1. Your personal data will be processed to fulfill the contract concluded with the Foundation based on Art. 6 (1)(b) of the GDPR, i.e., due to the necessity of processing to perform the contract. Data will be stored for the period necessary to perform the contract.

2. Your personal data may be processed to ensure the proper realization of services by monitoring the beneficiary’s actions based on Art. 6 (1)(f) of the GDPR, i.e., due to the necessity of processing for purposes arising from legally justified interests pursued by the Administrator. Data will be stored until the expiration of claims.

3. After the termination or expiration of the contract, your personal data may be processed for the purpose of pursuing, defending, or establishing any claims arising from the contract based on Art. 6 (1)(f) of the GDPR, i.e., due to the necessity of processing for purposes arising from legally justified interests pursued by the Administrator. Data will be stored until the expiration of claims.

4. Regardless of the above, your personal data may be processed, including in particular stored, to fulfill legal obligations incumbent on the Administrator, i.e., based on Art. 6 (1)(c) of the GDPR. This data will be stored for the period indicated by legal provisions.

In particular – when fulfilling the contract, the Administrator has obligations regarding social security and health insurance, tax obligations, or obligations arising from the Act on Counteracting Money Laundering and Terrorist Financing, after the termination of the contract your personal data will be stored until the expiration of the obligation to store documentation containing these data, resulting from tax regulations and other provisions regulating the Administrator’s obligations.

1. Your personal data will be processed to fulfill the contract concluded based on Art. 6 (1)(b) of the GDPR, i.e., due to the necessity of processing to perform the contract.

2. After the termination or expiration of the contract, your personal data may be processed for the purpose of pursuing, defending, or establishing any claims arising from the contract based on Art. 6 (1)(f) of the GDPR, i.e., due to the necessity of processing for purposes arising from legally justified interests pursued by the Administrator.

3. Regardless of the above, your personal data will be processed to fulfill legal obligations incumbent on the Administrator, in particular tax-related obligations, i.e., based on Art. 6 (1)(c) of the GDPR.

4. Your personal data will be stored for the period necessary to perform the contract, and then for the period necessary to establish, pursue, or defend any claims, i.e., until the expiration of claims arising from the contract, unless the necessity of further storage of data results from legal obligations incumbent on the Administrator.

1. Your personal data will be processed to perform obligations and rights of the Administrator towards the entity you represent or from whose authorization you act. The basis for processing your personal data is the necessity of processing for purposes arising from legally justified interests pursued by the Administrator, i.e., Art. 6 (1)(f) of the GDPR.

2. Your personal data will be stored for the period of executing the contract connecting the Administrator with the entity you represent or from whose authorization you act. After the end of cooperation with this entity, the Administrator will continue to store your personal data if the storage of documentation containing these personal data turns out to be necessary to establish, pursue, or defend claims arising from this contract (until the expiration of these claims), or to fulfill legal obligations incumbent on the Administrator, in particular the obligation to store documentation for tax purposes.

1. Your personal data will be processed to provide answers to questions asked electronically or by phone. The basis for processing your personal data is the necessity of processing for purposes arising from legally justified interests pursued by the Administrator, i.e., Art. 6 (1)(f) of the GDPR.

2. Your personal data will be stored for the period necessary to provide answers to questions and the time of conducting correspondence and establishing, pursuing, or defending against any claims, which is a legally justified interest of the administrator (basis from Art. 6 (1)(f) of the GDPR). Providing data is voluntary but necessary to establish contact and provide answers to the questions asked.

1. Your personal data will be processed to ensure the proper functioning of the Website and to study the level of users’ interest in the contents presented on the Website (statistical data collected using cookies) – the basis for processing personal data is the legally justified interest pursued by the Administrator, consisting in ensuring the proper functioning of the Website and studying the level of users’ interest in the contents presented on the Website, i.e., Art. 6 (1)(f) of the Regulation.

2. Additional information on the principles of processing user data via cookies is available in the cookie policy.

1. Your personal data may be entrusted for processing to entities cooperating with the Administrator based on data processing entrustment agreements concluded pursuant to Art. 28 of the Regulation, including entities providing the following services: IT, identity management, hosting, data analysis, backup creation, security, customer service, and data storage.

2. Your personal data are processed by persons authorized by the Administrator to process data pursuant to Art. 29 of the Regulation, in particular by persons employed by the Administrator.

3. Your data may be made available to external Data Controllers, including legal advisors and attorneys, and entities conducting postal activities.

4. The Administrator reserves the right to disclose selected information about you to the appropriate authorities or third parties who request such information, based on an appropriate legal basis and in accordance with the provisions of applicable law.

5. Your personal data will not be transferred to a third country, i.e., outside the European Economic Area, nor to an international organization.

6. Your data will not be subject to profiling, i.e., automated analysis, and development of predictions about preferences or future behaviors (e.g., in the case of marketing profiling, this means determining which offer you may be most interested in based on your previous choices).

1. You can exercise the rights discussed below by contacting the Administrator, according to your choice, via traditional mail, email, or phone.

2. You have the right to:

a) information about the processing of personal data – based on this, the Administrator provides you with information about data processing, including the purposes and legal bases of processing, the scope of data held, entities to whom they are disclosed, and the planned date of data deletion;

b) obtain a copy of the data – based on this, the Administrator provides you with a copy of the processed data concerning the individual making the request;

c) rectification of data – the Administrator removes any inconsistencies or errors in the processed Personal Data and supplements them if they are incomplete;

d) deletion of data – based on this, you can request the deletion of data whose processing is no longer necessary to achieve any of the purposes for which they were collected;

e) restriction of processing – if such a request is made, the Administrator ceases to perform operations on the Personal Data – except for operations to which the person concerned has consented – and their storage, in accordance with adopted retention principles or until the reasons for restricting data processing cease to exist (e.g., a decision of the supervisory authority allowing further data processing will be issued);

f) data portability – based on this – to the extent that the data is processed automatically in connection with a concluded contract or expressed consent – the Administrator issues data provided by the person they concern, in a format allowing for computer reading. It is also possible to request sending this data to another entity, provided that there are technical possibilities for this both on the part of the Administrator and the indicated entity;

g) object to the processing of data for marketing purposes – you can object to the processing of Personal Data for marketing purposes at any time, without the need to justify such objection;

h) object to other purposes of data processing – you can object at any time, for reasons related to your particular situation, to the processing of Personal Data that takes place on the basis of the legally justified interest of the Administrator, the objection in this respect should contain justification;

i) withdrawal of consent – if your data is processed based on expressed consent, the data subject has the right to withdraw it at any time, however, this does not affect the legality of processing carried out before its withdrawal;  

    3. The Administrator informs that they do not make decisions based solely on automated processing, including profiling.

1. You have the right to file a complaint with the supervisory authority if, in your opinion, the processing of your data is in violation of legal provisions.

2. The competent authority for reporting violations of personal data protection is the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, www.udo.gov.pl.