Five First Saturdays

Privacy Policy

INTRODUCTION

The Association for Christian Culture Fr. Piotr Skarga, with its registered office in Krakow, at ul. Augustiańska 28, 31-064 Kraków (hereinafter referred to as the Association or the Administrator), fulfilling its obligations under applicable data protection laws, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as GDPR), wishes to provide you with information regarding the processing and protection of your personal data.

The information contained in this Privacy Policy will help you understand what personal data the Association collects and processes, for what purpose it is used, and what rights you have regarding the protection of personal data.

PROCESSES OF PERSONAL DATA PROCESSING IN THE ASSOCIATION

The Association collects and processes personal data in connection with:

maintaining permanent contact with the Association in connection with the implementation of its statutory objectives, in particular by informing about organized social actions (campaigns, debates, seminars, scientific and press conferences), as well as opportunities to support the Association’s activities,
conducted social actions (collecting signatures for actions, protests, etc.),
establishing contact via contact forms available on the websites,
organizing events, debates, seminars, conferences,
sharing the Association’s publications,
supporting the Association’s activities by donors,
online recruitment for vacant positions, internships, or apprenticeships in the Association,
users’ use of the Association’s websites (use of cookies).

III. CATEGORIES OF DATA PROCESSED BY THE ASSOCIATION

The Association collects and processes personal data to the extent necessary to achieve the purpose for which it was collected. Depending on the purpose and legal basis for processing personal data, the Association may collect and process, among others, the following data:

identifying data, including among others: name, surname, PESEL (Polish national identification number), date of birth;
contact data, including among others: address, phone number, email address;
data collected and processed in connection with the Association’s statutory objectives, including, among others, data necessary for the organization of public events, social actions, data about donors in connection with support provided to the Association.

PURPOSES, LEGAL BASES, AND PERIODS OF PERSONAL DATA PROCESSING IN THE ASSOCIATION
If you receive invitations or information from the Association regarding the implementation of its statutory objectives, including organized social actions.

This particularly applies to individuals who have subscribed to the mailing list, individuals communicating with the Association through social media (Facebook, Twitter, YouTube), as well as individuals whose data has been obtained by the Association from publicly available sources.

Purpose of personal data processing	Legal basis for personal data processing	Period of personal data processing
Informing about the implementation of the Association’s statutory objectives, including informing about organized social actions (campaigns, actions, protests, events, competitions, debates, seminars, scientific and press conferences), as well as opportunities to support the Association’s activities	Art. 6(1)(f) GDPR – legitimate interest of the administrator, which is maintaining permanent contact with the Association in connection with its statutory objectives	Period necessary to achieve the purpose, but no longer than until you object to the processing of personal data
Establishing, pursuing claims, and defending against claims, including documenting objections raised to the processing of personal data	Art. 6(1)(f) GDPR, Art. 17(3)(e) GDPR – legitimate interest in data processing by the Administrator	Period of limitation for any claims resulting from legal provisions

If you support social actions (protests, campaigns, actions) organized by the Association.

This applies to natural persons who have filled out paper forms and sent them to the Association’s address, or persons who have filled out forms on websites run by the Association to support an action, protest, or campaign organized by the Association.

Purpose of personal data processing	Legal basis for personal data processing	Period of personal data processing
Informing individuals who have supported a given social action about its further progress	Art. 6(1)(f) GDPR – legitimate interests of the administrator in communicating with individuals supporting a given social action	Period necessary to inform about the progress of the social action, but no longer than until you object to the processing of personal data
Informing about the implementation of the Association’s statutory objectives, including informing about organized social actions (campaigns, actions, protests, events, meetings, competitions, debates, seminars, scientific conferences), as well as opportunities to support the Association’s activities.	Art. 6(1)(f) GDPR – legitimate interest of the administrator, which is maintaining permanent contact with the Association in connection with its statutory objectives	Period necessary to achieve the purpose, but no longer than until you object to the processing of personal data
Establishing, pursuing claims, and defending against claims, including documenting objections raised to the processing of personal data	Art. 6(1)(f) GDPR, Art. 17(3)(e) GDPR – legitimate interest in data processing by the Administrator	Period of limitation for any claims resulting from legal provisions

If you use contact forms available on websites run by the Association.

This applies to natural persons who have asked questions or submitted inquiries via the contact form on websites administered or co-administered by the Association.

Purpose of personal data processing	Legal basis for personal data processing	Period of personal data processing
Contact in connection with a question or inquiry submitted via the contact form on the website	Art. 6(1)(f) GDPR – legitimate interests of the administrator in communicating with website users	Period necessary to answer questions or inquiries, but no longer than until you object to the processing of personal data
Establishing, pursuing claims, and defending against claims, including documenting objections raised to the processing of personal data	Art. 6(1)(f) GDPR, Art. 17(3)(e) GDPR – legitimate interest in data processing by the Administrator	Period of limitation for any claims resulting from legal provisions

If you participate in public events organized by the Association.

This applies to natural persons who have expressed a desire to participate in a given event, meeting, debate, seminar, or scientific conference organized by the Association, e.g., to deliver a paper or participate as an audience member in a conference by filling out a form on the website informing about the given conference or by filling out a form at the reception directly before the event.

Purpose of personal data processing	Legal basis for personal data processing	Period of personal data processing
Informing about the organized event, meeting, debate, seminar, scientific conference	Art. 6(1)(f) GDPR – legitimate interests of the administrator in communicating with individuals who have expressed a desire to participate in a given public event	Period necessary to inform about the organized event, but no longer than until you object to the processing of personal data
Informing about the implementation of the Association’s statutory objectives, including informing about organized social actions, as well as opportunities to support the Association’s activities	Art. 6(1)(f) GDPR – legitimate interest of the administrator, which is maintaining permanent contact with the Association in connection with its statutory objectives	Period necessary to achieve the purpose, but no longer than until you object to the processing of personal data for this purpose, and after this time, they may be processed for the period of limitation of any claims (Art. 17(3)(e) GDPR)
Establishing, pursuing claims, and defending against claims, including documenting objections raised to the processing of personal data	Art. 6(1)(f) GDPR, Art. 17(3)(e) GDPR – legitimate interest in data processing by the Administrator	Period of limitation for any claims resulting from legal provisions

If you receive free publications issued by the Association.

This applies to natural persons to whom the Association provides free publications, books, reports, newsletters, brochures, analyses, and positions issued by the Association.

Purpose of personal data processing	Legal basis for personal data processing	Period of personal data processing
Fulfilling the publication order, including delivering it to the ordering party, contact in connection with the order fulfillment	Art. 6(1)(b) GDPR	Period necessary to achieve the purpose of personal data processing
Pursuing claims and defending against potential claims, which constitutes a legitimate interest in data processing by the Administrator	Art. 6(1)(f) GDPR, Art. 17(3)(e) GDPR	Period of limitation for any claims resulting from legal provisions

If you support the Association’s activities with voluntary donations.

This applies to natural persons making donations directly to the Association’s bank account indicated on the websites or via and using the TPay payment system or the PayPal payment system.

Purpose of personal data processing	Legal basis for personal data processing	Period of personal data processing
Managing donor payments	Art. 6(1)(b) GDPR	Period of donation execution
Contacting donors via traditional and/or electronic mail to respond to their inquiries or submissions, and to send thank you notes for support	Art. 6(1)(f) GDPR	Period necessary to respond to donor inquiries or submissions or to send them thank you notes for support
Pursuing claims and defending against claims arising from the concluded agreement, which constitutes a legitimate interest in data processing by the Administrator	Art. 6(1)(f) GDPR, Art. 17(3)(e) GDPR	Period of limitation for any claims resulting from legal provisions
Keeping accounting books and tax documentation	Art. 6(1)(c) GDPR in conjunction with Art. 74(2) of the Accounting Act and other specific provisions	Period of storage of accounting and tax documentation resulting from legal provisions
Informing about the implementation of the Association’s statutory objectives, including informing about organized social actions and opportunities for further support of the Association	Art. 6(1)(f) GDPR, which constitutes a legitimate interest of the administrator, which is maintaining permanent contact with the Association in connection with its statutory objectives	For the period necessary to achieve the purpose, but no longer than until you object to the processing of personal data for this purpose, and after this time, they may be processed for the period of limitation of any claims (Art. 17(3)(e) GDPR)

If you use the Association’s websites.

For your convenience, websites run by the Association use cookies to adapt the service to user needs for the following purposes:

remembering preferred language or font size
for statistical purposes through anonymous analysis of website user behavior
for measuring and analyzing website traffic
displaying and matching advertisements outside the service – so-called personalized advertisements
providing social media functions
content personalization

By using this website, the user agrees to the placement of cookies on their computer or other device for the purposes indicated above. If the user does not wish to receive cookies, they can manage and control them through their browser settings. However, please remember that deleting or blocking cookies may affect how this website is used.

The website sometimes uses third-party web services to display certain content, such as images or videos. The Association is unable to prevent these sites or domains from collecting information about how our users use the content placed there. To learn about how they use the information obtained about users and the possibilities of opting out of relevant cookies or deleting such data, please read the terms of use of these sites regarding their privacy policy and cookie files.

YOUR RIGHTS REGARDING DATA PROCESSING BY THE ASSOCIATION

In connection with the Association’s processing of your personal data, you have the following rights:

the right to access your personal data on the basis of Art. 15 GDPR;
the right to rectification of your personal data on the basis of Art. 16 GDPR;
the right to request erasure of data in cases specified in Art. 17(1) GDPR (subject to the exceptions specified in Art. 17(3) GDPR), in particular in the event of your exercising the following rights: a) the right to withdraw consent – in the case of processing personal data on the basis of consent – natural persons have the right to withdraw their consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal; however, please remember that the Association does not process personal data on the basis of consent, as it usually operates on other legal bases, as described in more detail in section IV of this Policy; b) the right to object – in the case of processing your personal data on the basis of a legitimate interest pursued by the Association (e.g., in the case of informing about the implementation of the Association’s statutory objectives, sending invitations to public events organized by the Association, sending thank you notes to donors for support, and sending Association publications); in such a case, the Association will no longer process personal data or will restrict processing, unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of the Association’s claims;
the right to request restriction of data processing in cases specified in Art. 18 GDPR;
the right to data portability in cases specified in Art. 20 GDPR.

If you wish to exercise any of these rights, the Association (administrator) enables contact with the designated Data Protection Officer via email: iod@piotrskarga.pl or by post: ul. Augustiańska 28, 31-064 Kraków, with the note “Data Protection Officer”.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office if you consider that the processing of your personal data violates personal data protection regulations.

AUTOMATED DECISIONS (WITHOUT HUMAN INVOLVEMENT) REGARDING YOUR DATA

Your data may be processed by the Association in an automated manner, including in the form of profiling. However, decisions concerning an individual, related to this processing, will not be automated.

VII. SHARING YOUR PERSONAL DATA WITH THIRD PARTIES

The Association applies appropriate technical and organizational measures to ensure the security of your personal data, including protecting personal data against unauthorized access, loss, or destruction. To ensure the security of your personal data, the Association has implemented appropriate personnel, organizational, technical (IT), and physical safeguards. We transfer personal data to other entities only when permitted by law. In such a case, we provide for provisions and security mechanisms in the agreement to protect data and maintain our standards regarding data protection, confidentiality, and security.

Access to your personal data may be had by:

employees and associates of the Association authorized to process your personal data at the Administrator’s instruction;
entities to whom the Association has entrusted the processing of your personal data, including entities providing hosting, IT, printing, shipping, and payment services to the Association.

The Association may transfer your personal data to countries outside the European Economic Area and to international organizations, which is related to the scope of the Association’s activities and cooperation undertaken with various entities. The Administrator ensures that data will be transferred to countries for which the European Commission has issued decisions confirming an adequate level of personal data protection and/or with compliance with all legal requirements, including on the basis of an appropriate agreement containing data protection clauses adopted by the European Commission, ensuring an appropriate method of securing the transferred personal data.

VIII. CHANGES TO THIS PRIVACY POLICY

Bearing in mind the principle of transparency, Administrators will regularly review and update the above Privacy Policy by publishing its new version on this website.

Manage cookie consent

Cookies