Privacy policy

Data controller

The controller of your personal data is the REAKTYW Foundation based in Warsaw. Data protection is handled by a person appointed by the Foundation's Board.

Contact for data matters

For matters related to personal data, please write to:

rodo@reaktyw.org

What data we collect

We only collect data when it is necessary for a specific purpose:

• Contact details from the contact form: name, email address and message content.
• Email address provided for the newsletter.
• Technical data related to the use of the website: IP address, browser information, cookies and device identifiers.

Purposes and legal bases of processing

We process your data for the following purposes:

• Replying to messages legal basis: consent or legitimate interest of the controller (Art. 6(1)(a) or (f) GDPR).
• Sending newsletters legal basis: consent (Art. 6(1)(a) GDPR).
• Website traffic analysis legal basis: consent to analytics cookies (Art. 6(1)(a) GDPR).
• Advertising and remarketing legal basis: consent to marketing cookies (Art. 6(1)(a) GDPR).
• Ensuring security and proper functioning of the website legal basis: legitimate interest of the controller (Art. 6(1)(f) GDPR).

Recipients of data

Data may be transferred to entities supporting us in running the website and communication: hosting, mailing, analytics and advertising providers. We do not sell personal data. We do not share it with other entities without a legal basis.

Transfer of data outside the European Economic Area

We use Google tools (Analytics 4, Google Ads) and Meta (Facebook / Instagram Ads). Data from these tools may be processed on servers located in the United States. The transfer is based on the European Commission's adequacy decision for the United States of 10 July 2023 under the EU-U.S. Data Privacy Framework, of which Google and Meta are certified. This means that, according to the EC decision, the United States provides an adequate level of protection for personal data.

Cookies and similar technologies

The website uses cookies to function properly, remember your settings and — with your consent — measure traffic and run advertising. A detailed description of cookie categories can be found in the consent settings, which you can open at any time by clicking the "Cookie" link in the footer.

Your rights

You have the following rights regarding personal data:

• Right of access to data and to receive a copy.
• Right to rectification of inaccurate data.
• Right to erasure ("right to be forgotten") when there is no basis for further processing.
• Right to restriction of processing.
• Right to data portability.
• Right to object to processing based on legitimate interests.
• Right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
• Right to lodge a complaint with the President of the Polish Data Protection Office.

Data retention period

Data from forms is stored for as long as necessary to respond and any further correspondence, but no longer than 24 months from the last activity. Newsletter email addresses are stored until consent is withdrawn. Data collected by cookies is stored according to the validity period of individual cookies and your browser settings.

Data security

We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or destruction. Only authorised persons have access to the data.

Changes to this policy

We may update this policy if legislation or the way the website operates changes. The current version is always available at this address.