Future for Kids Privacy Policy

Effective from 01.11.2025

At the Future for Kids Foundation, which operates the website www.future-for-kids.pl (and acts as its Controller), we attach particular importance to the protection of personal data.

In our Privacy Policy, you will learn how we process your personal data, how we protect it, and what rights you are entitled to.

Detailed information regarding how the Future for Kids Foundation uses cookies and other similar tools can be found in the Cookies tab.

I. BASIC INFORMATION

Personal Data Controller (Us)

The controller of your personal data is the Future for Kids Foundation, with its registered office in Wrocław, at the following address:

ul. Henryka Sienkiewicza 40/13
Wrocław 50-335
POLAND

Full contact details of the Foundation, including the e-mail address and telephone number, can be found on our website under the Contact tab. We encourage you to contact us regarding all matters related to the processing of your personal data.

Contact with the Data Protection Officer (DPO)

We have appointed a Data Protection Officer. Their contact details can be found under the Data Protection Officer tab.

You may contact our DPO regarding any matter concerning the protection of your personal data and privacy in a broad sense.

Purposes of Personal Data Processing

Personal data is processed in accordance with Article 6 of the GDPR:

  1. Processing shall be lawful only if and to the extent that at least one of the following applies:

    • the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
    • processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
    • processing is necessary for compliance with a legal obligation to which the controller is subject;
    • processing is necessary in order to protect the vital interests of the data subject or of another natural person;
    • processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
    • processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
  2. The first paragraph of point (f) shall not apply to processing carried out by public authorities in the performance of their tasks.

Purposes of Processing Your Data

We process your personal data in order to:

  • enable you to support charitable projects conducted by the Future for Kids Foundation;
  • accept monetary donations through various payment channels and process them in accordance with tax and accounting law requirements;
  • handle complaints, requests, or inquiries related to payments or the use of the Foundation's website;
  • inform you about the status of supported projects and our statutory activities;
  • enable the creation and management of a user account on the Future for Kids website;
  • develop our website, taking user preferences into account;
  • conduct analytical and statistical activities;
  • contact you via e-mail, telephone, or social media regarding matters related to the Foundation's activities;
  • remind you of the possibility of donating 1.5% of your tax;
  • manage special campaigns;
  • ensure the security and proper functioning of the website;
  • establish, exercise, or defend legal claims.

Detailed information on each of the above purposes can be found in Part II of this Privacy Policy (Detailed Information).

Your Rights

Under the GDPR, you have the following rights:

  • access to your data and obtaining a copy thereof;
  • rectification (correction) of data;
  • erasure of data ("the right to be forgotten");
  • restriction of processing;
  • data portability to another controller;
  • objection to the processing of data;
  • withdrawal of consent, if processing is based on your consent;
  • lodging a complaint with the President of the Personal Data Protection Office (UODO).

You may change your choices in this regard at any time using the button on the website "Manage cookie consents"

Every e-mail message sent by us also contains a link allowing you to unsubscribe from notifications or change your communication settings.

Updates to the Privacy Policy

The Future for Kids Foundation regularly reviews and updates the Privacy Policy. Changes may result from:

  • amendments to legal provisions;
  • technological changes;
  • adaptation to data protection best practices.

We will inform you of any significant changes on our website. In the case of substantial changes, we may also send you an e-mail (provided we have your address and you have not opted out of this form of contact).

II. DETAILED INFORMATION

Below you will find detailed information regarding the principles of processing your personal data within the framework of specific purposes:

1. TERMS USED IN THE FURTHER PART OF THE PRIVACY POLICY

Controller, Data Controller, Future for Kids Foundation, Foundation, we
The Future for Kids Foundation with its registered office in Wrocław.
Account
A functionality available to a User registered on the Future for Kids Foundation website, enabling the input, management, and sending of data.
Privacy Policy
This document titled "Privacy Policy of the Future for Kids Foundation."
Terms and Conditions
The Terms and Conditions of the Future for Kids Foundation website, the content of which can be found in the Terms and Conditions tab. It defines the conditions for using the website.
GDPR
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (here you can find the text of the General Data Protection Regulation).

2. PERSONAL DATA PROCESSED, PURPOSES, AND LEGAL BASES FOR PROCESSING

2.1. ACCEPTANCE OF MONETARY DONATIONS AND RELATED ACTIVITIES

Accepting a monetary payment from you, intended to support charitable projects conducted on the Future for Kids Foundation website, involves processing your data as a donor. We must record the payment in our IT systems and include it appropriately in our accounting and tax documentation. Furthermore, we analyze selected data to prevent fraud related to payments or to determine if fraud has occurred in a given case, and we defend ourselves against potential unjustified demands or pursue justified claims ourselves.

As part of the donation handling process, we provide donors with the opportunity to download a confirmation of receipt of the donation by the Future for Kids Foundation and handle potential complaints, requests, and inquiries from donors or regarding donations.

Categories of data subjects:

We process the personal data of the following natural persons:

  • donors, including donors registered on the www.future-for-kids.pl website whom we call Helpers (including Companies) – being natural persons;
  • natural persons acting on behalf of or for the benefit of donors (including Helpers), in particular institutional donors (legal entities, other organizational units).
Categories of personal data processed:

Depending on the payment channel selected by you as a donor, we process data such as:

  • first and last name;
  • company (enterprise) information;
  • address;
  • payment account number, name of the entity maintaining it (e.g., bank);
  • e-mail address;
  • telephone number;
  • IP address;
  • system ID of the www.future-for-kids.pl website;
  • alphanumeric donation identifier assigned by the payment service provider;
  • amount and currency of the donation;
  • time of initiation of the transfer of funds on www.future-for-kids.pl;
  • time of authorization of the payment (monetary donation) by the payment service provider;
  • information provided in the payment title;
  • selected digits of the payment card number, varying by payment service provider;
  • card profile (private individual, business);
  • payment card type;
  • country of the card issuer;
  • personal data included in the content of complaints, requests, and inquiries regarding donation agreements;
  • other data provided to us as part of a potential complaint, request, or inquiry;
  • regarding data analyzed to prevent fraud or determine if fraud occurred, all data concerning a given payment transaction (see above) or Account, as well as 3-D Secure information, may be processed.

Providing data is voluntary. If you do not provide the data indicated as required within a specific payment channel or as marked by our partner (e.g., payment service provider), you will not be able to support a project on www.future-for-kids.pl using that payment channel. In such a case, you may make a payment using another channel that does not require an e-mail address, e.g., via a traditional bank transfer.

Legal bases for data processing:

We process your data based on the following legal grounds:

  • proper performance of donation agreements concluded with donors, including providing confirmations of receipt of donations by the Future for Kids Foundation and handling complaints, requests, and inquiries regarding donation agreements;
  • performance of legal obligations by the Future for Kids Foundation, including maintaining required accounting and tax documentation;
  • realization of our legitimate interests, including:
    • sending e-mails to donors regarding the possibility of obtaining confirmation of receipt of a donation by the Future for Kids Foundation;
    • analyzing data to prevent fraud or to determine if fraud has occurred in a given case, and
    • establishing, exercising, or defending against claims;
  • your consent, if, for example, you provide your data optionally to have it included on the donation confirmation.
Period of processing, including data storage:

We process your data for the duration of the concluded donation agreement, until consent is withdrawn, or until your objection is upheld (depending on the basis of processing), and additionally for the following periods:

  • the limitation period for potential claims (6 full calendar years);
  • storage of accounting and tax documentation as required by law (5 full calendar years + 1 year due to the limitation period for tax liabilities).

With regard to personal data processed in connection with providing donors the possibility to download confirmations of receipt of donations by the Foundation, the retention period is 6 full calendar years (the possibility to generate confirmations for previous years).

If you provide a donation via PayU S.A. with its registered office in Poznań ("Microdonations"), for example when making purchases via PayU in an online store, we receive the following information from PayU for accounting purposes: e-mail address, Microdonation amount, system identifier of the purpose, and time of the donation (date and time).

2.2. E-MAIL NOTIFICATIONS

If you make a donation using a payment channel that involves sharing your e-mail address with us, or if you created an Account on the www.future-for-kids.pl website for donation purposes, we process said e-mail address to provide you with the following information, including information regarding our statutory public benefit activities:

  • system notification of receipt of payment (which may contain information as referred to in the Payment Services Act),
  • updates on the project you supported,
  • results of the project you supported,
  • newly opened projects you may be interested in,
  • "Good News," i.e., positive information related to the Foundation's activities.
Legal bases for data processing:

We process your data based on the following legal grounds:

  • performance of legal (information) obligations by the Future for Kids Foundation as provided for in the Payment Services Act, including under agreements concluded with payment service providers,
  • realization of our legitimate interests, including maintaining relationships with donors, providing information about supported projects or other statutory activities of the Future for Kids Foundation, optimizing activities related to the creation and delivery of e-mail notifications, and establishing, exercising, or defending against claims.
Period of processing, including data storage:

We process your data for the duration of sending e-mail notifications (e.g., until you unsubscribe from receiving e-mail notifications), and after that period for a time depending on the variant chosen from those indicated below. In any case, your e-mail address will be processed in our system of sent e-mail message logs for a period of 6 full calendar years calculated separately for each such log (in particular due to the limitation period for potential claims). Similarly, we process the IP address and information about the activity of e-mail notification recipients for the limitation period for claims.

If you object to receiving e-mail notifications, we mark your request in our database (by placing your e-mail address there) and no further notifications are sent to your e-mail address, not even the system notification of receipt of payment by the Foundation (you will only receive an e-mail from the payment service provider). In this variant, the retention period for the e-mail address is 3 full calendar years from the date the request was processed, meaning that making another payment with that e-mail address after this retention period will reactivate the sending of e-mail notifications.

If you request data erasure, we hash your e-mail address (a process of mapping data to a string of a specified length using an algorithm) for the limitation period for claims, after which it is deleted from our database. If you had an Account, we additionally block access to it. Making another payment with that e-mail address will reactivate the sending of e-mail notifications.

2.3. USER ACCOUNT

A user account on the website is not a public profile. Your donation history is assigned to your profile.

Categories of personal data processed:

Depending on the data you provided when creating the Account, we may process the following data concerning you:

  • first name,
  • last name,
  • e-mail address,
  • IP address from which the account was created on www.future-for-kids.pl and from which you logged into the Account,
  • Account password in the form of a hash function,
  • profile address, so-called slug,
  • token provided to us by an external authentication service provider (e.g., Apple, Google, Facebook), if you register or log in using such a service,
  • payment card token,
  • payment card expiration date,
  • personal data indicated in section 2.1. (processed in connection with donations made by the Helper, as well as data analyzed to prevent fraud or to determine if fraud has occurred in a given case),
  • donation history,

Analytical and retargeting cookies are used only after consent is granted. You may change your settings at any time in your Profile under the "Manage cookie consents" tab.

Refusing consent for analytical and marketing cookies does not prevent you from using the website; however, it may prevent you from making donations and limit the personalization of content and the functionality of certain analytical tools.

Legal bases for data processing:

We process your data based on the following legal grounds:

  • proper performance of the agreement for maintaining an account on www.future-for-kids.pl and providing account-related website functionalities,
  • realization of our legitimate interests:
    • analyzing data to prevent fraud or to determine if fraud has occurred in a given case;
    • establishing, exercising, or defending against claims;
    • if the Account is maintained for a representative of an Organization or Company, our legitimate interest is the ability to maintain relationships with said Organization or Company, including the ability to contact or make arrangements with its representative;
  • your consent, with regard to data that is not processed on the basis of the above-mentioned grounds.
Period of processing, including data storage:

We process your data until the account on www.future-for-kids.pl is deleted. Additionally, your data will be processed for the limitation period for potential claims (6 full calendar years) – in the event of account deletion, we anonymize the first and last name, and the e-mail address associated with the Account is hashed (using an appropriate hash function).

2.4. 1.5% TAX FUNDS

We receive your data from the competent body of the National Revenue Administration if you donated 1.5% of your tax and consented to the transfer of your personal data.

As a charitable foundation, we collect 1.5% tax funds through donations to the Future for Kids Foundation with its registered office in Wrocław, at the following address:

ul. Henryka Sienkiewicza 40/13
Wrocław 50-335
POLAND
KRS 0001149547

If you do not wish us to process your data, do not consent to their transfer when filing your tax return or submit your objection to us.

Categories of data subjects:

Personal income tax payers who donated 1.5% of their tax to us and consented to the transfer of their data.

Categories of personal data processed:
  • first and last name,
  • address,
  • any personal data covered by the specific purpose,
  • spouse's data in case of joint tax filing.

Providing personal data is fully voluntary. Without your consent, we will not receive them from the National Revenue Administration.

Legal basis for data processing:

User consent to the processing of data.

Period of processing, including data storage:

We process the data of persons supporting us with 1.5% of their tax for no longer than 5 full calendar years from the date of receipt of such data, unless there is another basis for processing or we have upheld your objection.

2.5. SOCIAL MEDIA CONTACT

We are present on social media (e.g., Facebook, Instagram, X (formerly Twitter), YouTube, TikTok), where we publish content related to the statutory activities of the Future for Kids Foundation. If you follow our profile on social media or interact with us, we become – alongside the social media providers – a joint controller of your data. In such cases, the principles of processing your data are also determined by the terms and conditions and privacy policies of the social media administrators. Each social media platform provider has its own policy regarding the processing and protection of personal data.

Below we present the list of social media platforms on which we are present, along with links to their Privacy Policies:

Categories of data subjects:

Social media users who interact with us on social media.

Categories of personal data processed:
  • first name, last name, nickname,
  • image,
  • information available within the public profile,
  • any personal data provided in messages or comments.
Legal basis for data processing:

Our legitimate interests consisting of:

  • managing profiles on social media;
  • reading and responding to messages (including private messages);
  • maintaining relationships with persons who interact with us;
  • analyzing the quality and effectiveness of communication on social media;
  • establishing, exercising, or defending against claims.
Period of processing, including data storage:

Dependent on you as a social media user and the principles set out in the terms and conditions and privacy policies of the social media providers.

If you contact us through social media by sending us a private message, we process, including store, such messages in our IT system under the same principles as e-mail correspondence.

We have no influence on how long your data is processed by the social media provider you use. Information about these periods can be found in the documents made available by the administrators of the respective social media platforms.

2.6. REACHING FACEBOOK USERS, GOOGLE SERVICES, AND OTHER PLATFORMS WITH PERSONALIZED INFORMATION CONCERNING THE FUTURE FOR KIDS FOUNDATION. ANALYTICAL AND STATISTICAL ACTIVITIES

Data regarding your activity on www.future-for-kids.pl is collected using cookies and other similar tools, about which you can learn more in the Cookies tab. In brief, we use tools provided by, among others, the administrator of the Facebook portal (Meta Platforms Ireland Limited), e.g., Meta Pixel; tools from Google Ireland Limited (e.g., Tag Manager); Criteo GmbH (Criteo OneTag); and Microsoft Advertising (Microsoft Ireland Operations Limited).

Furthermore, we use a functionality called Custom Audiences, provided by Meta Platforms Ireland Limited. As part of this service, we may transfer your e-mail address to Facebook and Instagram to create an audience for our communications and to better tailor the information displayed to you regarding the activities of the Future for Kids Foundation. Your e-mail address is hashed before being transferred to these services. Meta Platforms declares that it uses your e-mail address solely for the aforementioned matching purposes.

If you do not wish to be included in our future activities involving contact via Facebook and Instagram, please contact us.

We also use the Google Analytics analytical tool provided to us by Google. This tool allows us to create statistics, which we then analyze to optimize the www.future-for-kids.pl website. Google Analytics automatically collects information about your use of www.future-for-kids.pl (so-called activity). We have taken measures to ensure that Google receives less data about you (specifically about the device you use to access the www.future-for-kids.pl website).

If you wish to actively manage your privacy regarding the tools described in this section, or if you wish to limit the scope of data transferred to the providers of these tools, remember that you can, among other things:

  • manage cookie settings in your web browser,
  • install browser plug-ins that block or restrict the operation of the aforementioned tools,
  • enable incognito mode in your web browser.
Categories of data subjects:

Users of www.future-for-kids.pl.

Categories of personal data processed:

Data specified in the Cookies tab and e-mail addresses in cases where we use the Facebook Custom Audiences functionality.

Legal basis for data processing:

Our legitimate interest in reaching you with information concerning the Foundation and projects conducted on www.future-for-kids.pl while you use Facebook, Google, or other internet services, or your consent for the activities described above.

Period of processing, including data storage:

Specified in detail here Cookies regarding data collected via cookies or other tracking tools. Regarding e-mail addresses used for creating Custom Audiences – until your objection to the processing is upheld. If the basis for processing was your consent – until its withdrawal. As noted above, Facebook deletes hashed e-mail addresses received from us immediately after the matching process is completed. In certain cases, we also process your data for the duration of the limitation period for claims.

2.7. ESTABLISHING CONTACT WITH YOU OR THE ORGANIZATION YOU REPRESENT AND MAINTAINING RELATIONSHIPS IN CASES WHERE YOUR DATA IS PUBLICLY AVAILABLE OR WAS OBTAINED FROM A THIRD PARTY; CREATING CONTACT DATABASES FOR DISSEMINATING INFORMATION ABOUT AND SUPPORTING THE FOUNDATION'S STATUTORY ACTIVITIES

Pursuant to Article 14 of the GDPR – Information to be provided where personal data have not been obtained from the data subject.

We strive to disseminate information about our statutory activities, including charitable projects, to the widest possible circle of people. We encourage individuals who have previously supported our projects to make further donations. We establish contact with public figures and encourage them to engage in the process of helping those in need or participating in our other campaigns. All these activities involve the collection and further processing of personal data, which we obtain from sources including the Internet, individual entities' websites, social media, the press, other media, publicly available registers such as the National Court Register (KRS), CEIDG, REGON, or third-party databases.

Categories of data subjects:
  • natural persons who are potential donors,
  • persons representing or acting on behalf of or for the benefit of potential donors (other than natural persons),
  • persons representing or acting on behalf of or for the benefit of potential Organizations – i.e., organizations cooperating closely with the Future for Kids Foundation in organizing projects on www.future-for-kids.pl,
  • persons who can help us propagate information about the activities of the Future for Kids Foundation, including ongoing projects,
  • journalists or individuals otherwise related to the media, particularly online media,
  • individuals who, in our assessment, may be interested in cooperating with the Future for Kids Foundation.
Categories of personal data processed:

Typical data processed in this process includes:

  • first and last name,
  • pseudonym/nickname,
  • address,
  • e-mail address,
  • telephone number,
  • affiliation with a given organization, e.g., foundation, association, company,
  • position held within a given organization, e.g., board member,
  • information about social media profiles,
  • subject of professional activity,
  • any personal data provided during mutual communication.
Legal basis for data processing:

Our activities are based on:

  • the legitimate interests of the Future for Kids Foundation consisting of:
    • informing persons whose data is publicly available about our activities;
    • encouraging cooperation with our Foundation and subsequently maintaining established relationships;
    • establishing, exercising, or defending against claims;
  • in selected cases, the basis for processing may be the consent of the data subject.
Period of processing, including data storage:

For the time necessary to establish contact and for the duration of the established relationship, no longer than until your objection to the processing of your data is upheld. Subsequently, for the limitation period for claims (6 full calendar years).

2.8. HANDLING E-MAIL CORRESPONDENCE

You may contact us via electronic mail (e-mail). In such a situation, we will process your e-mail address, your first and last name, and any other data contained within the message body.

Categories of data subjects:

Natural persons who have sent us an e-mail.

Categories of personal data processed:
  • e-mail address,
  • first and last name,
  • information contained in the correspondence.

Providing the above data is voluntary;however, failure to provide it (especially the e-mail address) will make it impossible to contact us in this form.

Legal basis for data processing:

If the correspondence is not related to the conclusion or performance of a contract, the basis for processing is our legitimate interest consisting of:

  • handling e-mail correspondence, and after its conclusion
  • archiving correspondence for the purpose of demonstrating its course in the future.
Period of processing, including data storage:

The archiving period for e-mail correspondence cannot be explicitly specified (it will likely cover the entire duration of the Future for Kids Foundation's operations); however, you have the right to request its deletion, unless further archiving is justified due to an existing contract, the necessity to exercise or defend against claims, or another overriding interest of the Future for Kids Foundation.

2.9. TELEPHONE CONVERSATIONS WITH THE FUTURE FOR KIDS FOUNDATION

If you contact us by telephone, we inform you before the conversation begins that it will be recorded and provide basic information regarding the processing of your data. We further indicate that detailed explanations on this subject can be found in this Privacy Policy.

Categories of data subjects:

Natural persons who have spoken with us by telephone, subject to the condition that we always inform the caller before the actual conversation that it will be recorded, providing the opportunity to disconnect and contact us via another communication channel (e.g., e-mail or private message on Facebook).

Categories of personal data processed:

Typical data processed in connection with recording telephone calls includes:

  • first and last name,
  • telephone number,
  • voice recording,
  • other personal data provided by the caller during the conversation.

If the caller also contacts us via e-mail or private messages on social media, we combine the data collected from such communication with the data indicated above (recorded in connection with the telephone call). In this way, we maintain a complete communication history.

Providing the above data is voluntary;however, failure to provide a telephone number may prevent the conversation from taking place, and failure to provide other necessary data will prevent us from providing an answer or other assistance regarding the matter of your call.

Legal basis for data processing:

Unless the content of the telephone call is related to the conclusion or performance of a contract, the basis for processing is:

  • your consent to the recording of the telephone call, and also
  • our legitimate interest consisting of:
    • ensuring the highest standards of service and the correct course of conversations with stakeholders of the Future for Kids Foundation,
    • establishing contacts or maintaining relationships within the statutory activities of the Future for Kids Foundation,
    • securing (archiving) evidence in the event of potential claims, both from the caller and from our side.
Period of processing, including data storage:

We process recordings of telephone calls until we receive information regarding the withdrawal of consent, unless the processing is necessary for the performance of a contract (in which case we store recordings until the termination or performance of the contract). In any case, the storage period for recordings is extended by the limitation period for claims (6 full calendar years).

2.10. ENSURING THE PROPER FUNCTIONING OF THE FUTURE FOR KIDS WEBSITE

With the help of specialized entities, we use appropriate IT tools to ensure the proper functioning of the www.future-for-kids.pl website. Our primary goal is to monitor and report errors that may appear on the pages in order to eliminate them.

Categories of data subjects:

Users of www.future-for-kids.pl.

Categories of personal data processed:

Depending on the tool used, these may include the following personal data or other information:

  • e-mail address of the User logged into www.future-for-kids.pl,
  • IP address,
  • technical data of the User's device (e.g., laptop, smartphone) used to access www.future-for-kids.pl,
  • data regarding the User's web browser,
  • data from forms filled out by the User on the website (which may include data regarding the Account, donations made, etc.),
  • URL address,
  • data regarding the User's web browser,
  • application log data.
Legal basis for data processing:

Our legitimate interest in ensuring the proper functioning of the www.future-for-kids.pl website.

Period of processing, including data storage:

Retention periods vary depending on the tool used, but no later than until your objection to the processing of your data is upheld.

2.11. ESTABLISHING, EXERCISING, OR DEFENDING AGAINST CLAIMS

Categories of personal data processed:

Insofar as the scope of data processed by the Foundation for the purposes of establishing, exercising, or defending against claims has not been specified in the previous sections of the Privacy Policy, we indicate that these consist of selected data provided by the User, e.g., first and last name, e-mail address, information regarding consents granted, and other data necessary to prove the existence of a claim or the extent of the damage incurred.

Legal basis for data processing:

The legitimate interest of the Future for Kids Foundation consisting of establishing, exercising, or defending against claims before competent courts and state authorities.

Period of processing, including data storage:

Until the expiration of the User's claims against the Foundation and the Foundation's claims against the User – principally 6 years, with the extension of this period to the end of the calendar year.

3. ENTITIES TO WHOM WE DISCLOSE PERSONAL DATA

Depending on how you use the www.future-for-kids.pl website or the purpose for which you interact with us, we transfer your personal data to various recipients.

Information regarding these recipients is contained in the two subsections below.

To publicly inform about Projects, we use various communication channels, including social media, online services, e-mail communication, and traditional media.

3.1. RECIPIENTS OF PERSONAL DATA

Operating the www.future-for-kids.pl website and establishing and maintaining relationships with the community of people wishing to help those in need requires us to use the services of specialized entities to whom we transfer your personal data. These are entities providing us with, among others, the following services:

  • accounting, legal, tax, auditing, and other advisory services,
  • provision of IT infrastructure or software, particularly in the cloud model (e.g., office software, including e-mail provided by Google, communication tools, accounting and HR software, mailing software, website analytics software for www.future-for-kids.pl – Google Analytics),
  • data hosting,
  • IT services, in particular:
    • programming,
    • testing of software, systems, or IT infrastructure,
    • maintenance,
    • cybersecurity,
    • website error monitoring and reporting,
  • online payment processing (e.g., Przelewy24, Apple Pay, Google Pay, PayU, PayPro, PayPal),
  • identity verification of specific categories of website users, in particular those in need,
  • printing services,
  • research on the behavior and preferences of Users of www.future-for-kids.pl,
  • e-mail distribution,
  • social media providers, such as Facebook, and entities providing services involving the display of information about Projects in internet services and cloud services (e.g., in search engines, in e-mail),
  • postal services (e.g., Poczta Polska) and courier services,
  • telecommunications,
  • electronic signing of documents (e.g., donation agreements concluded outside the website structure),
  • other entities that support us in publicly informing about our statutory activities, including ongoing projects.

Insofar as these entities process your personal data on our behalf, they act on the basis of data processing agreements concluded with us and are obliged to protect your personal data to the same extent as the Foundation.

In selected cases, the entities to whom we transfer your data, e.g., your e-mail address, are independent controllers of your personal data (this applies, for example, to payment service providers, including Przelewy24, Apple Pay, Google Pay, PayU, PayPro, PayPal).

We also disclose your data to the extent necessary to the employees, associates, and volunteers of the Foundation.

In order to prevent bot activity, we may use the Google reCAPTCHA mechanism and other similar tools from other providers on www.future-for-kids.pl to verify whether we are dealing with a real website User or a bot. In such cases, we may disclose your IP address and selected data of your device and web browser to Google or another provider.

Our service providers are primarily based in Poland and other countries of the European Economic Area (EEA). We clarify that the EEA currently consists of the member states of the European Union, Norway, Iceland, and Liechtenstein.

In cases where we use the services of entities based outside the EEA, we ensure an adequate level of protection for Users' personal data. An example of such a safeguard is the use of standard contractual clauses.

4. RIGHTS ENTITLED TO YOU IN CONNECTION WITH OUR PROCESSING OF YOUR PERSONAL DATA

The Future for Kids Foundation hereby informs you of your entitlements provided for under the GDPR.

You may submit a specific request to us by contacting us at the e-mail address: kontakt@future-for-kids.pl

4.1. RIGHT OF ACCESS TO YOUR PERSONAL DATA AND TO OBTAIN A COPY THEREOF (Art. 15 GDPR)

You may ask us whether we are processing your personal data.

If this is the case, you then have the right to:

  • obtain access to your personal data;
  • obtain information regarding, among others:
    • the purposes of processing,
    • the categories of your personal data that we process,
    • the recipients or categories of recipients of your personal data,
    • the envisaged period for which your personal data will be stored, or the criteria used to determine that period,
    • the rights entitled to you under the GDPR,
    • the right to lodge a complaint with a supervisory authority;
  • receive a copy of your personal data. The Foundation may charge a reasonable fee based on administrative costs for a second and any subsequent copies of your personal data.

4.2. RIGHT TO RECTIFICATION (CORRECTION) OF YOUR PERSONAL DATA (Art. 16 GDPR)

You may request that we rectify (correct) or complete your personal data.

The right to rectification does not apply, in particular, to recorded telephone conversations.

4.3. RIGHT TO ERASURE OF YOUR PERSONAL DATA ("RIGHT TO BE FORGOTTEN") (Art. 17 GDPR)

You have the right to request that we erase all or selected parts of your personal data if, among other reasons:

  • your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • you have withdrawn consent for the processing of your personal data, and the Foundation processed said data based on your consent;
  • you have objected to the processing of your personal data based on our legitimate interest and the objection was justified;
  • your personal data were processed unlawfully.

Please be advised that despite a request for the erasure of your data, in certain situations we will still be entitled to process your personal data to the extent necessary to comply with legal obligations incumbent upon the Foundation (e.g., related to the Foundation's accounting and tax obligations) and to the extent necessary for the establishment, exercise, or defense of legal claims. This will most often involve the processing (storage) of data such as identification data, contact details, data regarding the scope of consents granted, data regarding the use of specific website functionalities, and the subject of your request.

4.4. RIGHT TO RESTRICTION OF PROCESSING OF YOUR PERSONAL DATA (Art. 18 GDPR)

You have the right to restrict the processing of your personal data, which results in us being permitted only to store your personal data during the period of restriction.

Below are the cases in which you may request the restriction of the processing of your personal data:

  • when you contest the accuracy of your personal data – for a period enabling us to verify the accuracy of said data;
  • when the processing of your personal data is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
  • when the Foundation no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise, or defense of legal claims;
  • when you have objected to processing – pending the verification whether our legitimate grounds override those of your objection.

4.5. RIGHT TO DATA PORTABILITY (Art. 20 GDPR)

You have the right to receive from us the personal data concerning you, which you have provided to us, and which we process based on your consent or a contract concluded with you. Furthermore, you may request that we transmit those data, in a structured and commonly used format, to another data controller, where technically feasible.

4.6. RIGHT TO WITHDRAW CONSENT TO THE PROCESSING OF YOUR PERSONAL DATA (Art. 7(3) GDPR)

If the basis for our processing of your personal data is your consent, you have the right to withdraw that consent at any time.

The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal by the Foundation.

4.7. RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA (Art. 21 GDPR)

You may object at any time to the processing of your personal data if the basis for such processing is our legitimate interest. This occurs, for example, when we process your data for the purposes of:

  • providing you with e-mail notifications related to a project you have supported,
  • analyzing your behavior and preferences as a User of the website,
  • reaching you with personalized information on Facebook, within Google services, and other platforms,
  • interacting with you if you have donated 1.5% of your tax,
  • improving the quality of service,
  • establishing, exercising, or defending against claims.

You may submit an objection, for example, via e-mail to the address provided in the Contact tab.

4.8. RIGHT TO LODGE A COMPLAINT WITH THE PRESIDENT OF THE UODO

If you believe that we are processing your personal data in breach of the GDPR, in particular by violating the rights granted to you under the GDPR, you may lodge a complaint with the President of the Personal Data Protection Office (UODO).

5. AUTOMATED DECISION-MAKING, PROFILING

For the purpose of providing information about Projects, we may commission the display of communications, for example, on social media, search engines, and other websites. For this purpose, we define criteria according to which this information is presented to users. This may include creating audiences based on their activity on the website and within third-party services to better tailor the displayed content.

Furthermore, we may conduct analytical and statistical activities to help us evaluate the effectiveness of our actions and adapt them to the needs of the recipients.

We do not make decisions based solely on automated processing, including profiling, which would produce legal effects concerning you or similarly significantly affect you.

The legal basis for processing data for the above purposes is:

  • Your consent (Art. 6(1)(a) GDPR) – regarding the processing of data related to the use of, including the installation of or access to, cookies or similar technologies, provided such consent has been granted;
  • Our legitimate interest (Art. 6(1)(f) GDPR) – consisting of providing information about projects, reaching appropriate audiences, and analyzing the effectiveness of activities undertaken.