Below you will find detailed information regarding the principles of processing your personal data within the framework of specific purposes:
2. PERSONAL DATA PROCESSED, PURPOSES, AND LEGAL BASES FOR PROCESSING
2.1. ACCEPTANCE OF MONETARY DONATIONS AND RELATED ACTIVITIES
Accepting a monetary payment from you, intended to support charitable projects conducted on the Future for Kids Foundation website, involves processing your data as a donor. We must record the payment in our IT systems and include it appropriately in our accounting and tax documentation. Furthermore, we analyze selected data to prevent fraud related to payments or to determine if fraud has occurred in a given case, and we defend ourselves against potential unjustified demands or pursue justified claims ourselves.
As part of the donation handling process, we provide donors with the opportunity to download a confirmation of receipt of the donation by the Future for Kids Foundation and handle potential complaints, requests, and inquiries from donors or regarding donations.
Categories of data subjects:
We process the personal data of the following natural persons:
- donors, including donors registered on the www.future-for-kids.pl website whom we call Helpers (including Companies) – being natural persons;
- natural persons acting on behalf of or for the benefit of donors (including Helpers), in particular institutional donors (legal entities, other organizational units).
Categories of personal data processed:
Depending on the payment channel selected by you as a donor, we process data such as:
- first and last name;
- company (enterprise) information;
- address;
- payment account number, name of the entity maintaining it (e.g., bank);
- e-mail address;
- telephone number;
- IP address;
- system ID of the www.future-for-kids.pl website;
- alphanumeric donation identifier assigned by the payment service provider;
- amount and currency of the donation;
- time of initiation of the transfer of funds on www.future-for-kids.pl;
- time of authorization of the payment (monetary donation) by the payment service provider;
- information provided in the payment title;
- selected digits of the payment card number, varying by payment service provider;
- card profile (private individual, business);
- payment card type;
- country of the card issuer;
- personal data included in the content of complaints, requests, and inquiries regarding donation agreements;
- other data provided to us as part of a potential complaint, request, or inquiry;
- regarding data analyzed to prevent fraud or determine if fraud occurred, all data concerning a given payment transaction (see above) or Account, as well as 3-D Secure information, may be processed.
Providing data is voluntary. If you do not provide the data indicated as required within a specific payment channel or as marked by our partner (e.g., payment service provider), you will not be able to support a project on www.future-for-kids.pl using that payment channel. In such a case, you may make a payment using another channel that does not require an e-mail address, e.g., via a traditional bank transfer.
Legal bases for data processing:
We process your data based on the following legal grounds:
- proper performance of donation agreements concluded with donors, including providing confirmations of receipt of donations by the Future for Kids Foundation and handling complaints, requests, and inquiries regarding donation agreements;
- performance of legal obligations by the Future for Kids Foundation, including maintaining required accounting and tax documentation;
- realization of our legitimate interests, including:
- sending e-mails to donors regarding the possibility of obtaining confirmation of receipt of a donation by the Future for Kids Foundation;
- analyzing data to prevent fraud or to determine if fraud has occurred in a given case, and
- establishing, exercising, or defending against claims;
- your consent, if, for example, you provide your data optionally to have it included on the donation confirmation.
Period of processing, including data storage:
We process your data for the duration of the concluded donation agreement, until consent is withdrawn, or until your objection is upheld (depending on the basis of processing), and additionally for the following periods:
- the limitation period for potential claims (6 full calendar years);
- storage of accounting and tax documentation as required by law (5 full calendar years + 1 year due to the limitation period for tax liabilities).
With regard to personal data processed in connection with providing donors the possibility to download confirmations of receipt of donations by the Foundation, the retention period is 6 full calendar years (the possibility to generate confirmations for previous years).
If you provide a donation via PayU S.A. with its registered office in Poznań ("Microdonations"), for example when making purchases via PayU in an online store, we receive the following information from PayU for accounting purposes: e-mail address, Microdonation amount, system identifier of the purpose, and time of the donation (date and time).
2.2. E-MAIL NOTIFICATIONS
If you make a donation using a payment channel that involves sharing your e-mail address with us, or if you created an Account on the www.future-for-kids.pl website for donation purposes, we process said e-mail address to provide you with the following information, including information regarding our statutory public benefit activities:
- system notification of receipt of payment (which may contain information as referred to in the Payment Services Act),
- updates on the project you supported,
- results of the project you supported,
- newly opened projects you may be interested in,
- "Good News," i.e., positive information related to the Foundation's activities.
Legal bases for data processing:
We process your data based on the following legal grounds:
- performance of legal (information) obligations by the Future for Kids Foundation as provided for in the Payment Services Act, including under agreements concluded with payment service providers,
- realization of our legitimate interests, including maintaining relationships with donors, providing information about supported projects or other statutory activities of the Future for Kids Foundation, optimizing activities related to the creation and delivery of e-mail notifications, and establishing, exercising, or defending against claims.
Period of processing, including data storage:
We process your data for the duration of sending e-mail notifications (e.g., until you unsubscribe from receiving e-mail notifications), and after that period for a time depending on the variant chosen from those indicated below. In any case, your e-mail address will be processed in our system of sent e-mail message logs for a period of 6 full calendar years calculated separately for each such log (in particular due to the limitation period for potential claims). Similarly, we process the IP address and information about the activity of e-mail notification recipients for the limitation period for claims.
If you object to receiving e-mail notifications, we mark your request in our database (by placing your e-mail address there) and no further notifications are sent to your e-mail address, not even the system notification of receipt of payment by the Foundation (you will only receive an e-mail from the payment service provider). In this variant, the retention period for the e-mail address is 3 full calendar years from the date the request was processed, meaning that making another payment with that e-mail address after this retention period will reactivate the sending of e-mail notifications.
If you request data erasure, we hash your e-mail address (a process of mapping data to a string of a specified length using an algorithm) for the limitation period for claims, after which it is deleted from our database. If you had an Account, we additionally block access to it. Making another payment with that e-mail address will reactivate the sending of e-mail notifications.
2.3. USER ACCOUNT
A user account on the website is not a public profile. Your donation history is assigned to your profile.
Categories of personal data processed:
Depending on the data you provided when creating the Account, we may process the following data concerning you:
- first name,
- last name,
- e-mail address,
- IP address from which the account was created on www.future-for-kids.pl and from which you logged into the Account,
- Account password in the form of a hash function,
- profile address, so-called slug,
- token provided to us by an external authentication service provider (e.g., Apple, Google, Facebook), if you register or log in using such a service,
- payment card token,
- payment card expiration date,
- personal data indicated in section 2.1. (processed in connection with donations made by the Helper, as well as data analyzed to prevent fraud or to determine if fraud has occurred in a given case),
- donation history,
Analytical and retargeting cookies are used only after consent is granted. You may change your settings at any time in your Profile under the "Manage cookie consents" tab.
Refusing consent for analytical and marketing cookies does not prevent you from using the website; however, it may prevent you from making donations and limit the personalization of content and the functionality of certain analytical tools.
Legal bases for data processing:
We process your data based on the following legal grounds:
- proper performance of the agreement for maintaining an account on www.future-for-kids.pl and providing account-related website functionalities,
- realization of our legitimate interests:
- analyzing data to prevent fraud or to determine if fraud has occurred in a given case;
- establishing, exercising, or defending against claims;
- if the Account is maintained for a representative of an Organization or Company, our legitimate interest is the ability to maintain relationships with said Organization or Company, including the ability to contact or make arrangements with its representative;
- your consent, with regard to data that is not processed on the basis of the above-mentioned grounds.
Period of processing, including data storage:
We process your data until the account on www.future-for-kids.pl is deleted. Additionally, your data will be processed for the limitation period for potential claims (6 full calendar years) – in the event of account deletion, we anonymize the first and last name, and the e-mail address associated with the Account is hashed (using an appropriate hash function).
2.4. 1.5% TAX FUNDS
We receive your data from the competent body of the National Revenue Administration if you donated 1.5% of your tax and consented to the transfer of your personal data.
As a charitable foundation, we collect 1.5% tax funds through donations to the Future for Kids Foundation with its registered office in Wrocław, at the following address:
ul. Henryka Sienkiewicza 40/13
Wrocław 50-335
POLAND
KRS 0001149547If you do not wish us to process your data, do not consent to their transfer when filing your tax return or submit your objection to us.
Categories of data subjects:
Personal income tax payers who donated 1.5% of their tax to us and consented to the transfer of their data.
Categories of personal data processed:
- first and last name,
- address,
- any personal data covered by the specific purpose,
- spouse's data in case of joint tax filing.
Providing personal data is fully voluntary. Without your consent, we will not receive them from the National Revenue Administration.
Legal basis for data processing:
User consent to the processing of data.
Period of processing, including data storage:
We process the data of persons supporting us with 1.5% of their tax for no longer than 5 full calendar years from the date of receipt of such data, unless there is another basis for processing or we have upheld your objection.
2.5. SOCIAL MEDIA CONTACT
We are present on social media (e.g., Facebook, Instagram, X (formerly Twitter), YouTube, TikTok), where we publish content related to the statutory activities of the Future for Kids Foundation. If you follow our profile on social media or interact with us, we become – alongside the social media providers – a joint controller of your data. In such cases, the principles of processing your data are also determined by the terms and conditions and privacy policies of the social media administrators. Each social media platform provider has its own policy regarding the processing and protection of personal data.
Below we present the list of social media platforms on which we are present, along with links to their Privacy Policies:
Categories of data subjects:
Social media users who interact with us on social media.
Categories of personal data processed:
- first name, last name, nickname,
- image,
- information available within the public profile,
- any personal data provided in messages or comments.
Legal basis for data processing:
Our legitimate interests consisting of:
- managing profiles on social media;
- reading and responding to messages (including private messages);
- maintaining relationships with persons who interact with us;
- analyzing the quality and effectiveness of communication on social media;
- establishing, exercising, or defending against claims.
Period of processing, including data storage:
Dependent on you as a social media user and the principles set out in the terms and conditions and privacy policies of the social media providers.
If you contact us through social media by sending us a private message, we process, including store, such messages in our IT system under the same principles as e-mail correspondence.
We have no influence on how long your data is processed by the social media provider you use. Information about these periods can be found in the documents made available by the administrators of the respective social media platforms.
2.6. REACHING FACEBOOK USERS, GOOGLE SERVICES, AND OTHER PLATFORMS WITH PERSONALIZED INFORMATION CONCERNING THE FUTURE FOR KIDS FOUNDATION. ANALYTICAL AND STATISTICAL ACTIVITIES
Data regarding your activity on www.future-for-kids.pl is collected using cookies and other similar tools, about which you can learn more in the Cookies tab. In brief, we use tools provided by, among others, the administrator of the Facebook portal (Meta Platforms Ireland Limited), e.g., Meta Pixel; tools from Google Ireland Limited (e.g., Tag Manager); Criteo GmbH (Criteo OneTag); and Microsoft Advertising (Microsoft Ireland Operations Limited).
Furthermore, we use a functionality called Custom Audiences, provided by Meta Platforms Ireland Limited. As part of this service, we may transfer your e-mail address to Facebook and Instagram to create an audience for our communications and to better tailor the information displayed to you regarding the activities of the Future for Kids Foundation. Your e-mail address is hashed before being transferred to these services. Meta Platforms declares that it uses your e-mail address solely for the aforementioned matching purposes.
If you do not wish to be included in our future activities involving contact via Facebook and Instagram, please contact us.
We also use the Google Analytics analytical tool provided to us by Google. This tool allows us to create statistics, which we then analyze to optimize the www.future-for-kids.pl website. Google Analytics automatically collects information about your use of www.future-for-kids.pl (so-called activity). We have taken measures to ensure that Google receives less data about you (specifically about the device you use to access the www.future-for-kids.pl website).
If you wish to actively manage your privacy regarding the tools described in this section, or if you wish to limit the scope of data transferred to the providers of these tools, remember that you can, among other things:
- manage cookie settings in your web browser,
- install browser plug-ins that block or restrict the operation of the aforementioned tools,
- enable incognito mode in your web browser.
Categories of data subjects:
Users of www.future-for-kids.pl.
Categories of personal data processed:
Data specified in the Cookies tab and e-mail addresses in cases where we use the Facebook Custom Audiences functionality.
Legal basis for data processing:
Our legitimate interest in reaching you with information concerning the Foundation and projects conducted on www.future-for-kids.pl while you use Facebook, Google, or other internet services, or your consent for the activities described above.
Period of processing, including data storage:
Specified in detail here Cookies regarding data collected via cookies or other tracking tools. Regarding e-mail addresses used for creating Custom Audiences – until your objection to the processing is upheld. If the basis for processing was your consent – until its withdrawal. As noted above, Facebook deletes hashed e-mail addresses received from us immediately after the matching process is completed. In certain cases, we also process your data for the duration of the limitation period for claims.
2.7. ESTABLISHING CONTACT WITH YOU OR THE ORGANIZATION YOU REPRESENT AND MAINTAINING RELATIONSHIPS IN CASES WHERE YOUR DATA IS PUBLICLY AVAILABLE OR WAS OBTAINED FROM A THIRD PARTY; CREATING CONTACT DATABASES FOR DISSEMINATING INFORMATION ABOUT AND SUPPORTING THE FOUNDATION'S STATUTORY ACTIVITIES
Pursuant to Article 14 of the GDPR – Information to be provided where personal data have not been obtained from the data subject.
We strive to disseminate information about our statutory activities, including charitable projects, to the widest possible circle of people. We encourage individuals who have previously supported our projects to make further donations. We establish contact with public figures and encourage them to engage in the process of helping those in need or participating in our other campaigns. All these activities involve the collection and further processing of personal data, which we obtain from sources including the Internet, individual entities' websites, social media, the press, other media, publicly available registers such as the National Court Register (KRS), CEIDG, REGON, or third-party databases.
Categories of data subjects:
- natural persons who are potential donors,
- persons representing or acting on behalf of or for the benefit of potential donors (other than natural persons),
- persons representing or acting on behalf of or for the benefit of potential Organizations – i.e., organizations cooperating closely with the Future for Kids Foundation in organizing projects on www.future-for-kids.pl,
- persons who can help us propagate information about the activities of the Future for Kids Foundation, including ongoing projects,
- journalists or individuals otherwise related to the media, particularly online media,
- individuals who, in our assessment, may be interested in cooperating with the Future for Kids Foundation.
Categories of personal data processed:
Typical data processed in this process includes:
- first and last name,
- pseudonym/nickname,
- address,
- e-mail address,
- telephone number,
- affiliation with a given organization, e.g., foundation, association, company,
- position held within a given organization, e.g., board member,
- information about social media profiles,
- subject of professional activity,
- any personal data provided during mutual communication.
Legal basis for data processing:
Our activities are based on:
- the legitimate interests of the Future for Kids Foundation consisting of:
- informing persons whose data is publicly available about our activities;
- encouraging cooperation with our Foundation and subsequently maintaining established relationships;
- establishing, exercising, or defending against claims;
- in selected cases, the basis for processing may be the consent of the data subject.
Period of processing, including data storage:
For the time necessary to establish contact and for the duration of the established relationship, no longer than until your objection to the processing of your data is upheld. Subsequently, for the limitation period for claims (6 full calendar years).
2.8. HANDLING E-MAIL CORRESPONDENCE
You may contact us via electronic mail (e-mail). In such a situation, we will process your e-mail address, your first and last name, and any other data contained within the message body.
Categories of data subjects:
Natural persons who have sent us an e-mail.
Categories of personal data processed:
- e-mail address,
- first and last name,
- information contained in the correspondence.
Providing the above data is voluntary;however, failure to provide it (especially the e-mail address) will make it impossible to contact us in this form.
Legal basis for data processing:
If the correspondence is not related to the conclusion or performance of a contract, the basis for processing is our legitimate interest consisting of:
- handling e-mail correspondence, and after its conclusion
- archiving correspondence for the purpose of demonstrating its course in the future.
Period of processing, including data storage:
The archiving period for e-mail correspondence cannot be explicitly specified (it will likely cover the entire duration of the Future for Kids Foundation's operations); however, you have the right to request its deletion, unless further archiving is justified due to an existing contract, the necessity to exercise or defend against claims, or another overriding interest of the Future for Kids Foundation.
2.9. TELEPHONE CONVERSATIONS WITH THE FUTURE FOR KIDS FOUNDATION
If you contact us by telephone, we inform you before the conversation begins that it will be recorded and provide basic information regarding the processing of your data. We further indicate that detailed explanations on this subject can be found in this Privacy Policy.
Categories of data subjects:
Natural persons who have spoken with us by telephone, subject to the condition that we always inform the caller before the actual conversation that it will be recorded, providing the opportunity to disconnect and contact us via another communication channel (e.g., e-mail or private message on Facebook).
Categories of personal data processed:
Typical data processed in connection with recording telephone calls includes:
- first and last name,
- telephone number,
- voice recording,
- other personal data provided by the caller during the conversation.
If the caller also contacts us via e-mail or private messages on social media, we combine the data collected from such communication with the data indicated above (recorded in connection with the telephone call). In this way, we maintain a complete communication history.
Providing the above data is voluntary;however, failure to provide a telephone number may prevent the conversation from taking place, and failure to provide other necessary data will prevent us from providing an answer or other assistance regarding the matter of your call.
Legal basis for data processing:
Unless the content of the telephone call is related to the conclusion or performance of a contract, the basis for processing is:
- your consent to the recording of the telephone call, and also
- our legitimate interest consisting of:
- ensuring the highest standards of service and the correct course of conversations with stakeholders of the Future for Kids Foundation,
- establishing contacts or maintaining relationships within the statutory activities of the Future for Kids Foundation,
- securing (archiving) evidence in the event of potential claims, both from the caller and from our side.
Period of processing, including data storage:
We process recordings of telephone calls until we receive information regarding the withdrawal of consent, unless the processing is necessary for the performance of a contract (in which case we store recordings until the termination or performance of the contract). In any case, the storage period for recordings is extended by the limitation period for claims (6 full calendar years).
2.10. ENSURING THE PROPER FUNCTIONING OF THE FUTURE FOR KIDS WEBSITE
With the help of specialized entities, we use appropriate IT tools to ensure the proper functioning of the www.future-for-kids.pl website. Our primary goal is to monitor and report errors that may appear on the pages in order to eliminate them.
Categories of data subjects:
Users of www.future-for-kids.pl.
Categories of personal data processed:
Depending on the tool used, these may include the following personal data or other information:
- e-mail address of the User logged into www.future-for-kids.pl,
- IP address,
- technical data of the User's device (e.g., laptop, smartphone) used to access www.future-for-kids.pl,
- data regarding the User's web browser,
- data from forms filled out by the User on the website (which may include data regarding the Account, donations made, etc.),
- URL address,
- data regarding the User's web browser,
- application log data.
Legal basis for data processing:
Our legitimate interest in ensuring the proper functioning of the www.future-for-kids.pl website.
Period of processing, including data storage:
Retention periods vary depending on the tool used, but no later than until your objection to the processing of your data is upheld.
2.11. ESTABLISHING, EXERCISING, OR DEFENDING AGAINST CLAIMS
Categories of personal data processed:
Insofar as the scope of data processed by the Foundation for the purposes of establishing, exercising, or defending against claims has not been specified in the previous sections of the Privacy Policy, we indicate that these consist of selected data provided by the User, e.g., first and last name, e-mail address, information regarding consents granted, and other data necessary to prove the existence of a claim or the extent of the damage incurred.
Legal basis for data processing:
The legitimate interest of the Future for Kids Foundation consisting of establishing, exercising, or defending against claims before competent courts and state authorities.
Period of processing, including data storage:
Until the expiration of the User's claims against the Foundation and the Foundation's claims against the User – principally 6 years, with the extension of this period to the end of the calendar year.