INFORMATION ON THE PROCESSING OF PERSONAL DATA BY THE OWOC OBFITY FOUNDATION

Owoc Obfity Foundation respects your privacy and protects your personal data. This information is intended to clarify the principles of how Owoc Obfity Foundation processes personal data, the scope of such data, and the purpose for which it is processed in relation to the performance of contracts.

In accordance with Article 14, paragraph 1–2 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), we inform you that:

1. Data Controller. The controller of your personal data is the Owoc Obfity Foundation.

2. Contact. You can contact us regarding your personal data in writing at the address indicated in our registered office or via email at: kontakt@owocobfity.org

3. Sources of data, voluntary submission of data. Owoc Obfity Foundation has obtained your data from your contractor in relation to and for the purpose of fulfilling the contract. In some cases, we may have received your data directly from you. Please note that providing your data is voluntary, but failure to do so may result in the inability to conclude or perform a contract.
‍
4. Purposes and legal basis of processing. Your personal data will be processed for the purpose of establishing and maintaining professional and commercial relationships. The processing is carried out on the basis of the legitimate interests pursued by the Controller or by a third party (Article 6(1)(f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: GDPR)).The legitimate interests pursued by the Controller or a third party may include: communication related to event organization, establishing and maintaining business cooperation, marketing, product promotion and development, the establishment, exercise or defense of legal claims, and the conduct of statistics and analyses.

5. Categories of data. We will process the following categories of your personal data: name and surname, business email address, business phone number, and place of employment.

6. Data retention period. Your personal data will be processed for the duration of the legitimate interest of the Controller, including the duration of business relationships or professional contacts in connection with which the data is processed by the Controller, and, where applicable, for the period required to establish, exercise, or defend legal claims arising from applicable limitation periods, unless longer retention is required by applicable law.

7. Data recipients. Your personal data may be shared with: entities authorized to receive data under applicable law; our collaborators and employees responsible for executing agreements; and entities processing data on behalf of the Controller, such as IT service providers – provided that such entities process data solely based on a data processing agreement and exclusively in accordance with the Controller's instructions.
‍
8. Your rights related to data processing. Pursuant to the GDPR, you have numerous rights regarding your personal data that we process: the right to access your data and receive a copy thereof; the right to rectify (correct) your data; the right to request erasure or restriction of processing; the right to object to processing in cases specified by law; the right to data portability in the context of automated processing (as permitted under GDPR provisions); and the right to lodge a complaint with a supervisory authority – the President of the Personal Data Protection Office. We encourage you to read our Privacy Policy, which contains detailed information about your rights regarding personal data processing.

9. Automated decision-making. We inform you that we do not engage in automated decision-making, and your data is not subject to profiling.

10. Information on the intention to transfer personal data to a third country or international organization. We inform you that your personal data will not be transferred to any third country or international organization.