Privacy policy
This document outlines the way Fundacja Centrum Cyfrowe processes personal data and the rights of people whose data we process. It will tell you whose data we process and how, as well as outline the rules we follow. Those rules are in place to protect your data and respect your decisions about how it is used. Our privacy policy is compliant with the General Data Protection Regulation (GDPR).
Who processes your data, and how?
The personal data for which the rules of processing are stated in this document is controlled by Fundacja Centrum Cyfrowe, located in Warsaw, 00-020, Chmielna 24/2. In order to contact us, you can send us an email at kontakt@centrumcyfrowe.pl or send a letter to our office at the address mentioned above.
Most of the personal data we handle is stored electronically: mostly on a rented server, but also on office computers, external drives and phones (including private phones). Our team, as well as parties the foundation works with, process data using IT tools – mostly email and cloud file storage. Some data is stored in print form at our office.
Who do we transfer data to?
We transfer personal data to parties we collaborate with on a regular basis and who provide us with:
a) IT services;
b) accounting services;
c) mail and messenger services
In some cases we transfer data to other parties (such as people or companies we work with to organize training or other events) – in such cases, the people whose data is transferred are informed of the fact.
We do not transfer data outside of the European Economic Area unless necessary, and if so, we make sure it is appropriately protected by:
a) cooperating with parties that process personal data in countries in relation to which an appropriate European Commission decision was made;
b) using standard contractual clauses published by the European Commission, applying necessary security measures;
Rights of individuals whose data we process
Every person whose data we process has the right to access the content of their data, the right to receive a copy of it, the right to request its correction, and – in certain cases (for example when we don’t need the personal data for processing any more) – request for it to be removed or to limit its processing.
If the data is processed for the purpose of fulfilling an agreement to receive requested materials (such as the Centrum Cyfrowe newsletter), it can be canceled at any moment (see below). If your data is processed on the basis of your consent, you can withdraw it at any time. In both cases (processing data on the basis of an agreement or consent) individuals whose data is processed can also ask for their data to be transferred.
Whose data we process and on what terms
Data of Centrum Cyfrowe website visitors
The data we collect via our websites is limited to what is necessary for managing the sites, making sure the functionalities they offer work properly, and analyzing the effectiveness of our communication.
The tool we use for generating and analyzing site visit statistics (Piwik) collects it using cookie files: _pk_id., _pk_ses.
The data we collect is not associated with particular individuals viewing our sites. Everyone can use our websites without providing additional personal data – registration is not required.
We also do not require submitting any personal data when posting comments under texts published on centrumcyfrowe.pl. Any personal data shared this way will be processed on the basis of legitimate interest, only for the purpose of displaying comments and responding to them. If you do not wish for your information to be made public, please do not post it in the comments.
Any information published on the website and statistical data collected by Piwik will be stored until the end of the Foundation’s operations.
Data of Centrum Cyfrowe’s newsletter subscribers
We process the email addresses of Centrum Cyfrowe’s newsletter subscribers in order to send them the information they requested – it is necessary in order to fulfil the agreement. Submitting your data is voluntary, but necessary in order to request the mailing.
You can unsubscribe from any of the lists at any time by clicking the resignation link at the bottom of the email.
The personal data of the subscribers of a particular list is stored on the basis of our legitimate interest, for the purpose of managing relations, until you cancel your subscription.
Data of public or online events participants
When organizing open public events, we do not request personal data from participants. In the case of events that require registration (in case of online event – also sending out invites) we usually ask for the participant’s first and last name, email address and phone number, unless the nature of the event (for example training) requires collecting additional information. In such cases submitting your data is voluntary but necessary to register for the event. We process this data for the purpose of organizing the event – it is necessary in order to fulfill the agreement.
The data of individuals qualified for an event that requires registration is processed for six months after their participation in our event, on the basis of our legitimate interest, for the purpose of evaluating the event, unless the data processing consent was given after the purpose for which it was given expired – in that case we process the data until you express your objection, which you can submit by email at kontakt@centrumcyfrowe.pl. If an event is organized with the financial help of a grant donor who requires us to store documentation for a longer period, we will provide this information when you register.
When organizing some events, we also ask for permission to inform you of other, similar initiatives. If you grant us such permission, you can withdraw it at any time or request a transfer of your data. If you do not do so, we will store your data until the end of the Foundation’s operations.
Data of projects’ participants
Personal data of projects’ participants, depending on its terms and conditions, are processed based on our legitimate interest related to communication with the participants, as well as in relation to the contract concluded with participants. We usually process your name and surname, address, e-mail address, phone number and possible other data indicated in the registration form. We clearly mark voluntarily information and information necessary for us to achieve the above purposes.
We process the data until the conclusion of the project and later on for as long as necessary according to the law, which is normally 5 years upon completion of the project or for the establishment, exercise or defense of legal claims.
Data of persons registering an account on our websites
Some of our websites allow registering a user account. In such cases, data required for the registration are necessary to provide electronic services (managing the account) on terms and conditions indicated on the website. Personal data are also processed in relation to the legitimate interest of the Foundation, namely for the establishment, exercise or defense of legal claims.
Personal data is processed for as long as the account is active, and later on for as long as necessary for the establishment, exercise or defense of legal claims.
Data of individuals using private communication channels
Personal data related to people we contact via email and phone is processed on the basis of legitimate interest, for the purpose of managing correspondence, for purposes related to the contents of the communication, or in order to be in contact in the future. This data may include first and last name, address, email address, phone number and any other information included in the messages. Providing this data is voluntary.
Data of individuals contacting the Foundation via social media
Facebook and Twitter are the controllers of the personal data of their users and process it according to their own regulations. When you interact with us via Facebook or Twitter (this includes liking or following our pages, reacting to posts, sharing or retweeting, commenting, sending direct messages), Centrum Cyfrowe also becomes the controller of your personal data. This data is processed on the basis of our legitimate interest, for the purpose of responding to comments and messages, as well as maintaining relations with people who interact with us.
Data of journalists or public figures
We process the personal data of journalists or public figures which we obtained directly from them, from their offices or from the Internet, based on publicly available information. The data we process can include first and last name, gender, email address, phone number, affiliation (including past affiliations), office address, as well as interaction and publication history. This data is processed on the basis of our legitimate interest, for the purpose of informing them of Centrum Cyfrowe’s activities and managing relations.
We process this data until the end of the Foundation’s operations. If you do not wish to receive our press releases, you can object to the processing of your personal data by emailing us at kontakt@centrumcyfrowe.pl.
Cookie files
Our websites use cookie files that are necessary for the maintenance of the sites and for providing their functionalities. Cookies on our sites can be used to identify a user’s session in order to collect statistical data about the audience of our websites (this includes _pk_id., _pk_ses. files). We do not include third-party cookies on our sites, for instance from behavioral advertising companies.
Cookie files on our websites are only used for anonymous statistical information on page views, with the help of the Piwik tool, which respects the “Do Not Track” setting in your browser. You can manage cookies in your browser’s settings or using one of many available (and free) solutions (such as Ghostery). However, blocking cookies will make it impossible to log in to our sites or fill forms that use CSRF attack prevention.