Privacy Policy

1. General information

1. This policy applies to the website operating at the URL: www.stop-znieczulicy.pl
2. The website operator and personal data controller is: Fundacja STOP Znieczulicy, al. Jana Pawła II 27, 00-867 Warsaw
3. Operator contact email address: fundacja@stop-znieczulicy.pl
4. The Operator is the Controller of your personal data in relation to data voluntarily provided through the Website.
5. The Website uses personal data for the following purposes:
• Sending the newsletter
• Handling enquiries submitted through the form
• Przyjęcie, obsługa i rozliczenie darowizn oraz realizacja płatności elektronicznych.
• Presenting offers or information
6. The Website obtains information about users and their behaviour in the following ways:
   1. Through data voluntarily entered in forms, which is then entered into the Operator systems.
   2. By storing cookie files on end-user devices.

2. Selected data protection measures used by the Operator

1. Login areas and places where personal data are entered are protected during transmission with an SSL certificate. As a result, personal data and login details entered on the Website are encrypted on the user device and can only be read by the destination server.
2. To minimise the risk of unauthorised access to data, the Operator uses complex passwords containing lowercase and uppercase letters, numbers and special characters, with a minimum length of 8 characters.
3. An important element of data protection is the regular updating of all software used by the Operator to process personal data, including regular updates of software components.
4. To protect data, the Operator regularly creates backups.

3. Hosting

1. Serwis jest hostowany (technicznie utrzymywany) w ramach usług zenbox.pl, których operatorem jest cyber_Folks S.A., ul. Wierzbięcice 1B, 61-569 Poznań, NIP 7792467259, KRS 0000685595.
2. To ensure technical reliability, the hosting provider keeps server-level logs. These may include:
   • resources identified by URL (addresses of requested resources such as pages and files),
   • the time the request was received,
   • the time the response was sent,
   • the client station name, identified using the HTTP protocol,
   • information about errors that occurred while processing HTTP transactions,
   • the URL of the page previously visited by the user, where the Website was accessed through a link,
   • information about the user browser,
   • information about the IP address,
   • diagnostic information related to the process of ordering services independently through forms or registrars on the Website,
   • information related to handling email sent to the Operator and sent by the Operator.

4. Your rights and additional information on how data is used

1. In some situations, the Controller may disclose your personal data to other recipients where this is necessary to perform a contract concluded with you or to fulfil obligations imposed on the Controller. This may apply to the following groups of recipients:
   • cyber_Folks S.A. (zenbox.pl) jako dostawca hostingu, w zakresie niezbędnym do technicznego utrzymania Serwisu
   • PayPro S.A. (Przelewy24) w zakresie niezbędnym do realizacji i rozliczenia płatności elektronicznych. W zakresie danych przetwarzanych w związku ze świadczeniem usług płatniczych PayPro S.A. działa jako odrębny administrator danych. Szczegółowe informacje są dostępne w obowiązku informacyjnym dla płatników Przelewy24.
   • postal operators
   • authorised employees and contractors who use the data to fulfil the purpose of the website
   • public authorities
   • companies providing marketing services to the Controller
2. Your personal data are processed by the Controller no longer than necessary to perform the activities connected with them and required by separate regulations, for example accounting regulations. Marketing data will not be processed for longer than 3 years.
3. You have the right to request from the Controller:
   • access to your personal data,
   • rectification of your personal data,
   • erasure of your personal data,
   • restriction of processing,
   • and data portability.
4. You have the right to object to processing referred to in section 3.3(c) where personal data are processed for the legitimate interests pursued by the Controller, including profiling. The right to object may not apply where there are compelling legitimate grounds for the processing that override your interests, rights and freedoms, in particular for the establishment, exercise or defence of legal claims.
5. You have the right to lodge a complaint about the Controller activities with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
6. Providing personal data is voluntary, but necessary to use the Website.
7. Automated decision-making, including profiling, may be carried out in relation to you for the purpose of providing services under a concluded contract and for the Controller direct marketing.
8. Personal data are not transferred to third countries within the meaning of data protection regulations. This means that we do not transfer them outside the European Union.

5. Information in forms

1. The Website collects information voluntarily provided by the user, including personal data where such data is provided.
2. The Website may record connection parameters such as timestamp and IP address.
3. In some cases, the Website may store information that makes it easier to link data entered in a form with the email address of the user completing the form. In such a case, the user email address may appear within the URL of the page containing the form.
4. Data provided in a form are processed for the purpose resulting from the function of that specific form, for example handling a service request, business contact or service registration. The context and description of each form clearly indicate what it is used for.

6. Administrator Logs

1. Information about user behaviour on the Website may be logged. These data are used to administer the Website.

7. Important Marketing Techniques

1. The Operator uses Google Analytics to perform statistical analysis of Website traffic. The Operator does not provide personal data to the service provider, only anonymised information. The service uses cookies stored on the user device. Information about preferences collected by the Google advertising network can be reviewed and edited using the tool at https://www.google.com/ads/preferences/
2. The Operator uses the Facebook Pixel. This technology allows Facebook to recognise that a registered user has used the Website. Facebook acts as controller of the data it already holds and the Operator does not provide Facebook with additional personal data. The service uses cookies stored on the user device.
3. The Operator uses remarketing techniques that allow advertising messages to be tailored to user behaviour on the Website. This may create the impression that personal data are being used to track the user, although in practice no personal data are transferred by the Operator to advertising providers. Such activities require cookies to be enabled.
4. The Operator uses a solution that analyses user behaviour through heatmaps and session recordings. This information is anonymised before it is sent to the service provider so that the provider cannot identify the individual concerned. In particular, passwords and other personal data entered by users are not recorded.
5. The Operator uses solutions that automate Website interactions with users, for example sending an email after a user visits a specific page, provided that the user has consented to receive commercial communications from the Operator.
6. The Operator may use profiling within the meaning of data protection regulations.

8. Cookie Information

1. The Website uses cookies.
2. Cookies are IT data, in particular text files, stored on the end device of a Website User and intended to support use of the Website. Cookies usually contain the name of the website they come from, the time they are stored on the end device and a unique number.
3. The Website Operator places cookies on the User end device and accesses them.
4. Cookies are used for the following purposes:
   1. maintaining a Website User session after login so that the User does not have to re-enter the login and password on every page,
   2. carrying out the purposes described above in the Important marketing techniques section,
5. The Website uses two main types of cookies, session cookies and persistent cookies. Session cookies are temporary files stored on the User end device until logout, leaving the Website or closing the browser. Persistent cookies remain on the User end device for the period specified in their parameters or until deleted by the User.
6. Web browsers usually allow cookies to be stored on the User end device by default. Website Users can change these settings. Browsers allow cookies to be deleted and can also block them automatically. Detailed information is available in the browser help or documentation.
7. Restricting the use of cookies may affect some functions available on the Website.
8. Cookies placed on the Website User end device may also be used by entities cooperating with the Website Operator, in particular Google, Facebook and Twitter.

9. Managing Cookies - How to Give and Withdraw Consent in Practice?

1. If a user does not want to receive cookies, they can change their browser settings. Disabling cookies required for authentication, security and maintaining user preferences may make use of websites more difficult and, in extreme cases, may prevent their use.
2. To manage cookie settings, select the browser you use from the list below and follow the relevant instructions.
   • Edge
   • Internet Explorer
   • Chrome
   • Safari
   • Firefox
   • Opera

   Mobile devices:

   • Android
   • Safari (iOS)
   • Windows Phone