Skip to content

Personal data processing clause

Privacy Policy

In accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, “GDPR”), we hereby inform you about the principles of processing your personal data and your rights related thereto.

The following principles apply from 11 September 2024.

 

  1. Data Controller: The controller of your personal data processed on the website www.pieskarmel.pl (hereinafter referred to as the “website”) is Fundacja Psa Karmela, located at Józefa Piłsudskiego 22, 87-600 Lipno, Poland, registered under KRS number 0001025267, NIP 4660432110 (hereinafter referred to as “FPK”).

  2. Data Protection Officer: The Data Protection Officer at FPK is the Management Board of FPK. Contact email for data protection matters: iod@pieskarmel.pl.

  3. Legal Basis for Processing: FPK processes your personal data based on applicable legal provisions, concluded agreements, and your consent.

  4. Purposes of Data Processing: Your personal data may be processed for the following purposes:

    a) Compliance with legal obligations incumbent upon FPK;

    b) Performance of contracts concluded by FPK to the extent necessary for their proper execution;

    c) Execution of contracts, services, or e-services conducted via the website;

    d) Communication (e.g., contact form, survey, email);

    e) Promotion of the goals and activities of FPK;

    f) Marketing, remarketing, affiliation;

    g) Personalization of the website for users;

    h) Operation and use of the website by users;

    i) Creation, operation, and use by users of a user account (also referred to as the “Friend of Karmel Account”) on the website;

    j) Analytical and statistical activities;

    k) Processing of payments, donations made through the website or applications provided on the website;

    l) In other cases, your personal data is processed solely based on prior consent, within the scope and purpose specified in the consent.

  5. Recipients of Data: In connection with the processing of data for the purposes mentioned in point 4, recipients of your personal data may include:

    a) Members of statutory bodies, employees, collaborators, volunteers, and proxies of FPK;

    b) Natural and legal persons providing services or delivering goods to FPK — to the extent necessary for proper service provision or goods delivery;

    c) Public authorities and entities performing public tasks or acting on behalf of public authorities, within the scope and for purposes arising from generally applicable laws;

    d) Other entities, natural and legal persons, who, based on relevant agreements with FPK, process personal data for which FPK is the controller.

  6. Donation Data: Personal data provided when making a donation through the website or applications provided on the website are processed solely for the purpose of executing the donation and concluding the donation agreement, as well as fulfilling obligations arising from legal provisions.

  7. Data Retention: Your personal data will be stored for the period necessary to achieve the purposes specified in point 4, and thereafter for the period and to the extent required by generally applicable laws.

  8. Your Rights: In connection with the processing of your personal data, you have the following rights:

    a) Right to access personal data, including the right to obtain a copy of the data;

    b) Right to request rectification (correction) of personal data—if the data is incorrect or incomplete;

    c) Right to request erasure of personal data (the so-called “right to be forgotten”) in cases where:

    • the data is no longer necessary for the purposes for which it was collected or otherwise processed;

    • you have objected to the processing of personal data;

    • you have withdrawn consent on which the processing is based, and there is no other legal ground for the processing;

    • the personal data has been unlawfully processed;

    • the personal data must be erased to comply with a legal obligation;

    d) Right to request restriction of processing of personal data in cases where:

    • you contest the accuracy of the personal data;

    • the processing is unlawful, and you oppose the erasure of the personal data and request the restriction of its use instead;

    • the controller no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise, or defense of legal claims;

    • you have objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject;

    e) Right to data portability—if the following conditions are met:

    • the processing is based on a contract or on consent;

    • the processing is carried out by automated means;

    f) Right to object to processing of personal data in cases where:

    • there are reasons related to your particular situation, in the case of processing based on a task carried out in the public interest or in the exercise of official authority vested in the controller;

    • the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms;

  9. Withdrawal of Consent: If the processing of personal data is based on your consent (Article 6(1)(a) GDPR), you have the right to withdraw this consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

  10. Right to Lodge a Complaint: If you become aware of unlawful processing of your personal data by the Karmel Dog Foundation, you have the right to lodge a complaint with the supervisory authority competent for data protection matters.

  11. Voluntary Provision of Data: Where the processing of personal data is based on your consent, providing your personal data to the controller is voluntary.

  12. Obligatory Provision of Data: Providing your personal data is obligatory when the legal basis for processing is a legal provision or a contract concluded between the parties.

  13. Automated Processing: Your data may be processed in an automated manner, which does not affect decisions made and will not be subject to profiling.