Polityka prywatności - Fundacja IT Girls

Information clause

The administrator of your personal data (hereinafter referred to as the "Administrator") is IT GIRLS Foundation based in Warsaw. You can contact the Administrator in writing, via traditional mail, to the following address: ul. Kalinowej Łąki 45, 01-934 Warsaw or by e-mail at: kontakt@itgirls.org.pl
Your personal data are processed in accordance with applicable legal provisions, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – hereinafter referred to as "GDPR".
Type of data processed.

The Administrator processes the following personal data: first name, last name, telephone number, address of residence, e-mail address, name of business activity, correspondence address, NIP number, REGON number, name and address of the kindergarten and automatically collected technical data concerning the user's visit to the Administrator's websites (e.g. IP address, domain name, type of browser you are using, type of operating system, etc.).
Your personal data may be processed for the following purposes, on the legal basis and during the periods indicated in the table below:

The purpose of processing personal data	Legal basis for data processing	Data storage period
Using the Administrator’s website, including the Store’s website, ensuring its proper functioning.	Article 6 paragraph 1 letter f) of the GDPR (legitimate interest of the administrator) – processing is necessary for the purposes of the legitimate interests of the Administrator – consisting in operating and maintaining the website.	Data is stored for the duration of the legitimate interest pursued by the Administrator, but no longer than the limitation period for the Administrator's claims against the data subject, resulting from the Administrator's business activity. The limitation period is specified by law, in particular the Civil Code (for claims related to business activity - 3 years, and for the Sales Agreement - 2 years).
Execution of a Sales Agreement or an agreement for the provision of an Electronic Service or taking action at the request of the data subject before concluding the above-mentioned agreements.	Art. 6 sec. 1 letter b of the GDPR – i.e. performance of a contract to which the data subject is a party, or taking steps at the request of the data subject before entering into a contract.	The data is stored for the period necessary to execute, terminate or otherwise expire the concluded Sales Agreement or the agreement for the provision of Electronic Services.
Fulfillment of the legal obligations incumbent on the Administrator, such as tax obligations, issuing and storing invoices.	Art. 6 sec. 1 letter c of the GDPR, i.e. fulfilment of the legal obligation incumbent on the administrator (e.g. under tax law provisions) in connection with Art. 74 sec. 2 of the Act of 29 September 1994 on accounting.	The data is stored for the period required by law, i.e. 5 years, counted from the beginning of the year following the financial year to which the data relates.
Consideration of complaints or claims related to the contract, determination, defense and pursuit of the Administrator's claims arising from the conducted business activity.	Art. 6 sec. 1 letter f of the GDPR, as the so-called legitimate interest of the Administrator, which is the pursuit of claims and defense of the rights of the Administrator.	The data is stored for the limitation period of the Administrator's claims related to the business activity conducted by the Administrator. The limitation period is specified by law, in particular the Civil Code (for claims related to conducting business activity - 3 years, and for the Sales Agreement - 2 years).
Marketing of services (sending information about the Administrator's activities, including sending the Newsletter.	Art. 6 sec. 1 letter f of the GDPR (legitimate interest of the administrator in processing data for direct marketing purposes) and on the basis of consent – Art. 17 of the Telecommunications Law in connection with Art. 10 sec. 2 of the Act on the provision of services by electronic means.	The data is stored until the data subject withdraws the consent to further processing of his or her data for this purpose or until you object to such processing.
For analytical and statistical purposes – keeping statistics and analyzing traffic on the Administrator's website and in the Online Store.	The legitimate interest of the Administrator (Article 6, paragraph 1, letter f of the Regulation), consisting in conducting activity analyses, keeping statistics and analysing traffic on the Website and the Online Store in order to improve the functioning of the Website and the Online Store.	Data is stored for the duration of the legitimate interest pursued by the Administrator, but no longer than the limitation period for the Administrator's claims against the data subject, resulting from the Administrator's business activity. The limitation period is specified by law, in particular the Civil Code (for claims related to business activity - 3 years, and for the Sales Agreement - 2 years).

Data acquisition source

We collect your personal data directly from you (by filling out the contact form, contacting the Administrator using the details provided, or by making a purchase in the Online Store). Your personal data may also be obtained from publicly available sources, such as the KRS register or CEIDG.

Recipients of personal data

Your personal data may be transferred:

authorized employees and associates of the data controller,
entities cooperating with us, in particular carriers (couriers and other entities handling the shipping process), entities handling electronic payments or payment cards, suppliers of IT systems and IT services, and service providers supplying the Administrator with technical, IT and organizational solutions enabling the Administrator to conduct business activity, including our websites and electronic services provided through them (in particular suppliers of computer software for running our websites, e-mail and hosting providers, and suppliers of software for managing the company and providing technical support to the Administrator), entities providing services and tools in the field of customer service, suppliers of opinion survey systems, suppliers of accounting, legal and advisory services providing the Administrator with accounting, legal or advisory support (in particular accounting offices, law firms or debt collection companies), suppliers of social plugins, scripts and tools enabling the integration of the website and services provided through it with the electronic services of external social networking sites, including Facebook, as well as suppliers of systems for automating the newsletter service - on the basis of commissioned services, whereby such entities process personal data in accordance with concluded data processing agreements and only in accordance with our instructions,
entities authorized to do so under generally applicable legal provisions.

Transfer of personal data to third countries or international organizations

Your personal data may be transferred to recipients in third countries, i.e. outside the European Economic Area (EEA), however, this will be done with appropriate and proper safeguards. At the same time, we inform you that your personal data may be processed by Google LLC and Microsoft Corporation, in accordance with Article 45 of the GDPR, within the scope of use of computer software by the Administrator.

Processing of personal data automatically (including profiling)

Your personal data may be processed in an automated manner (including in the form of profiling) for direct marketing purposes, but decisions made on its basis by the Administrator do not concern the conclusion or refusal to conclude the Agreement or the possibility of using Electronic Services on the Website and in the Online Store. The effect of using profiling in the Online Store may be, for example, granting a given person a discount, sending them a discount code, reminding them about unfinished purchases, sending a proposal for a Product that may meet the interests or preferences of a given person or proposing better conditions compared to the standard offer of the Online Store. Despite profiling, the given person freely decides whether they will want to use the discount received in this way or better conditions and make a purchase in the Online Store.

Profiling in the Online Store consists of automatic analysis or forecasting of a given person's behavior on the Online Store website, e.g. by adding a specific Product to the cart, browsing the page of a specific Product in the Online Store or by analyzing the history of purchases made in the Online Store. The condition for such profiling is that the Administrator has the personal data of a given person in order to be able to send them, e.g. a discount code.

The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or significantly affects him or her in a similar manner.

Your rights in connection with the protection of personal data

You have the right to:

access to the content of your data,
request the rectification of data,
deletion of data or restriction of their processing, in cases provided for by law,
obtain a copy of your data,
transfer of personal data,
withdraw consent to data processing at any time,
to object at any time to the processing of your personal data, to the extent that the basis for the processing of personal data is our legally justified interest, including due to your special situation,
lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, if you believe that we have violated the provisions of the GDPR while processing your personal data.

If you have any concerns about the way we process your data, please contact us first by e-mail: kontakt@itgirls.org.pl or at the postal address of our registered office indicated above.

The right to file a “marketing” objection

The right to file a “marketing” objection.

You also have the right to object when there are reasons related to your particular situation and the processing of your data is based on the necessity for the purposes of our so-called legitimate interests or at any time to the processing of your data for direct marketing purposes, including profiling, and after filing this objection we will no longer be allowed to process your data for such purposes.

In order to exercise the above right, please contact the Data Protection Officer electronically via the following e-mail address: kontakt@itgirls.org.pl or at the postal address of our registered office indicated above.

Information on the requirement/voluntariness of providing personal data

Providing personal data in forms on the Website is voluntary. Failure to provide this personal data will prevent us from contacting you and responding to your inquiry. Consent to sending commercial information to the email address provided, including in the form of a newsletter, as well as the use of telecommunications terminal equipment in relation to the telephone number provided by you for direct marketing purposes, is voluntary and dependent on your consent and is not necessary. You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of the processing of your data, which was carried out on the basis of the consent granted before its withdrawal.

When using the Online Store, providing data is necessary to conclude a contract between us and you. Providing a telephone number, e-mail address and is voluntary, but failure to provide them will make contact and the execution of the contract difficult.

Changes to the information clause

IT GIRLS Foundation based in Warsaw reserves the right to introduce changes to the scope of this information clause by publishing new content on the company website. Any changes to the information clause will be marked with a date.