Privacy policy

1. Data controller

The controller of personal data is Fundacja Morusek – Odzyskać Nadzieję, which operates the website fundacjamorusek.org.

The controller is responsible for ensuring that personal data is processed in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

2. What data may be processed

The scope of data depends on how you use the website. In particular, the controller may process:

• your name and surname or signature if you provide them in the contact form or in an e-mail,
• your e-mail address, phone number or other contact details if you share them voluntarily,
• the content of a message sent through the contact form or by e-mail,
• technical data related to the use of the website, such as IP address, browser type, date and time of the request, the URL of the page visited and basic server logs.

Providing data is voluntary, but in practice it may be necessary to receive a reply to your message or to handle your enquiry properly.

Please do not send unnecessary data via the form or e-mail, especially special categories of personal data, unless they are required to deal with a specific matter.

3. Purposes and legal bases of processing

Contact via the form or e-mail

Data provided in a message is processed in order to respond, conduct correspondence and handle the enquiry.

The legal basis is primarily the controller’s legitimate interest consisting in handling correspondence and enquiries, and in relevant cases also taking steps at the request of the data subject before establishing cooperation, support or another relationship.

Compliance with legal obligations

If the law requires the storage of certain information, documentation or correspondence, data may also be processed in order to fulfil legal obligations incumbent on the controller.

Website security and prevention of abuse

Technical data and server logs may be processed in order to ensure website security, detect errors, prevent abuse and protect against unauthorised access.

No profiling

Data is not used for automated decision-making concerning users and is not used for profiling within the meaning of the GDPR.

4. How long we store data

• correspondence data — for the time necessary to respond and close the matter, and afterwards for the period needed to protect against possible claims or to document the course of contact,
• data processed in order to comply with legal obligations — for the period required by law,
• technical data and server logs — for the period needed to ensure security, diagnostics and proper functioning of the website.

After the relevant period expires, data is deleted or anonymised unless further storage is required by applicable law.

5. Recipients of data

Data may be disclosed to entities supporting the controller in maintaining the website and handling contact, but only to the extent necessary for the operation of the service.

• hosting and technical infrastructure providers,
• e-mail providers or contact tool providers,
• entities supporting website maintenance, security or service,
• competent public authorities — only where required by law.

As a rule, the controller does not transfer data outside the European Economic Area as part of the normal operation of this website. If you leave this website and go to external services such as social media or external forms, further processing is governed by the rules of those entities.

6. Cookies and server logs

Cookies

The website may use strictly necessary cookies, i.e. cookies required for the proper functioning of the service, security, maintenance of a technical session or correct display of the website.

At the time of publication of this policy, the website is not intended to use cookies for marketing, profiling or behavioural advertising. If additional tools are introduced in the future, for example analytics or marketing tools, this policy will be updated accordingly and — where required — an appropriate consent mechanism will be implemented.

Server logs

Regardless of cookies, the server may automatically save basic technical information when you use the website, such as IP address, date and time of access, browser type or the address of the requested page. This data is used mainly for administrative purposes, security and error diagnostics.

Managing cookies

You can control cookies yourself through your browser settings. Restricting some cookies may, however, affect the proper functioning of selected website features.

7. Your rights

In connection with the processing of your personal data, you have the right to:

• access your data,
• rectify your data,
• erase your data — in cases provided for by law,
• restrict processing,
• object to processing based on the controller’s legitimate interest,
• data portability — if processing is based on consent or a contract and is carried out by automated means,
• withdraw consent at any time — if processing is based on consent,
• lodge a complaint with the competent supervisory authority.

To exercise your rights, you may contact the controller by e-mail.

8. Contact regarding data protection matters

If you have questions related to the protection of personal data, you can contact the controller:

• e-mail: kontakt@fundacjamorusek.org
• postal address: Fundacja Morusek – Odzyskać Nadzieję, ul. Gajowa 31B, Maków, 26-640 Skaryszew, Poland

9. Changes to this privacy policy

This privacy policy may be updated if the way the website operates changes, the scope of processed data changes, new tools are used or legal regulations are amended.

The new version of the policy will be published on this page together with the date of the update.