Information obligation in connection with the processing of personal data

X

  1. The personal data controller is Bank Żywności SOS w Warszawie (hereinafter: “CONTROLLER”, with its registered office at: ul. St. Bodycha 97, Reguły, 05-820 Piastów 1, Poland.
    The Controller may be contacted in writing, by post, at the following address: St. Bodycha 97, Reguły, 05-820 Piastów 1, Poland.
  2. The Controller has appointed a Data Protection Supervisor – Andrzej Rybus-Tołłoczko, who can be contacted at the following email address: iodo@rt-net.pl.
  3. Personal data is processed on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), as well as of the Polish Law on Accounting of 29 September 1994.
  4. Personal data is processed for:
  5. conveying information on food collection events, fundraising activities, campaigns, and aid programmes, as well as the Administrator’s ongoing statutory activities – Article 6 section 1 a) of the GDPR – personal data will be processed until the withdrawal of one’s consent;
  6. the performance of the donation agreement – Article 6 section 1 b) of the GDPR – personal data shall be kept for a period of 5 years following the beginning of the year following the year in which a donation was made or support was provided;
  7. the issuance of accounting receipts documenting donations – Article 6 section 1 c) of the GDPR – personal data shall be kept for a period of 5 years following the beginning of the year following the year in which a donation was made or support was provided;
  8. sending thanks for support, including sending postcards – Article 6 section 1 f) of the GDPR – personal data shall be kept for one year after support was provided, for the purpose of sending our thanks and information on the activities funded by the donations by the Controller;
  9. for the aim of establishing, pursuing or defending against claims – Article 6 section 1 f) of the GDPR – data will be stored 3 years following a given donation.

If one makes a donation to the Controller without indicating consent to receive information on the Controller’s activities, the consent given originally shall remain in force. For the withdrawal of your consent, please contact the Controller.

  1. Personal data is not obtained from third parties.
  2. The Controller does not intend to transfer data to third countries or international organisations.
  3. The Controller will only transfer personal data to other entities based on the provisions of the law and, if necessary, to other entities, based on agreements on personal data processing entrustment, including to IT service providers, Caltha – Krzewski, Potempski Sp.J., PayU S.A and the banks that process the payments.
  4. The data subject has the right to request access to, rectification of, erasure of or restriction of processing of personal data by the Controller, and has the right to object to processing, as well as the right to data portability.
  5. Complaints on the Controller’s actions may be filed with the President of the Data Protection Authority.
  6. The provision of personal data is necessary for making a donation; if the said data is not provided, co-financing the Controller’s activities will not be possible. Giving consent to the conveyance of information in newsletter form is voluntary. Giving consent to receive information on the Administrator’s activities is voluntary.
  7. The Controller does not intend to carry out automated decision-making.