K.I.D.S. FOUNDATION CHILDREN'S HOSPITAL INNOVATORS CLUB
This Privacy Policy concerns the protection of personal data and the issue of the installation of cookies and the use ofsimilar technologies (hereinafter: "Privacy Policy"). The Privacy Policy sets out the rules for the use of information,including personal data, for the purposes indicated in its Part 2, processed by the data controller, i.e. the:K.I.D.S. Foundation Children's Hospital Innovators Club with its registered office in Warsaw, ul. Chmielna 73, 00-801Warsaw, registered in the register of associations, other social and professional organizations, foundations andindependent public health care institutions of the National Court Register kept by the District Court for the Capital Cityof Warsaw in Warsaw, 12th Economic Department of the National Court Register under the number 0000793389, REGON:383824678, NIP: 5272898236 (hereinafter: "Foundation").
E-mail contact with the Foundation: info@kids.org.pl
Telephone contact: +48 576 333 578
This policy is available on the Website (https://www.kids.org.pl). Please check each time if any changes have been madeto the Privacy Policy since the last time you used the Website because we may be obliged to, or on our own initiative,update this Policy.
The Privacy Policy sets out the principles of data processing through the pages of the Website and the other purposes indicated in Part 2 of the Website.
Part 1 of the Privacy Policy sets out the framework for data processing, including a description of the rights that a person whose data the Foundation processes has.
Part 2 of the Privacy Policy sets out the purposes, legal basis and principles for the length of data processing.
Part 3 of the Privacy Policy sets out the rules for the use of cookies and similar technologies.
Personal data means any information about an identified or identifiable natural person ("data subject"). Thus, it will bedata such as first and last name, address, date of birth, telephone number or email address (the list is not closed).
Personal data is processed in accordance with GDPR, i.e. REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THECOUNCIL of April 27, 2016, on the protection of individuals with regard to the processing of personal data and on the freemovement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
You are entitled to:
Whenever your personal data is processed on the basis of Article 6(1)(f) or (e) GDPR (see below), i.e. in the case of solegitimate interest or action in the public interest, you may object at any time. You can raise an objection using theaccount details indicated at the beginning of the Privacy Policy.
(See more: www.uodo.gov.pl). We also encourage you to read the leaflet on your rights available athttps://www.gov.pl/cyfryzacja/rodo-informator.
If processing of personal data based on consent (e.g., use of an image for promotional purposes - see more Part 2) was to take place, remember that:
You can exercise your rights in person at the Foundation's headquarters, by postal correspondence or by email(see above for the administrator's contact details).
In response to your request, you may be asked to provide the data necessary to identify your personal information(among others, to find it) or to verify your identity (to confirm that you are the person you claim to be). In this case,personal data will be processed only to the extent necessary to document the proper performance of obligations relatedto the reported request (including, but not limited to, proper documentation of the withdrawal of consent) for thepurposes of defense against claims (Article 6(f) GDPR, the so-called legitimate interest of the Data Controller) and forthe purposes of fulfilling obligations under GDPR (including, but not limited to, accountability Article 6(1)(c) GDPR).For these purposes, data will be processed for a maximum period of the statute of limitations for potential related claims.
Only authorized employees/co-workers acting under the Foundation's instruction will have access to personal data. The datamay also be disclosed to service providers, e.g. IT service providers supporting the implementation of the Foundation'spurposes listed below (after prior conclusion of relevant entrustment agreements). Data may also be disclosed to recipientswho are separate administrators. For details, see below when discussing the various purposes of data processing (see Part 2 and Part 3).
Unless you are expressly informed to the contrary, in the course of data processing there will be no:
We reserve the right to make changes to this Privacy Policy, which may be influenced by developments in Internet technology,possible changes in the law on the protection of personal data. We will inform about any changes in a visible and understandableway on the pages of the Website.
The https://www.kids.org.pl Website may contain links to other websites. Such websites operate independently of the Website and arenot supervised by the Foundation in any way. These websites may have their own privacy policies and regulations, with which werecommend that you familiarize yourself.
If you have any doubts about any of the provisions of this Privacy Policy, we are at your disposal - our details can be found in the contact section.
The provision of data is, as a rule, voluntary. Whenever the provision of data will be obligatory (e.g. as a result of legal regulations),the person providing the data will be informed about it separately (e.g. on the form through which personal data will be collected).
As a rule, the Foundation obtains data directly from the data subject. In exceptional cases, the Foundation may obtain data from other sources.In particular, personal data may come from the legal representative, businesses providing contact information of their employees. The Foundationmay also verify the collected data in publicly available registers such as the National Court Register (KRS), Central Register and Information onEconomic Activity (CEIDG).
Objectives of personal data processing and legal basis
Accepting donations is within the framework of the performance of tasks in the public interest (Basis: Art. 6 (1) (e) GDPR) in connection withthe performance of tasks specified by the provisions of the Act on Foundations of April 6, 1984. The Foundation also processes personal data inorder to fulfill its reporting obligations related to fundraising from donors (Article 6(1)(c) GDPR in connection with the provisions of the law.For more information please see https://www.gov.pl/web/rozwoj/fundacje.
Fundraising through the pages of the Website. Making donations to the Foundation through the Website requires the User to provide their personaldata, whereby the User's first name, last name and e-mail address are mandatory for making a donation. Providing other personal data is optional.Failure to provide mandatory personal data means that the process of making a donation to the Foundation is abandoned and the donation cannot bemade through the Website. The provision of data is voluntary but necessary for the Foundation to properly fulfill its reporting obligations under the law.
The data will be processed for the period necessary to fulfill the aforementioned reporting obligations, i.e. 6 years.
Recipients of data and source of data acquisition
After entering and confirming personal data, the User is redirected to an external website Tpay.com for online payment. In order to make the payment,the data will be disclosed to online payment processing partners. Detailed information on the processing of personal data is available directly on thepayment operator's website (https://tpay.com/polityka-prywatnosci-note). From the payment operator the Foundation obtains the data mentioned above.
In fulfillment of the reporting obligations under the law, donor data may also be shared with public authorities.
The Foundation does not share donor data with gift recipients unless prior consent is obtained for this purpose.
Support of the endowed falls within the framework of the performance of tasks in the public interest (Basis: Art. 6 (1) (e) GDPR) in connection withthe performance of tasks specified by the provisions of the Law on Foundations of April 6, 1984. The Foundation also processes personal data in orderto fulfill reporting obligations related to fundraising from donors (Article 6(1)(c) GDPR in connection with the provisions of the law. For moreinformation please see https://www.gov.pl/web/rozwoj/fundacje.
The provision of data is voluntary but necessary in order for the Foundation to properly fulfill its reporting obligations under the law.
The data will be processed for the period necessary to fulfill the aforementioned reporting obligations, i.e. 6 years.
Recipients of data and source of data acquisition
As part of the fulfillment of reporting obligations under the law, the recipients' data may also be made available to public authorities.
Personal data processing purposes and legal basis
Personal data will be processed for the following purposes:
If a cooperation agreement is concluded, the data will also be processed for the purpose of fulfilling legal obligations, e.g. those related to the payment of Social Security contributions.
Period of data processing
In the case of the purposes indicated in points a)-c), the provision of data is voluntary but necessary for the implementation of the aforementioned purposes. Personal data will be processed for the period of limitation of potential claims related to the correspondence, in particular those arising from the process of concluding and implementing the contract.
Recipients of the data
The Foundation may entrust your data to, for example, IT service providers.
Objectives, legal basis, period of data processing, voluntariness of providing data
Dissemination of the image - for promotional purposes of the Foundation - is based, as a rule, on the consent of the person depicted in it. Providing data in this case is completely voluntary. The data will be processed until the consent is withdrawn.
Permission is not required to disseminate the image of:
In the above cases (a)-(c), the provision of data is voluntary and based on the legitimate interest of the Foundation. The person whose image will be disseminated may object. The data will be processed for a maximum of 2 years, unless an objection is raised earlier.
Principles of personal data protection within the framework of social media accounts (administration of Facebook fanpage and other social networks)
Purposes of using personal data:
Basis of data processing:
(in terms of obtaining information about other users) - Article 6(1)(f) GDPR, i.e. legitimate interest of the data controller.
Categories of data obtained:
Data visible by default on Facebook (or on another portal, respectively). In particular:
Source of data
Facebook (or other social network) users; Facebook (or other social network).
The administrator does not configure itself and does not have data about you from cookies stored by Facebook (or other social network).Statistical data resulting from these cookies is made available to the administrator only in aggregated (anonymous) form, and not individualized.Therefore, only the websites (Facebook, among others) can technically respond to your requests for the cookies used.
Voluntariness of providing data
The provision of data is voluntary. You make your own decisions in this regard. In order to use personalized information, social features or online response services, the user must be a member of the social network.
Recipients
Access to data between users is governed by the rules of the respective social network.
Transfer of data outside the EU
Publications will be accessible due to their presence on Facebook outside the European Union. The data necessary for the compilation of statistics may be processed outside the European Union in accordance with the data management policies implemented by Facebook (or other social network).
Duration of data processing
Data is stored for the duration of the existence of the social network account in question, except for the exercise of the right to delete or object by the interested party.
Cookies are small text files that are placed on your computer by websites you visit. They are commonly used to improve the operation of websites or enhance their performance, as well as to provide information to website owners. The table below explains the cookies we use and why.
We use two categories of cookies: session cookies and permanent cookies.
The Administrator of the Website (the Foundation) uses two categories of cookies: "essential" and "optional" for the following purposes:
Session cookies may be used on the Website for this purpose.
For this purpose, permanent and session cookies may be used on the Website.
The use of this category of cookies is based on your consent.
The indicated data is not combined with information such as the first and last name, email address and other data that allows easy identification of the website visitor.
Designation of tool and provider: Google Analytics / Provider: Google Inc.
Categories of data acquired
Unique identifiers, IP addresses, activity information, location, browser language information, device model information
Is there any entrustment of data?
Data entrustment occurs. The entrustment agreement is available at: https://privacy.google.com/businesses/processorterms/
Is there a transfer of data outside the European Economic Area?
As part of the service provided, there may be a transfer of data outside the EEA and Switzerland, mainly to the United States.To this end, Google ensures the security of this data flows by:
These cookies are used to collect information about how visitors use our site. We use this information to create reports and to help us improve the website.The cookies collect information in a way that does not directly identify anyone, including the number of visitors to the site and the blog from which visitorsvisited the site and the pages visited.
Read Google's discussion of privacy and data protection https://support.google.com/analytics/answer/6004245
You can withdraw your consent at any time and stop the installation and acquisition of data through cookies. Withdrawal of consent does not affect the lawfulness of processing that was carried out on the basis of consent before its withdrawal.
Most browsers offer the option to accept or reject all cookies. The user can also easily change the settings for such cookies in the browser settings. Please note that blocking all cookies from the Website may cause difficulties in operation or completely prevent you from using certain functionalities of our Website.
Managing and deleting cookies varies depending on the browser you use. You can find out exactly how to do this by using your browser's Help function or by visiting http://www.allaboutcookies.org, which explains step-by-step how to control and delete cookies in most browsers.
You can see browser-specific information on the following pages:
To opt out of the Google Analytics mechanism on all sites, visit: http://tools.google.com/dlpage/gaoptout
Even in the absence of the installation of cookies, the website administrator may access the following data characterizing the use of the website (hereinafter: other exploitation data):
In order to ensure the highest possible quality of the site, we occasionally analyze log files to determine: which pages are visited most often, which web browsers are used, whether the structure of the site is error-free, etc.
Usage data is not combined with such information as name, email address and other data that allows easy identification of the website visitor.
Information obtained through the cookie mechanism and information data may constitute personal data within the meaning of the GDPR in certain exceptional situations.If the information indicated above qualifies as personal data, the Foundation is the controller of the personal data. Even in case of doubt whether a certaincategory of information is personal data, the Foundation implements mechanisms to protect this information as personal data.
The processing of the above categories of data to the extent that it is necessary for the proper display of the site ("essential" cookies) is based on the so-calledlegitimate interest of the site administrator (Article 6(1)(f) GDPR. This may involve:
In the above cases, you have the right to object (when the processing is based on Article 6(1)(f) GDPR).
On the other hand, if you agree to the installation of "optional" cookies (analytical cookies, e.g. provided by Google Analytics) then the information collectedin this way will be used for the purpose of researching the preferences of people using our website with the purpose of using the results of this research toimprove the quality of the website displayed. In this case, the basis for data processing is Article 173(2) of the Telecommunications Law (Journal of Laws of 2004,No. 171, item 1800) in conjunction with Article 6(1)(a) GDPR. As indicated by Article 174 of the Telecommunications Law, the data protection regulations apply toobtaining the consent of the subscriber or end user.
You can withdraw your consent at any time and delete cookies from your device. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
Recipients of data: IT entities providing services to the Foundation and, in the case of analytical files, Google (see above).
Personal data will be deleted or anonymized at most after the expiration of the statute of limitations for potential claims related to the use of the site (no later than 1 year from the date of consolidation), or earlier if you raise an effective objection. Provision of data is voluntary, but necessary for the aforementioned purposes.
Fundacja K.I.D.S. Klub Innowatorów Dziecięcych Szpitali
NIP: 5272898236