a specific contest, we will also process your personal data in order to fulfill our tax obligations related to the settlement of the prize (Article 6(1)(c) of the DPA).
Additional information: Co-administration. We may process statistical data about your activity on our profiles. In this regard, there is a co-administration of data between PRZEKRÓJ Foundation and Meta Platforms Ireland for the purposes of statistics, as the aforementioned entities have a common purpose and method of processing data, i.e. to conduct their own marketing activities and statistics. Arrangements defining the scope of co-administration, including the principles of responsibility for the processing of personal data, can be found at: https://www.facebook.com/legal/terms/page_controller_addendum. In accordance with these principles, Facebook agrees to assume primary responsibility for the processing of your data for statistics purposes and to comply with all applicable obligations under the RODO with respect to the processing of your personal data for statistics purposes.
For more information regarding Facebook’s processing of your personal data, please visit: https://www.facebook.com/privacy/explanation
Scope of data: Name, email, username, profile picture, comments and other content you post.
Category of persons: We process the data of people who have liked our profile, subscribed to the fanpage by clicking the “Like” or “Observe” icon, published a comment under a post, published a post on our fanpage, indicated a like or other reaction to a post or comment, contacted us by sending a message, shared a post from our fanpage with other users, data of people participating in a contest.
Purpose of data processing:
– Running the profile,
– informing about our activities,
– promoting events, products,
– responding to reactions, comments, messages,
– conducting contests,
– marketing and promotion of our activities,
– analyzing the activity of users of our profile, among other things, in order to collect data on the number of likes, comments and shares of our profile or content posted on it.
Legal basis for data processing: We process data on the basis of the Administrator’s legitimate interests for the purposes indicated in the column opposite and to ensure order and security on our profiles, to build positive relationships, for marketing purposes and to analyze user activity.
In the case of contests, if you are the winner of a specific contest, we will also process your personal data to fulfill our tax obligations related to the settlement of the prize (Article 6(1)(c) GDPR).
Additional information: For more information regarding the processing of your data by Meta Platforms Ireland, the owner of Instagram, please visit: https://www.facebook.com/help/instagram/155833707900388.
YouTube
Scope of data: First name, last name, username, content of shared posts and comments.
Category of people: Personal data of people who subscribed to the channel, published their comment under the video, contacted us by sending a message, are visible on the videos we publish on YouTube.
Purpose of data processing:
– Profile management,
– Responding to reactions (comments, posts, messages)
Legal basis for data processing: We process data on the basis of the Administrator’s legitimate interests for the purposes indicated in the column opposite and to ensure order and security on our profiles, to build positive relationships, for marketing purposes and to analyze user activity.
In the case of contests, if you are the winner of a specific contest, we will also process your personal data in order to fulfill our tax obligations related to the settlement of the prize (Article 6(1)(c) RODO).
Additional information: For more information regarding YouTube’s processing of your personal data, please visit: https://support.google.com/youtube/answer/10364219?hl=pl.
Scope of data: Name, surname, email address, profile picture, profile information, comments, other content you post.
Category of people: Data of people who visit the profile, like or comment on our activities.
Purpose of data processing:
– Profile management,
– Responding to reactions (comments, posts, messages)
Legal basis for data processing: We process data on the basis of the Administrator’s legitimate interests for the purposes indicated in the column opposite and to ensure order and security on our profiles, to build positive relationships, for marketing purposes and to analyze user activity.
In the case of contests, if you are the winner of a specific contest, we will also process your personal data in order to fulfill our tax obligations related to the settlement of the prize (Article 6(1)(c) RODO).
Additional information: For more information regarding LinkedIn’s processing of your personal data, please visit: https://www.linkedin.com/legal/privacy-policy.
Scope of data: First name, last name, username, profile picture, content of shared content comments.
Category of persons: Data of people who published a comment, commented on a post, wrote a message to PRZEKRÓJ Foundation.
Purpose of data processing:
– Profile management,
– Response to reactions (comments, posts, messages
Legal basis for data processing: We process data on the basis of the Administrator’s legitimate interests for the purposes indicated in the column opposite and to ensure order and security on our profiles, to build positive relationships, for marketing purposes and to analyze user activity.
In the case of contests, if you are the winner of a specific contest, we will also process your personal data in order to fulfill our tax obligations related to the settlement of the prize (Article 6(1)(c) RODO).
Additional information: For more information regarding Twitter’s processing of your personal data, please visit: https://twitter.com/en/privacy.
Vimeo
Scope of data: First name, last name, username.
Category of persons: Data of people who watch videos.
Purpose of data processing: To play video or audio to showcase your business.
Legal basis for data processing: We process data on the basis of the Administrator’s legitimate interests for the purposes indicated in the column opposite and to ensure order and security on our profiles, to build positive relationships, for marketing purposes and to analyze user activity.
In the case of contests, if you are the winner of a specific contest, we will also process your personal data in order to fulfill our tax obligations related to the settlement of the prize (Article 6(1)(c) RODO).
Additional information: For more information regarding Vimeo’s processing of your personal data, please visit: https://vimeo.com/privacy.
We embed video and audio on video pages from Vimeo. For this purpose, cookies are used from Vimeo, Inc. (555 West 18th Street, New York, USA) regarding the Vimeo service. The cookies are only loaded when the video or audio is played. If you do not agree to their loading, please refrain from playing the video or audio. When you enable video or audio, Vimeo receives information about it, even if you do not have a Vimeo profile or are not currently logged in. Such information (along with your IP address) is sent by your browser directly to the server of the respective service provider (some servers are located in the US) and is stored there. If you do not want Vimeo to attribute the data collected during video playback directly to your profile on a particular service, you must log out of that service before visiting our site. You can also prevent plug-ins from loading on the site altogether by using appropriate extensions for your browser, such as script blocking.
Data processing time:
Depending on the purposes of processing your personal data on our profiles, we use them for the following periods:
– In the case of addressing an inquiry – for the time necessary to respond to the inquiry, and then until the end of the calendar year following the year in which the resolution of the matter took place or the contact ended.
– In the case of marketing our products and services – until you object to the use of your data for this purpose, but for no longer than the period you observe us;
– In the case of comments etc. – until you object or delete your activities;
– In the case of activity analysis – until you object to the use of your data for this purpose and we determine that your objection is valid, however, for no longer than the period that you are watching us;
– In the case of the need to ensure order on our profiles – until you object to the use of your data for this purpose and we consider your objection to be valid, however, for no longer than the period that you are watching us;
– In the case of contests – for the duration of the contest and for a period of no more than 3 years after the end of the respective contest, including for the purpose of asserting or defending against claims related to the respective contest. If you are the winner of a contest, we will process your data for 5 years, counting from the end of the calendar year in which the deadline for payment of tax related to the award of the prize expired in accordance with tax law.
We encourage you to read the details of the privacy policy:
Vimeo – https://vimeo.com/privacy
Facebook – https://www.facebook.com/legal/FB_Work_Privacy
Instagram – https://help.instagram.com/519522125107875?helpref=page_content
Twitter – https://twitter.com/en/privacy
Google – https://policies.google.com/privacy?hl=pl.
Social networks have their own privacy policies, regulations and data processing rules that bind their users and that we are obliged to follow. If you are a user of such portals, the processing of your personal data is also subject to the regulations and policies, and you may exercise your rights under them.
4a) Right to object
– You have the right to object at any time to the processing of your data described above. We will stop processing your data for these purposes unless we can demonstrate that there are compelling legitimate grounds for us to process your data that override your interests, rights and freedoms, or your data is necessary for us to possibly establish, assert or defend claims.
– At any time you have the right to object to the processing of your data for direct marketing purposes. If you exercise this right, we will stop processing your data for this purpose.
In addition, you have:
4b) the right to withdraw your consent to data processing. To the extent that your data is or will be processed on the basis of consent, you have the right to withdraw your consent to data processing at any time. The withdrawal of consent does not affect the lawfulness of the processing we have carried out on the basis of consent prior to its withdrawal. You may withdraw your consent by sending a statement of withdrawal of consent to our email address: [email protected];
4c) the right to access your personal data and to receive a copy of it;
4d) the right to request rectification (amendment) of personal data, including data contained in the online account panel;
4e) the right to request deletion of personal data;
4f) the right to request restriction of processing of personal data;
4g) the right to portability of personal data, i.e. the right to receive personal data from us, in a structured, commonly used machine-readable computer format, or the right to request that we send the data to another controller. However, we will only do so if such a transfer is technically possible. The right to data portability applies only to those data that we process on the basis of a contract with you or on the basis of your consent to data processing;
4h) the right to lodge a complaint with a supervisory authority. You also have the right to lodge a complaint with the supervisory authority for the protection of personal data, i.e. the President of the Office for Personal Data Protection or other competent supervisory authority.
We will transfer your personal data to entities that process your data on the basis of a contract with us, i.e.: accounting companies, claims adjusters, loss adjustment contractors, marketing agencies, companies that support us in the field of IT, IT systems maintenance providers, data protection service providers, web hosts. We may share your personal data with payment operators, courier company or Poczta Polska (depending on your preference), law firm.
Recipients of your personal data may be: providers of social networks on which we maintain our profiles (e.g. Facebook, LinkedIn, Google, Twitter, Vimeo).
In addition, we will transfer your personal data to relevant state and/or public institutions, if necessary to comply with legal obligations.
The Administrator does not transfer personal data to third countries; however, in terms of Facebook, Instagram, Twitter, YouTube, Vimeo, LinkedIn, such transfers of personal data may automatically occur. For details in this regard, please refer to the data protection policies of the aforementioned portals (links to the data processing rules are provided above in Section 3).
Data may be transferred to Google LLC, based in California, USA, and Google Ireland Ltd as owner of YouTube. The transfer of data to the US is based on an agreement containing standard contractual clauses accepted by the European Commission.
The Administrator may use profiling for direct marketing purposes in the e-store https://przekroj.org/shop/, but the decisions made on its basis by the Administrator do not concern the conclusion or refusal of a sales contract or the possibility of using electronic services in the e-store.
The effect of the use of profiling in the e-store may be, for example, to grant a person a discount, send him/her a discount code, remind him/her of unfinished purchases, send a proposal for a product that may match the person’s interests or preferences, or offer better terms and conditions compared to the e-store’s standard offer. Despite the profiling, you are the one who freely decides whether you want to take advantage of the discount received in this way or better terms and conditions and make a purchase from the e-shop.
Profiling in an e-store consists in automatic analysis or prediction of a person’s behavior on the Store’s website, e.g. by adding a particular product to the shopping cart, or by analyzing the previous history of purchases made in the e-store. The condition for such profiling is that the Administrator has personal data in order to be able to send a person, for example, a discount code.
The data subject has the right not to be subject to a decision that is based solely on automated processing, including profiling, and that produces legal effects with respect to the data subject or similarly significantly affects the data subject.
