The current version is effective from November 3, 2026.
This policy defines the principles of processing personal data of users of the website www.pieskarmel.pl, in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and regulations concerning privacy and cookies.
1. Data Controller
The personal data controller is FPK Foundation with its registered office in Lipno, ul. Józefa Piłsudskiego 22, 87-600 Lipno, KRS no. 0001025267, NIP 4660432110, hereinafter referred to as the “Fundacja”.
For matters concerning personal data protection, please contact: iod@pieskarmel.pl.
2. Purposes and Legal Bases for Data Processing
The FPK Foundation processes personal data for the purposes of:
a) carrying out statutory activities and legal obligations;
b) concluding and performing contracts, handling orders, payments, and donations;
c) managing user accounts, including Friend of Karmel accounts, and providing electronic services;
d) handling correspondence, contact forms, surveys, and submissions;
e) informing about the FPK Foundation’s activities, conducting social campaigns, promotional and marketing activities, including remarketing;
f) analyzing website traffic, compiling statistics, personalizing content, and measuring advertising effectiveness;
g) ensuring the security and proper functioning of the website;
h) maintaining records, settlements, and establishing, pursuing, or defending claims.
The legal basis for processing personal data depends on the purpose and may be consent (Art. 6(1)(a) GDPR), performance of a contract or actions before its conclusion (letter b), legal obligation (letter c), or the legitimate interest of the FPK Foundation (letter f). Where consent is required, processing takes place only after it is obtained.
3. Data Recipients
Personal data may be disclosed to authorized members of the Foundation’s bodies, employees, collaborators, volunteers, and proxies, as well as entities providing IT, hosting, accounting, legal, payment, logistical, analytical, and marketing services.
Data may also be transferred to competent public authorities if required by law.
4. Donations and Payments
Data provided during donations, orders, or payments is processed to execute these activities, manage settlements, and fulfill legal obligations.
Information about transaction-related activity may also be used for analytical and marketing purposes solely on an appropriate legal basis, including obtaining consent if required.
5. Data Retention Period
Personal data is retained for the period necessary to achieve the processing purposes and then for the period required by law or justified by the necessity to pursue or defend claims.
Data processed on the basis of consent is retained until the consent is withdrawn or the processing purpose ceases, unless another legal basis for further retention exists.
6. User Rights
Under the rules specified in the GDPR, users have the right to:
a) access their data and receive copies;
b) rectify or complete their data;
c) erase data;
d) restrict processing;
e) data portability;
f) object to data processing, including for direct marketing purposes;
g) withdraw consent at any time without affecting the lawfulness of prior processing;
h) lodge a complaint with the President of the Personal Data Protection Office.
Requests regarding the exercise of these rights may be sent to iod@pieskarmel.pl.
7. Voluntariness of Data Provision
Providing data is generally voluntary but may be necessary to conclude or perform a contract, process a donation, order, correspondence, or fulfill a legal obligation. Failure to provide required data may prevent the completion of a given activity.
8. Automated Processing and Profiling
User data may be processed in an automated manner, including profiling for analytical and marketing purposes, consisting of analyzing activity and tailoring informational and advertising content to users’ interests.
The FPK Foundation does not make decisions based solely on automated processing that would have legal effects or similarly significant impact on users.
9. Cookies and Similar Technologies
The website uses cookies and similar technologies necessary for its operation, managing accounts, payments, and donations, as well as analytical and marketing technologies for statistics, content personalization, ad effectiveness measurement, and remarketing.
These technologies may process information about user activity, visited subpages, actions performed, internet identifiers, and technical device data.
Technologies essential for the proper functioning of the website are used to the extent permitted by law. Other technologies requiring consent are activated only after obtaining it.
Users can accept all optional technologies, refuse their use, or adjust consent settings. Consent can be changed or withdrawn at any time via the Cookie Settings available on the website.
Information about currently used technologies, their purposes, retention periods, providers, and data recipients is available in the cookie settings or a separate notice on the website.
10. Data Transfer Outside the EEA
Due to using services from external providers, data may be transferred outside the European Economic Area, in accordance with GDPR provisions and required safeguards, especially adequacy decisions or standard contractual clauses.
Information about applied safeguards and the possibility of obtaining copies can be obtained by contacting the Foundation.
11. Data Security
The FPK Foundation applies appropriate technical and organizational measures to protect personal data against unauthorized access, loss, disclosure, and unlawful processing.
12. Changes to the Privacy Policy
The privacy policy may be updated due to legal changes, Foundation activities, or applied technologies. The current version of the document is published on the website.
Last update date: November 3, 2026.