Privacy policy

This document outlines the way Fundacja Centrum Cyfrowe processes personal data and the rights of people whose data we process. It will tell you whose data we process and how, as well as outline the rules we follow. Those rules are in place to protect your data and respect your decisions about how it is used. Our privacy policy is compliant with the General Data Protection Regulation (GDPR).

Who processes your data, and how?

The personal data for which the rules of processing are stated in this document is controlled by Fundacja Centrum Cyfrowe, located in Warsaw, 00-020, Chmielna 24/2. In order to contact us, you can send us an email at: or send a letter to our office at the address mentioned above.

Most of the personal data we handle is stored electronically: mostly on a rented server, but also on office computers, external drives and phones (including private phones). Our team, as well as parties the foundation works with, process data using IT tools – mostly email and cloud file storage. Some data is stored in print form at our office.

Who do we transfer data to?

We transfer personal data to parties we collaborate with on a regular basis and who provide us with:

a) IT services;
b) accounting services;
c) mail and messenger services.

In some cases we transfer data to other parties (such as people or companies we work with to organize training or other events) – in such cases, the people whose data is transfered are informed of the fact.

We do not transfer data outside of the European Economic Area unless necessary, and if so, we make sure it is appropriately protected by:

a) cooperating with parties that process personal data in countries in relation to which an appropriate European Commission decision was made;
b) using standard contractual clauses published by the European Commission;
c) using binding corporate rules approved by the appropriate supervisory institution;
d) in the case of transferring data to the USA – cooperating with parties that participate in the Privacy Shield program, approved by the European Commission.

Rights of individuals whose data we process

Every person whose data we process has the right to access the content of their data, the right to receive a copy of it, the right to request its correction, and – in certain cases (for example when we don’t need the personal data for processing any more) – request for it to be removed or to limit its processing.

If the data is processed for the purpose of fulfilling an agreement to receive requested materials (such as the Centrum Cyfrowe newsletter), it can be canceled at any moment (see below). If your data is processed on the basis of your consent, you can withdraw it at any time. In both cases (processing data on the basis of an agreement or consent) individuals whose data is processed can also ask for their data to be transferred.

Whose data we process and on what terms

Data of Centrum Cyfrowe website visitors

The data we collect via our websites is limited to what is necessary for managing the sites, making sure the functionalities they offer work properly, and analyzing the effectiveness of our communication.
The tool we use for generating and analyzing site visit statistics (Piwik) collects it using cookie files: _pk_id., _pk_ses.
The data we collect is not associated with particular individuals viewing our sites. Everyone can use our websites anonymously – registration is not required.
We also do not require submitting any personal data when posting comments under texts published on Any personal data shared this way will be processed on the basis of legitimate interest, only for the purpose of displaying comments and responding to them. If you do not wish for your information to be made public, please do not post it in the comments.
Any information published on the website and statistical data collected by Piwik will be stored until the end of the Foundation’s operations.

Data of Centrum Cyfrowe’s newsletter and Kserokopia subscribers

We process the email addresses of Centrum Cyfrowe’s newsletter and Kserokopia subscribers in order to send them the information they requested – it is necessary in order to fulfil the agreement. Submitting your data is voluntary, but necessary in order to request the mailing.
You can unsubscribe from any of the lists at any time by clicking the resignation link at the bottom of the email.
The personal data of the subscribers of a particular list is stored on the basis of our legitimate interest, for the purpose of managing relations, for one year after the end of the calendar year during which the individual cancels their subscription.

Data of public event participants

When organizing open public events, we do not request personal data from participants. In the case of events that require registration, we usually ask for the participant’s first and last name, email address and phone number, unless the nature of the event (for example training) requires collecting additional information. In such cases submitting your data is voluntary but necessary to register for the event. We process this data for the purpose of organizing the event – it is necessary in order to fulfill the agreement.
The data of individuals qualified for an event that requires registration is processed for six months after their participation in our event, on the basis of our legitimate interest, for the purpose of evaluating the event, unless the data processing consent was given after the purpose for which it was given expired – in that case we process the data until you express your objection, which you can submit by email at If an event is organized with the financial help of a grant donor who requires us to store documentation for a longer period, we will provide this information when you register.
When organizing some events, we also ask for permission to inform you of other, similar initiatives. If you grant us such permission, you can withdraw it at any time or request a transfer of your data. If you do not do so, we will store your data until the end of the Foundation’s operations.

Data of individuals using private communication channels

Personal data related to people we contact via email and phone is processed on the basis of legitimate interest, for the purpose of managing correspondence, for purposes related to the contents of the communication, or in order to be in contact in the future. This data may include first and last name, address, email address, phone number and any other information included in the messages. Providing this data is voluntary.

Data of individuals contacting the Foundation via social media

Facebook and Twitter are the controllers of personal data of their users and process it according to their own regulations. When you interact with us via Facebook or Twitter (this includes liking or following our pages, reacting to posts, sharing or retweeting, commenting, sending direct messages), Centrum Cyfrowe also becomes the controller of your personal data. This data is processed on the basis of our legitimate interest, for the purpose of responding to comments and messages, as well as maintaining relations with people who interact with us.

Data of journalists

We process the personal data of journalists which we obtained directly from them, from their offices or from the internet. The data we process can include: first and last name, gender, email address, phone number, affiliation (including past affiliations), office address, as well as interaction and publication history. This data is processed on the basis of our legitimate interest, for the purpose of informing them of Centrum Cyfrowe’s activities and managing relations.

We process this data until the end of the Foundation’s operations. If you do not wish to receive our press releases, you can object to the processing of your personal data by emailing us at

Cookie files

Our websites use cookie files that are necessary for the maintenance of the sites and for providing their functionalities. Cookies on our sites can be used to identify a user’s session in order to collect statistical data about the audience of our websites (this includes _pk_id., _pk_ses. files). We do not include third party cookies on our sites, for instance from behavioral advertising companies.
Cookie files in the domain are only used for anonymous statistical information on page views, with the help of the Piwik tool, which respects the “Do Not Track” setting in your browser. You can manage cookies in your browser’s settings or using one of many available (and free) solutions (such as Ghostery). However, blocking cookies will make it impossible to log in to our sites or fill forms that use CSRF attack prevention.

This cookie information text was based on the Modern Poland Foundation’s privacy policy made available under the CC BY-SA 3.0 Polska license.