Privacy Policy

PRIVACY POLICY

OF THE FIRMADLAKAZDEGO.PL WEBSITE

  1. The Firma dla Każdego Foundation, with its registered office at 17/4 Lwowska Street, Warsaw 00-660, registered in the register of associations maintained by the District Court for the Capital City of Warsaw, 12th Commercial Division of the National Court Register (KRS), under KRS number 0000569410, Tax Identification Number (NIP) 5252625624, REGON 362170026 (hereinafter the “Controller”).
  2. The Controller operates the website firmadlakazdego.pl (hereinafter referred to as the “Website”).
  3. Users of the Website (hereinafter referred to as the “User”) consent to the processing of their personal data by the Controller in accordance with the terms set out in this privacy policy.
  4. Any statements, enquiries or information concerning personal data may be submitted to the Controller via:
    1. the Data Protection Officer’s email address: iod@firmadlakazdego.pl
    2. the contact form available at /en/contact/;
    3. in writing to the Controller’s registered office.
  5. The User’s personal data is processed on the basis of Article 6 and other provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter ‘GDPR’).
  6. The User’s personal data is processed for the purpose of responding to enquiries and other messages sent by the User via the contact form or by email, and for further communication with the User.
  7. The Data Controller processes the following categories of the User’s data:
    1. first name and surname
    2. email address
    3. telephone number.
  8. The recipients of the User’s personal data may include employees, contractors, subcontractors and other persons employed by or working with the Controller.
  9. The User’s personal data may be transferred to third countries, but only in accordance with the principles set out in Article 46 of the GDPR, i.e. provided that the recipient ensures appropriate safeguards. In any event, the User is entitled to receive a copy of the data concerning them.
  10. The User’s personal data will be retained for the period necessary to fulfil the purposes of data processing, i.e. for the duration of communication with the User, including in particular the period necessary to provide the User with any requested information. The User’s personal data will be permanently deleted once the aforementioned period has expired.
  1. You have the right to:
    1. obtain confirmation from the Controller as to whether personal data concerning them is being processed;
    2. receive a copy of the data being processed;
    3. obtain from the Controller any information covered by this Privacy Policy.
  2. You have the right to request that the Controller immediately rectify any personal data concerning you that is inaccurate. Taking into account the purposes of the processing, the User has the right to request that incomplete personal data be completed, including by providing an additional statement.
  3. The User has the right to request that the Controller erase personal data concerning them without undue delay, and the Controller is obliged to erase personal data without undue delay (subject to the exceptions provided for by law) if one of the following circumstances applies:
    1. the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
    2. the User has withdrawn the consent on which the processing is based, and there is no other legal basis for the processing;
    3. the User has lodged an objection as referred to in clause 16;
    4. the personal data has been processed unlawfully;
    5. the personal data must be erased in order to comply with a legal obligation under Union law or the law of a Member State to which the Controller is subject;
    6. the personal data has been collected in connection with the offering of information society services directly to a child, on the basis of the consent of the child or their parent (guardian).
  4. The User has the right to request that the Controller restrict processing in the following cases:
    1. where the User contests the accuracy of the personal data – for a period enabling the Controller to verify the accuracy of such data;
    2. where the processing is unlawful and the User objects to the erasure of the personal data, requesting instead that its use be restricted;
    3. where the Controller no longer requires the personal data for the purposes of processing, but the User requires it to establish, exercise or defend legal claims;
    4. where the User has lodged an objection as referred to in clause 16 – until it has been determined whether the Controller’s legitimate grounds override the grounds for the objection raised by the data subject.
  5. The User has the right to receive, in a structured, commonly used and machine-readable format, the personal data concerning them which they have provided to the Controller, and has the right to transmit that personal data to another data controller without hindrance from the Controller to whom the personal data was provided. In exercising the right to data portability, the User has the right to request that the personal data be transferred by the Controller directly to another data controller, provided this is technically feasible.
  6. The User has the right at any time to object – on grounds relating to their particular situation – to the processing of their personal data based on the legitimate interests pursued by the Controller or by a third party. The Controller may no longer process such personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or grounds relating to the establishment, exercise or defence of legal claims.
  7. You may withdraw your consent to the processing of your data at any time. Please note, however, that the withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal of consent.
  8. You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place where the alleged infringement occurred, if you consider that the processing of personal data relating to you infringes the provisions of the GDPR.