Personal data processing clause (GDPR)

In connection with the entry into force of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (GDPR), we hereby inform you that we process your personal data. Details regarding these operations can be found below.

I. PERSONAL DATA CONTROLLER

The controller of your personal data is the Corda Unitum Foundation, with its registered office at 4G/20 Urocza Street, Rzeszow, Poland, KRS: 0001040584; REGON: 525515516; NIP: 8133899009; email address: info@cordaunitum.com, hereinafter referred to as the “Foundation.”

II. DATA PROTECTION OFFICER

We employ a Data Protection Officer whom you can contact regarding the protection of your personal data and the exercise of your rights via email: info@cordaunitum.com, or in writing at our registered office address mentioned in point I.

III. PURPOSES AND LEGAL BASES OF PROCESSING

We process your personal data for the following purposes:

For accounting purposes when making donations to the Foundation and to fulfill legal obligations (including tax obligations) towards our country (legal basis: Article 6(1)(b) of the GDPR).
To send you information about the Foundation, volunteering opportunities, or working for the Foundation. This involves a form of contract: we send you our materials (brochures, promotional materials such as pens, etc.), and you wish to promote our activities. This correspondence on our part is done to fulfill and on the basis of the contract concluded with you (legal basis: Article 6(1)(b) of the GDPR).
To maintain contact with you via mail or email to inform you about your donations that have been deposited into our accounts, as well as to inform you about the Foundation’s recent achievements and ongoing projects conducted by the Foundation (legal basis: Article 6(1)(f) of the GDPR).
For internal Foundation purposes, we analyze data related to your payments (legal basis: Article 6(1)(f) of the GDPR).

IV. CATEGORIES OF DATA PROCESSED

Here are the categories of your data that we process:

Basic identification data.
Basic contact data.
Basic electronic contact data.
Donations to the Corda Unitum Foundation.

V. RECIPIENTS OF DATA

We may share your personal data with the following categories of entities:

Accounting firm.
Companies providing postal and courier services.

VI. TRANSFER OF DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS

We do not transfer your data outside of Poland.

VII. DATA RETENTION PERIOD

Personal data received from you along with your donation must be kept by us for reporting and tax purposes for a period of 5 years, starting from the end of the calendar year in which the Foundation’s tax payment deadline expires.

We process your basic identification and basic contact data for the purpose of correspondence conducted by the Corda Unitum Foundation (see point III) until you object to their processing for this purpose, or until we determine that such processing of your data is no longer justified (see point III).

VIII. YOUR RIGHTS

You have the following rights:

The right to access your data and receive a copy of it.
The right to rectify (correct) your data.
The right to erase data if, in your opinion, there is no legal basis for us to process your data.
The right to restrict data processing, e.g., only to its storage.
The right to object to processing for direct marketing purposes (conducted by the Foundation). If you exercise this right, we will cease processing data for this purpose.
The right to data portability to another data controller if such data is necessary to perform a contract or is processed based on consent.
The right to lodge a complaint with a supervisory authority. If you believe that we process your data unlawfully, you can file a complaint with the President of the Personal Data Protection Office or another relevant supervisory authority.

IX. INFORMATION ABOUT THE OBLIGATION/VOLUNTARY BASIS OF PROVIDING DATA

Providing basic identification and basic address data when making a donation is voluntary. However, the lack of such data will prevent us from contacting you. We will not be able to thank you for your donation, inform you about how we have used it, or provide you with a confirmation of payment required for a tax deduction.

X. INFORMATION ABOUT AUTOMATED DECISION-MAKING, INCLUDING PROFILING

The Foundation conducts such actions solely to make decisions about further correspondence with donors based on the history of donations made.

XI. SOURCE OF DATA

Your personal data that we process may have been obtained from several, exclusively legal sources:

You may have provided them to us through an institution through which you made a donation.
You may have provided them directly to the Corda Unitum Foundation, e.g., when ordering our informational and/or promotional materials or making a personal donation at the Foundation’s headquarters.