1. Who is the controller of your data?
The Controller of your personal data is FUNDACJA ROZWOJU PRZEDSIĘBIORCZOŚCI “TWÓJ STARTUP” with its registered office in Warsaw (registered address: ul. Żurawia 6/12, lok. 766, 00-503 Warsaw).
2. Why do we process your Data?
A. In connection with the services provided through the organised part of the company Projekt Praca
consisting in the display of advertisements, optional presentation of advertisements on social networks e.g. Facebook, optional presentation of advertisements on partner websites, i.e. for the purpose of concluding or performing the agreement (Art. 6(1)(b) of the Regulation), your data will be stored until the agreement is performed
B. For the purposes of marketing and promotion of the products offered by Fundacja Rozwoju Przedsiębiorczości “Twój StartUp”, based in Warsaw, being our legitimate interest (Article 6(1)(f) of the Regulation). Your data will be processed until you express your objection
C. To comply with any legal obligations incumbent on us in connection with the cooperation undertaken (Art. 6(1)(c) of the Regulation), this purpose being related to legal obligations to keep certain documents for the time indicated by law, e.g.:
• Accounting Act of 29.09.1994 (Journal of Laws 2017, item 1858);
• Act of 29 August 1997 - Tax Ordinance (Journal of Laws 1997, No. 137, item 926);
• Act of 1 March 2018 - On prevention of money laundering and financing of
terrorism (Journal of Laws 2018, item 723).
D. For the possible establishment, investigation or defence of claims, which is our legitimate
interest (basis of Article 6(1)(f) of the Regulation). The data will be processed until the statute of limitations for claims
E. If you have given your consent, your data will be processed within the limits and for the purpose indicated in your consent (basis of Article 6(1)(a)). The data will be processed until you withdraw your consent
F. The Foundation processes Personal Data of Users who visit the profiles and pages of the Foundation and its Beneficiaries on social media (e.g. Facebook, Youtube). This data is processed to inform you about our activities and offers, to promote events and services and for the possible establishment, investigation or defence of claims. These actions constitute a legitimate interest of the Controller
G. For analytical purposes, to tailor the content displayed and to send personalised messages based on the actions you take on the website or in your contact with the Controller, which is a legitimate interest of the Controller (basis of Article 6(1)(f) of the GDPR). The data will be processed until the statute of limitations for claims.
At the same time, we would like to inform you that if you contact a potential Employer via the internal messenger or send a potential Employer an advertisement via the service, the controller of the above personal data is the potential Employer. The Foundation in such instances acts as a processor of personal data on behalf of the potential Employer.
3. Which data is subject to processing?
In order to conclude the agreement, we require you to enter your data on the order form (if you do not do so, we will not process the order). In addition, we may ask for optional data that does not affect the conclusion of the agreement, e.g. data contained in the body of the advertisement.
During the course of the agreement, we come into possession of your other data when providing services. The appearance of your personal data with us is a consequence of the operation of our services that you use.
4. To whom will the data be shared?
A. Public authorities, to the extent that they do not receive the data in the context of a
specific proceeding under the law;
B. Entities that process your personal data on behalf of the Foundation on the basis of the
agreement concluded with the Foundation for the entrustment of the processing of personal data (so-called processors). These will include: Foundation beneficiaries, IT specialists, archiving companies, banking and payment service providers, hosting companies;
C. Third-party data controllers (so-called Parallel Controllers to whom data is shared, e.g. solicitors and barristers, courier or postal operators, debt buyers - in the event that you do not pay our invoices on time, and portals where your advertisement will be made public),
D. Users of the service, if data is made public through the advertisement.
E. Recipients in a third country or an international organisation located outside the
European Economic Area (EEA). We will always inform you of our intention to transfer your personal data outside the EEA. Such transfer is only undertaken when necessary and with an appropriate degree of protection, primarily through:
• Cooperation with processors of personal data in countries for which a relevant
European Commission decision has been issued;
• Standard data protection clauses approved by the European Commission
5. Social networks
Within the websites of the Foundation and its Beneficiaries, the Controller uses plug-ins provided by Social Networks and Google Analytics. When you connect to the Controller's website, a connection is made between your web browser and the servers of the Controllers of the social media plug-ins we use as part of the service, e.g. the “Like” plug-in belonging to Facebook Ireland Limited.
The placement of social network plug-ins by the Foundation results in the acquisition of data by the owners of these plug-ins about your viewing of our website, even if you do not have a profile on these social networks.
If you are logged in to social networks, when you visit our website, the social networks will be able to directly associate your visit to the website with your social network profile.
If the user uses the plug-in, e.g. by clicking on the “Like” button, the relevant information is sent directly to the server of the respective social network controller and stored there. This information may be published on the relevant social network and shown to those added as contacts of the User, or may be used for statistical purposes.
The legal basis for the processing of Personal Data by the Foundation in connection with the clicking of the Facebook plug-in is the Controller's legitimate interest (Art. 6(1)(f) of the GDPR) in order to promote the services provided by the Controller.
The Foundation informs you that in connection with the use of the above-mentioned plug-ins, it is acting as co-controllers of personal data with Facebook Ireland Limited, 4 Grand Canal Square,
We would like to point out that the responsibility of the Foundation as the data co-controller is limited to the collection and transfer of data to Facebook (data in the form of IP address and browser ID).
The exact rules for the co-management of data by the Foundation and Facebook can be found at https://www.facebook.com/legal/terms/page_controller_addendum.
This clause does not apply to processing conducted by Facebook as an independent controller of personal data
6. What rights do you have?
A. The right of access to the personal data we process (Article 15 of the Regulation),
B. The right to rectify the personal data entrusted, including the correction of the data (Article 16
of the Regulation),
C. The right to erasure of personal data from our systems, the so-called “right
to be forgotten” - if, in your opinion, there are no grounds for us to process your data, you can request that we erase it (Article 17 of the Regulation),
D. The right to restrict the processing of personal data - you can request that we restrict the processing of personal data only to storing it or performing activities agreed with you, if we hold incorrect data about you or are processing it unduly; or you do not want us to delete it because you need it to establish, assert or defend a claim; or for the duration of an objection raised by you against the processing (Article 18 of the Regulation),
E. The right to data portability - you have the right to receive from us in a structured, commonly used, machine-readable format (e.g. “.csv” format) personal data relating to you that we hold on the basis of the agreement or consent given. You will be entitled to this right when we hold the data in electronic format - if you hold the data only in paper form, you will not be able to exercise this right. You may instruct us to send this data directly to another entity (Article 20 of the Regulation),
F. The right to withdraw consent to the processing of personal data - at any time you have the right to withdraw your consent to the processing of personal data that we process on the basis of consent - Article 7(3) of the Regulation. Withdrawal of consent will not affect the lawfulness of the processing undertaken on the basis of consent before its withdrawal. Withdrawal of consent occurs by sending an email to: email@example.com
G. The right to object - you may object to the processing of your data if the basis for the use of your data is our legitimate interest - Article 21 of the Regulation. In such a situation, once we have considered your request, we will no longer be able to process the personal data subject to the objection on this basis, unless we demonstrate that there are legitimate grounds for the processing which are deemed to override your interests, rights and freedoms
H. If, in your opinion, the processing of your personal data violates the provisions of the Regulation, you have the right to lodge a complaint with the supervisory authority, i.e. The President of the Office for Personal Data Protection
7. Is the data profiled?
We would like to inform you that your data may be subject to profiling, i.e. the automated analysis of your data and the development of predictions about your preferences or future behaviour (profiling means, e.g. in the case of marketing profiling, determining which offer you may be most interested in based on your previous choices). Profiling may occur on the basis of the information provided in the relevant newsletter form.
If you require any further information relating to data protection or wish to exercise your rights,
please contact us by e-mail at: firstname.lastname@example.org