PRIVACY POLICY
PRIVACY NOTICE PURSUANT TO ARTICLES 13 AND 14 OF EU REGULATION 2016/679 (GDPR)
Who is the Data Controller for your data?
The Data Controller of the data collected through this site is:
**AVSI POLSKA**
Organizacja Pożytku Publicznego
ul. Flory 9 /2
00-586 Warsaw
Office: +48 22 586 33 00
Fax: +48 22 825 22 22
Email: info@avsipolska.org
represented by the legal representative pro tempore (hereinafter also referred to as the “Controller”). The updated list of authorized processors and external data processors is available at the Controller’s office.
Why do we process your data and when do we collect it?
Navigation Data
During navigation on our website, we collect some personal data of users, such as the IP address of the PC, domain names of the computers and terminals used by users, URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters related to the user’s operating system and IT environment.
Service Data
On our website, there is an area called “leave us your contact” which you can use to request information or ask to be contacted: if you decide to write to us, we will also process your personal and contact data (name, surname, phone number, email address, and contact preferences).
Moreover, through our website, you can make a donation in the “donate now” area to support our projects: in this case, we will process your personal, contact, payment, shipping address, and any other data useful for managing the transaction.
It is also possible to subscribe to our newsletter on the site, in which case we will necessarily process your email address and, if you choose to provide them, your name, surname, and province.
If you wish to apply to work with us, you can fill out the form and/or upload your resume in the designated section, and send it to our recruiters: in this case, we will process only the data necessary for evaluating the application.
What does the law allow us to do?
EU Regulation 2016/679 (GDPR) allows us to process the various types of data highlighted above for the following purposes:
Navigation Data
We need these for statistical purposes, to improve our site, and to protect the security of users’ navigation. These data do not allow for your identification. We process these data based on our legitimate interest and that of the user (Art. 6 letter f) GDPR).
Navigation Data (cookies)
We also collect data for the purposes of analyzing and processing information related to the user, their preferences, habits, consumption choices, and/or navigation experiences. This activity is carried out using technologies such as cookies (own or third-party). Data collection using cookies is carried out with your express consent (Art. 6 letter a) GDPR). We notify you of this via a specific banner found at the bottom of the site when you first connect. For more information, read our cookie policy.
CONTACTS (Service Data)
We process your contact data such as name, surname, phone number, and email to fulfill your contact request. The GDPR allows us to process these data without your consent because they are necessary to fulfill pre-contractual measures (Art. 6 letter b) GDPR). You can always choose not to provide us with the data, but you will not be able to send us any request for a quote.
How do we process your data?
Your data is processed using tools and procedures suitable to ensure its security and confidentiality and can be processed both through our website and through other electronic means (such as internal management systems) and sometimes even with the aid of paper supports. In addition to the Controller, in some cases, other subjects involved in the organization of this Website (administrative, commercial, system administrators, etc.) or external subjects (such as third-party technical service providers, hosting providers, IT companies, communication agencies) appointed, in the cases provided by the regulations, as Data Processors by us, may have access to the data. You can obtain the complete list of data processors by writing to us at info@avsipolska.org.
How long do we keep your data?
Navigation Data
The data collected by the site during its operation is kept for the time strictly necessary to perform the specified activities. Upon expiration, the data will be deleted or anonymized unless there are further purposes for retaining them. The Controller has no control over cookies entirely managed by third parties and has no access to the information collected through these cookies. For more details on the retention of data collected through cookies, refer to the cookie policy.
Service Data
– Contact Data: The data will be kept for the time strictly necessary to fulfill the forwarded request.
– Donation Data: The data will be kept for 10 years from the time of collection (see Art. 2220 civil code).
– Newsletter Data: The data will be kept for 48 months from the last action demonstrating the subject’s interest in the Controller (donation or viewing of informational communications and newsletters) or until consent is withdrawn (opt-out) and/or a deletion request is made by you.
– Application Data: The data will be kept for 6 months from the submission of the application.
Where is your data?
The processing of your personal data collected through the Internet site takes place primarily on European soil.
If necessary, the collected data may be transferred to non-EU countries. In such cases, the Controller ensures that the transfer of data outside the EU will be in compliance with applicable legal provisions by stipulating, if necessary, agreements that ensure an adequate level of protection and/or adopting the standard contractual clauses provided by the European Commission and/or binding corporate rules.
Who accesses your data?
Your data may be made accessible to the Controller’s employees and collaborators in their capacity as data processors and/or system administrators and/or other subjects (such as professional firms, consultants, software houses providing management systems, etc.) who perform outsourcing activities on behalf of the Controller in their capacity as external data processors.
The Controller may disclose your data to public administration, supervisory bodies, and/or judicial authorities as well as to all other subjects to whom the communication is mandatory or necessary by law. Your data will not be disseminated.
Links to third-party sites
Please note that our site sometimes contains links to other sites that are not covered by this privacy notice. As a user, you may be directed to third-party sites to obtain additional information, such as those related to events, content promotions, and service providers; the Controller does not guarantee how your data is stored or used by third-party servers. Therefore, we recommend that you review the privacy policy of each third-party site you access through our site to learn more about how your personal data is processed by them.
What are your rights?
As a data subject, you have the right to obtain, in the cases provided, access to your personal data and rectification or erasure of the same or restriction of processing concerning you or to object to processing (to find out what all your rights are, you can consult the Regulation at Articles 15 and following). To exercise your rights, you can write to us at info@avsipolska.org .
Right to lodge a complaint
If you believe that the processing carried out through this site violates the provisions of the Regulation, you can lodge a complaint with the Data Protection Authority, as provided by Article 77 of the Regulation, or take appropriate judicial action (Article 79 of the Regulation).
Data Protection Officer
Pursuant to Articles 3 and 27 of EU Reg. No. 679/2016, it is communicated that the Data Controller has appointed Mr. Dominik Kocięcki, IT manager of AVSI POLSKA, as the DATA PROTECTION OFFICER (DPO) – Email: dominik.kociecki[@]avsipolska.org
Protection of minors’ privacy
This website is intended for a general audience; however, its services are directed to persons aged 18 or older. We do not request, collect, use, or disclose personal data provided by persons under 18 online. If we discover that we have collected personal data from a minor, we will delete it immediately.
Changes to this policy
AVSI POLSKA reserves the right to modify this notice as necessary. We invite you to check this page periodically if you want to monitor changes.
This privacy policy is updated as of 24/07/2024.