Privacy Policy

I. General provisions

1. Out of concern for the preservation of the privacy rights of the Users of the Website of the Art Connections Foundation with its registered office in Bydgoszcz, as well as for the fulfilment of the requirements resulting from the provisions of the law, the Foundation provides the Users with this Privacy Policy, which informs about the manner in which the Personal Data of the Users is processed and secured and how the Foundation manages the Cookies.
2. Before using the Foundation's Site, the User should read this Privacy Policy.
3. The Foundation processes Personal Data and manages Cookies in accordance with applicable laws, including RODO, and the Telecommunications Law of 16 July 2004.

 

II. Definitions

• Personal data - any information about an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular on the basis of an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person;
• Foundation - Art Connections Foundation with its registered office in Bydgoszcz, 85-005, Gdańska 5 Street, entered into the Register of Associations, Other Social and Professional Organisations, Foundations and Public Health Care Institutions, kept by the District Court in Bydgoszcz, XIII Economic Division of the National Court Register, under KRS number 0000966422, NIP 9671456306;
• Cookies - small text files saved in the User's telecommunication end device (computer, tablet, phone, etc.) during the use of the Foundation's Website, allowing the storage and reading of information that the Foundation may use for various purposes. Detailed information about Cookies is contained in Chapter XI of the Privacy Policy;
• RODO - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC;
• Website - the website of the Foundation with all functionalities, operating at: www.artconnections.pl;
• User - an individual whose Personal Data and data related to the functioning of the Cookies is processed by the Foundation in connection with the use of the Site.

 

III. Personal Data collecting and processing by the Foundation

1. The Administrator of the Personal Data provided by the User while using the Site is the Art Connections Foundation with its registered office in Bydgoszcz, 85-005, ul. Gdańska 5, KRS No. 0000966422.
2. As a result of using the Site, the Foundation may process the following Personal Data of the User: name and surname, e-mail address, telephone number, IP address.

 

IV. Purposes and legal basis for the processing of Personal Data

The Foundation processes the Personal Data of the Website Users for the following purposes:

1. Correspondence - the Foundation processes the User's Personal Data in connection with correspondence initiated by the User, in particular using the Personal Data provided in the contact form. The legal basis for the processing is Article 6(1)(a) RODO (the User's consent to correspond with the Foundation);
2. volunteers recruitment - the Foundation conducts a recruitment process of volunteers in order to establish cooperation in the implementation of the statutory activities of the Foundation. The legal basis for the processing is Article 6(1)(a) and (b) RODO (the User's consent to take part in the recruitment process and to take action, at the User's request, prior to the establishment of cooperation regarding volunteering);
3. cooperation with volunteers - the Foundation cooperates with volunteers in the implementation of the Foundation's statutory activities. The legal basis for the processing is Article 6(1)(b) RODO (agreement for the purpose of establishing cooperation and performance of a contract to which the data subject is a party);
4. newsletter - the Foundation sends a free newsletter and other messages with information about the Foundation. The legal basis for the processing is Article 6(1)(a) RODO (consent of the User to receive correspondence from the Foundation);
5. processing of Personal Data through the artcon_lang_remote cookie - the Foundation processes the User's Personal Data by storing the User's IP address on the Site in connection with the User's choice of the language version of the Site. The legal basis for the processing is Article 6(1)(a) and (f) RODO (the User's consent to the operation of the artcon_lang_remote cookie and the legitimate interests pursued by the Administrator);
6. processing of Personal Data by cookieMsg - the Foundation processes the User's Personal Data by storing the User's IP address on the Site in connection with the User's consent to the operation of cookies on the Site. The legal basis for the processing is Article 6(1)(a) and (f) RODO (the User's consent to the operation of the cookieMsg and the legitimate interests pursued by the Administrator);
7. fulfilment of legal obligations - the Foundation processes data where this is necessary to fulfil legal obligations. The legal basis for processing is Article 6(1)(c) RODO (fulfilment of the Foundation's legal obligations);
8. ensuring the security and functionality of the Site - the Foundation processes Personal Data where this is necessary to ensure the security of the Foundation's information processing and the management of ICT systems. The legal basis for processing is Article 6(1)(f) RODO (fulfilment of the controller's legitimate interest);
9. Handling of User queries - the Foundation processes Personal Data in order to provide clarifications to User queries, including those contained in the contact form, related to the activities of the Site or the Foundation, to contact the User, to take appropriate explanatory or corrective action, as well as to clarify any incidents related to User service. The legal basis for the processing is Article 6(1)(f) RODO (fulfilment of the administrator's legitimate interest, i.e. to ensure the operation of the Site, to clarify possible User service incidents);
10. protection against possible claims or the assertion of claims - in the event of a need to protect against claims by Users or in the event of possible claims against Users, the Foundation may process Personal Data of Users obtained through the Site. The legal basis for the processing is Article 6(1)(f) RODO (fulfilment of the controller's legitimate interest, i.e. protection against claims or the assertion of claims).

 

V. Recipients of the data

1. The recipients of the Personal Data of the Users of the Site may be employees and associates of the Foundation who have been duly authorised to process the Personal Data of the Users.
2. In the event that the Foundation uses subcontractors providing services related to the operation of the Site or the Foundation (e.g. technical support) the recipients of the Personal Data may also be subcontractors, in particular telecommunication operators. In this case, the Foundation will enter into appropriate agreements with them.
3. The Foundation may be obliged to make Personal Data available at the request of public authorities authorised under relevant legislation.

 

VI. Duration of storage of Personal Data

1. The Foundation retains the Personal Data of Users only for as long as is necessary to fulfill the purposes for which the data was collected. After this time, the data is deleted or anonymised in such a way that the User's identity cannot be established.
2. Personal data may be stored for longer if such an obligation arises from the law or if it is necessary for the Foundation to defend or assert claims against Users.
3. Data processed on the basis of the User's consent will be processed until the User withdraws it.

 

VII. The User's rights

The User has the following rights in relation to his/her Personal Data processed by the Foundation:

1. The right of access to the Personal Data - the Foundation is obliged to provide the User with all information about the manner and scope of the User's Personal Data being processed;
2. The right to rectify the Personal Data - in the event that the User's Personal Data is inaccurate or incomplete, the User may request the Foundation to rectify or complete it;
3. Right to withdraw consent - to the extent that the Personal Data is processed on the basis of the User's consent, the User has the right to withdraw it at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal. The User may withdraw their consent by sending a statement of withdrawal of consent to the Foundation's mailing address or email address: fundacja@artconnctions.pl;
4. The right to erasure of Personal Data - The User has the right to request the erasure of his/her Personal Data if legally justified;
5. The right to restrict the processing of Personal Data - The User may request the Foundation to temporarily suspend the processing of their Data (e.g. not to send information to the email address provided) in certain situations, e.g. when they question the correctness of the Data. Despite the restriction of processing, the Foundation will still be entitled to store the Personal Data;
6. The right to request a transfer of Personal Data - in certain situations (e.g. in relation to data processed on the basis of consent), the User has the right to receive the Personal Data processed by the Foundation in a structured, commonly used machine-readable format;
7. The right to object to the processing of Personal Data - The User may object to the processing on grounds relating to his/her particular situation.

 

Your personal data will not be processed by automated means, including profiling. In order to exercise the rights referred to above, you can contact the Foundation at the following postal or email address: fundacja@artconnctions.pl.

 

VIII. Personal Data Security

1. The Foundation has technical and organisational security measures in place and invests in appropriate solutions to protect Users' Personal Data from destruction, loss, misuse, unauthorised access, modification or disclosure. The Foundation conducts risk analysis on an ongoing basis to ensure that Personal Data is processed by the Foundation in a secure manner. The Foundation ensures that operations on Personal Data are recorded and carried out only by authorised employees and associates.
2. The Foundation takes all necessary measures to ensure that also its subcontractors and other collaborators ensure that appropriate security measures are applied whenever they process Personal Data on behalf of the Foundation.
3. Content Security Policy (CSP) scripts have been installed on the Site. Content Security Policy (CSP) is an additional layer of security that helps to detect and mitigate certain types of attacks used to steal data, damage the Site, distribute malware, among others.

 

IX. Transfer of Personal Data to third countries

The Foundation does not intend to transfer Users' Personal Data to third countries.

 

X. Legal right to lodge a complaint

In the event that a breach of the regulations concerning the protection of Personal Data is deemed to have occurred, the User has the right to lodge a complaint with the President of the Personal Data Protection Authority.

 

XI. Cookie files

1. The Foundation uses Cookies in order to provide the User with access to the Site, to improve its operation and to switch the language version of the Site.
2. Cookies used on the Site contain the name of the website from which they originate, the storage time on the end device and a unique number. The User, as soon as he/she accesses the Site, is informed of the Site's use of cookies and has the possibility to accept the cookies used.
3. The Foundation uses two types of Cookies, in terms of their duration:
   1. session cookies - temporary information stored in the memory of the browser until the end of the browser session, that is, until the browser is closed. These cookies are mandatory in order for certain applications or functionalities of the Site to function correctly;
   2. permanent - files facilitating the use of frequently visited sites (e.g. remembering the selected resolution, content layout). This information remains in the browser's memory for an extended period of time. They can be used for various purposes, including remembering User preferences and choices when using the Site. This type of cookie allows information to be transmitted to the server each time the Site is visited.
4. The User may change the setting of Cookies at any time by changing the privacy settings of his/her browser, except that the User must be aware that this change may result in inability to access certain features of the Site. In particular, the User may, at any time, withdraw consent or change the scope of consent, but this will not affect the lawfulness of the processing carried out on the basis of consent prior to withdrawal/change in scope.
5. In the case of the most popular web browsers, the User can manage his/her own privacy settings, including Cookies, in particular by accepting Cookies, changing their settings, blocking them or deleting them. How and to what extent the privacy settings can be changed depends on the type or version of the browser or application the User is using. Detailed information on how to change your privacy settings is available on the websites of the providers of the aforementioned services.
6. There are links on the Site that will take you to third party websites, including social media sites, other sites, content providers and online services that are not administered by the Foundation. The user should read the privacy and cookie policies posted on the linked sites.