Privacy Policy

1. Data controller

The controller of your personal data is FUNDACJA Q, with its registered office at ul. ks. Henryka Łagockiego 52, 39-460 Nowa Dęba, Poland, registered in the National Court Register under number 0000738025, NIP 8672245427, REGON 380611002 (hereinafter: "Foundation", "we").

For matters related to personal data protection, contact us at: kontakt@fundacjaq.pl.

2. What data we process

We may process data you provide to us:

• in an e-mail message,
• by phone,
• in programme and project application forms (Microsoft Forms),
• when using donation mechanisms available from our website.

In particular, this may include:

• first and last name,
• e-mail address,
• phone number (if provided),
• data provided in a programme or project application,
• donation-related data,
• technical data related to website usage, such as IP address and server logs.

If you choose to donate via external services or payment operators, or to apply via Microsoft Forms, your data may also be processed by those entities in accordance with their own privacy policies. Application forms open on Microsoft’s website — we do not embed them on ours.

3. Purposes and legal bases of processing

We process your data for the following purposes:

a) contact and responding to your message
based on Article 6(1)(f) GDPR, i.e. our legitimate interest in maintaining communication;

b) enabling online donations and handling related actions
based on Article 6(1)(b) GDPR, where processing is necessary to complete payment or donation handling, and Article 6(1)(c) GDPR where legal obligations require accounting and tax records;

c) ensuring website security and proper operation
based on Article 6(1)(f) GDPR;

d) recruitment and participation in programmes and projects
based on Article 6(1)(a) GDPR (consent) and, where an application leads to participation, also Article 6(1)(b) GDPR.

On this website we do not profile users and we do not make automated decisions about them, including decisions based solely on automated processing.

4. Online donations and external entities

Our website may include links or mechanisms enabling donations through external services, in particular:

• Skarbonki Siepomaga,
• wplacam.ngo.pl,
• PayPal.

When you use these solutions, part of the data necessary to process payments and donations is handled by the operators of these services under their own privacy policies.

wplacam.ngo.pl is a tool for collecting online donations, and payments in that system are handled by PayU. wplacam.ngo.pl · wplacam.ngo.pl FAQ
Siepomaga.pl indicates that the data controller within that service is Fundacja Siepomaga. Siepomaga privacy policy
For PayPal payments, PayPal privacy terms apply. PayPal indicates that in the EEA the controller is PayPal (Europe) S.à r.l. et Cie, S.C.A. PayPal privacy policy.

5. Data recipients

Your data may be shared with entities that support us in running the website and our activities, in particular:

• the website hosting provider — Microsoft (Azure Static Web Apps, Central US region, United States); the site may be delivered through Microsoft’s global network,
• the provider storing video and audio files — Microsoft (Azure Blob Storage, Poland),
• e-mail service providers,
• online form providers (Microsoft Forms), if you submit a programme or project application,
• accounting or legal service providers,
• payment operators and external donation services, if you use such solutions,
• authorized public authorities, where required by law.

6. Transfers outside the EEA

The Foundation website is hosted on Microsoft Azure Static Web Apps in the Central US region (United States) and may be delivered through Microsoft’s global network. Technical data related to visits — in particular IP address and request logs — may therefore be processed in the United States, outside the European Economic Area.

Video and audio files (Przekuć Bunt project materials) are stored on Microsoft Azure Blob Storage in Poland, within the European Economic Area. When you play them, your IP address is sent to Microsoft so the file can be delivered.

The Foundation’s Azure services are covered by the Microsoft Customer Agreement. The Microsoft Data Protection Addendum applies with that agreement. Personal data is transferred to Microsoft in the United States on the basis of the European Commission’s standard contractual clauses (Article 46(2)(c) GDPR), which form part of that addendum. Microsoft is certified under the EU-US Data Privacy Framework; it identifies the contractual clauses, not that framework, as the transfer mechanism.

Microsoft Data Protection Addendum (DPA)

7. Data retention period

We store data for as long as necessary to fulfill the purpose for which it was collected, and then for the period required by law or needed to defend against claims.

In practice:

• correspondence data - usually up to 12 months after contact ends,
• programme application data - for the recruitment and delivery period of the programme, then for the period required by law or needed to defend against claims,
• donation and accounting data - for the period required by tax and accounting regulations,
• technical data and logs - for the period necessary for website security and operation.

8. Your rights

You have the right to:

• access your data,
• rectify your data,
• erase your data,
• restrict processing,
• data portability,
• object to processing.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).

9. Voluntary provision of data

Providing data is voluntary, but in some cases necessary for us to respond to your message, enable a donation, or consider a programme application.

10. Cookies

The Foundation website does not set its own cookies and does not use analytics or marketing tools. We do not show a cookie-consent banner, because we do not place cookies that require consent (Article 399 of the Polish Electronic Communications Law).

Contact is by e-mail or phone. We do not run a newsletter and we do not embed YouTube, Vimeo, or social-media content.

Links to ngo.pl (Wpłacam), Siepomaga, PayPal, and Microsoft Forms go to those services’ websites. Their cookies and data processing begin only after you leave for their site.

The hosting provider may keep server logs, including IP address, for security and proper operation of the website.

You can change cookie settings in your browser. Limiting cookies may affect payment sites that open outside our website.

11. Security

We apply appropriate technical and organizational measures to protect personal data, including HTTPS encryption, access control, and software updates.

12. Changes to this privacy policy

We may update this Privacy Policy when necessary due to legal changes, website operation changes, or tools we use. The current version is always available on the Foundation website.

13. Website translations

The English (EN) and Ukrainian (UK) versions of this website are AI-assisted translations of the Polish original. The Polish version is authoritative.

Please report translation errors to: kontakt@fundacjaq.pl.

14. Contact

For matters related to personal data protection, contact us at: kontakt@fundacjaq.pl.