I. Introduction
The protection of our Users’ personal data is of the utmost importance to the Owner of this website. We make every effort to ensure that Users feel safe when entrusting their personal data while using our website.
We process Users’ personal data only to the extent necessary to ensure a functional website and services. Users’ personal data is processed only with their consent, except where prior consent cannot be obtained for factual reasons and where data processing is permitted by law.
This privacy policy explains the rules and scope of processing Users’ personal data, their rights, as well as the obligations of the data controller, and provides information about the use of cookies.
The controller applies state-of-the-art technical measures and organisational solutions to ensure a high level of protection of processed personal data and safeguards against unauthorised access.
II. Data Controller
The controller of personal data is Fundacja „Sfera Harmonii” (Sfera Harmonii Foundation), with its registered office at ul. św. Wincentego 16/22, 03-505 Warsaw, Poland, entered in the register of entrepreneurs maintained by the District Court in Warsaw, Commercial Division, under KRS number: 0000109211, NIP (Tax ID): 526-268-52-66 (hereinafter referred to as the “Owner”).
III. Purpose of Personal Data Processing
The controller processes Users’ personal data for the following purposes:
- Promotional activities for its own products or services, including newsletter distribution, upon obtaining the User’s consent.
- Collecting data on user behaviour to improve website functionality, measure traffic, and personalise content, primarily through cookies and tracking technologies.
The User may also consent to receiving information about news and promotions, in which case the controller will also process personal data to send the User commercial information regarding new products or services, promotions, or sales.
Personal data is also processed to fulfil the controller’s legal obligations and to carry out tasks in the public interest, including tasks related to security or the storage of tax documentation.
IV. Types of Data
Each time a User visits hashtag-ensemble.org, data and information are automatically collected from the accessing computer system, including:
- the type and version of the browser used;
- the User’s operating system;
- the User’s internet service provider;
- the User’s IP address;
- the date and time of the User’s access to the website;
- websites from which the User’s system accesses hashtag-ensemble.org;
- websites accessed by the User’s system via hashtag-ensemble.org;
- log files containing IP addresses or other data that may be attributed to the User.
This data is stored in system log files and is not stored together with other personal data of the User.
V. Legal Basis for Data Processing
Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation — GDPR).
The controller processes personal data only after obtaining the User’s prior consent. Consent to the processing of personal data is entirely voluntary.
VI. User Rights
The User has the right at any time to:
- Right of access — request information from the controller about the scope of personal data processing.
- Right to rectification — request correction of their personal data.
- Right to withdraw consent — withdraw consent to the processing of personal data without giving a reason. Withdrawal of consent shall not affect processing already carried out.
- Right to erasure — request, without giving a reason, that the controller delete their data.
- Right to object — object to the processing of personal data.
- Right to restriction — request restriction of personal data processing, either for a specified period or within a specified scope.
- Right to data portability — request that the controller transfer their personal data to another entity.
The controller shall inform the User of actions taken within one month of receiving the request.
VII. Data Retention Period
Personal data is stored only for as long as necessary to fulfil the contractual or statutory obligations for which it was collected. The data will be deleted immediately when its storage is no longer necessary.
Contract-related information is stored for evidentiary purposes for a period of three years from the end of the year in which commercial relations with the User ended.
If no contract has been concluded between the User and the Owner, the User’s personal data is stored until the User’s account on the website is deleted.
VIII. Entrusting Data Processing to Other Entities
The controller may entrust the processing of personal data to entities cooperating with the controller, to the extent necessary for the execution of transactions.
Beyond the purposes indicated in this Privacy Policy, Users’ personal data will not be disclosed to third parties or transferred to other entities for the purpose of sending marketing materials from those third parties.
Users’ personal data is not transferred outside the European Union.
This Privacy Policy complies with the provisions of Article 13(1) and (2) of the GDPR.
IX. Cookies
The website uses cookies or similar technologies to collect information about the User’s access to the website and their preferences. They are used for advertising, statistical purposes, and to adapt the website to the User’s individual needs.
Cookies are pieces of information containing a unique reference code that the website sends to the User’s device for storage and sometimes tracking purposes. They usually do not allow the User to be personally identified.
The website uses first-party cookies and third-party cookies, including:
- Strictly necessary cookies — essential for the website to function;
- Preference cookies — remembering User preferences;
- Analytics cookies — collecting statistical information;
- Targeting/advertising cookies — used for advertising purposes.
Users can change their cookie acceptance preferences or change their browser settings. Blocking or deleting cookies may prevent full use of the website.
X. Contact
For matters related to the protection of personal data, please contact the controller:
Fundacja „Sfera Harmonii”
ul. św. Wincentego 16/22
03-505 Warsaw, Poland
KRS: 0000109211 | NIP: 526-268-52-66
The User has the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).