Introduction
In order to safeguard your right to privacy and the security of your personal data, we provide information on the purpose and principles of our processing of personal data, as well as on your rights in this regard. In accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter ‘the GDPR’), we hereby inform you that:
Data Controller
The data controller for your personal data is the Association for the Support of Research and Conservation Initiatives (hereinafter “the Association”), ul. Niecała 12/2, 00-098 Warsaw;
KRS: 0000869154, NIP: 5252843195
You can contact the Data Controller as follows:
By post:
Association for the Support of Research and Conservation Initiatives
ul. Niecała 12/2
00-098 Warsaw
By email: info@twbk.pl
Data Protection Officer
The Society processes the data of its members and donors to a limited extent. In such circumstances, there is no obligation to appoint a Data Protection Officer, in accordance with the provisions of the GDPR (Article 37(1)).
Purposes and legal bases for data processing
When you contact us via the email address provided on the website, you voluntarily provide us with your personal data (in particular your email address, first name and the content of your message).
Processing is lawful where it is necessary for compliance with a legal obligation to which the controller is subject. Article 6(1)(c)
| Purpose of data processing | Legal basis | Explanation of purpose |
| Handling correspondence and enquiries | Article 6(1)(f) of the GDPR | The need to respond to enquiries and handle day-to-day correspondence |
| Receiving, processing and accounting for donations | Article 6(1)(b) of the GDPR | Processing is necessary for the conclusion and performance of a donation agreement |
| Retention of financial records | Article 6(1)(c) of the GDPR in conjunction with Article 74 of the Accounting Act | The obligation to retain accounting documents and records for the period required by law |
| Taking steps to carry out orders or to conclude and perform a contract | Article 6(1)(f) of the GDPR | In connection with taking steps to conclude or perform a contract or to carry out an order. |
Categories of data
The categories of personal data we process include basic data, identification data (first name and surname) and contact details (email address) obtained directly from you or provided on your behalf.
Recipients of data
The recipients of your personal data are authorised Ordinary Members of the Association, as well as domestic and foreign entities assisting us in our activities. Recipients to whom your personal data may be disclosed may include parties and participants in proceedings, or authorities competent under the law to deal with matters which we are handling. Personal data may be transferred to public bodies in accordance with the rules laid down in applicable legislation, and to international organisations and EU bodies, in accordance with applicable national legislation and international agreements.
When making a donation, the recipient of the data is the payment service provider PayU.
Retention period
Ongoing correspondence and contact purposes may be processed until an objection is raised or the purpose for which the data is processed ceases to apply. Article 5(1)(e) of the GDPR
After this period, the data may be retained for the duration of the limitation period for any potential claims. Article 118 of the Act of 23 April 1964 – Civil Code
The obligation to retain accounting records and supporting documents, as required by tax law, is five years, usually from the end of the calendar year in which the payment was made. Article 74(2)(1) of the Act of 29 September 1994 on Accounting
Your rights
In accordance with applicable law, you have the right to access your data, to rectify, erase or restrict its processing, to withdraw your consent to processing, and to object to the processing.
You have the right to request the erasure of your personal data. Please note, however, that this right is not absolute. As making a donation involves legal and tax obligations (arising, amongst other things, from the Accounting Act), we are legally obliged to retain data identifying the payment for the period required by law (usually 5 years from the end of the calendar year in which the donation was made). During this period, it will not be possible to remove your data from our accounting records.
You have the right to lodge a complaint with the Office for Personal Data Protection (UODO) if you suspect that your personal data is being processed in breach of the GDPR. You may lodge a complaint free of charge in writing, electronically (via ePUAP/E-Doręczenia) or orally for the record, and the Office does not charge any fees for this.
Cookies
In order to facilitate online donations and payments, our website uses tools and cookies provided by third-party payment providers.
The Wpłacam.ngo.pl payment gateway implemented on the website (managed by the Moje Państwo Foundation) and its partner payment providers (in particular PayU S.A., based in Poznań) may store cookies on the user’s device.
These cookies are necessary to process and complete financial transactions correctly, to ensure transaction security, to detect potential fraud, and to retain the status of the payment session whilst switching between our website and the banking system.
We do not use this data for marketing purposes. Detailed data processing rules and the cookie policies of these entities can be found directly on their websites: https://poland.payu.com/prywatnosc/polityka-prywatnosci-payu/ and https://www.ngo.pl/prywatnosc.