Information Obligation

Since 25 May 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protectionof natural persons with regard to the processing of personal data and on the free movement of such data, and repealingDirective 95/46/EC (General Data Protection Regulation), has been applicable,

Pursuant to Article 13(1) and (2) of that Regulation, I hereby inform you that:

• The controller of your personal data isFundacja K.I.D.S. Klub Innowatorów Dziecięcych Szpitali, KRS: 0000793389, REGON: 383824678,e-mail address: info@kids.org.pl (hereinafter: the “Controller”).
• The Controller processes the following categories of your personal data: first and last name; street; house number; apartmentnumber; postal code; city/town; country; contact phone number; e-mail; company name; Tax Identification Number (NIP). Thesedata are obtained from you when you place an order and at further stages of its fulfilment.
• Your personal data will be processed in order to perform the contract concluded with the Controller, pursuant to Article 6(1)(b)of the Regulation, and in order for the Controller to provide other services to you – on the basis of your consent.
• Recipients of your personal data may include entities providing services to the Controller – under personal data processingagreements (data processing entrustment agreements).
• Your personal data will not be transferred to a third country/international organisation.
• Your personal data will be stored for the period during which the Controller provides services to you under the concluded contract.
• You have the right to access your personal data, the right to request rectification, erasure or restriction of processing of suchdata, and the right to data portability.
• For reasons related to your particular situation, you have the right to object to the processing of data. Without giving any reason,you are entitled to object where the data are used for direct marketing purposes.
• You have the right to withdraw your consent at any time; however, this will not affect the lawfulness of processing carried out on thebasis of consent before its withdrawal.
• You have the right to lodge a complaint with the supervisory authority if you consider that the processing of your personal data violates the provisions of law.
• Providing your personal data is voluntary; however, providing it is a condition for the Controller to provide services to you.
• Your data will be processed in an automated manner. Your data will not be processed by means of profiling.