Privacy & Cookie Policy | PUS3 Foundation

PRIVACY & COOKIE POLICY

1. Data Controller

The PUS3 Foundation (hereinafter: “the Foundation”), with its registered office in Warsaw (02-001), at Aleje Jerozolimskie 93, 2nd floor (KRS: 0001201917, NIP: 7011283991), is the controller of the personal data of donors, users and persons contacting the Foundation.

Contact the controller: info@pus3foundation.org

2. Data collection and purpose of processing

We collect two types of information:

Personal data: information provided voluntarily (e.g. first name, surname, email address, donation amount) when making a donation, contacting us or making a payment via crowdfunding platforms (e.g. Pomagam.pl or others).
Non-personal data: information collected automatically by our website (Wix Analytics), such as IP address, browser type, device information and session data (e.g. page load time, duration of visits).

We process this data for the following purposes:

Processing donations: to fulfil the donation agreement and comply with legal obligations (accounting, tax settlements), including issuing donation certificates for donors’ tax purposes.
Communication: responding to enquiries and proactively contacting donors regarding matters related to donations made (e.g. information on obtaining a tax certificate, thanking them for their support).
Building relationships with donors: informing donors about the progress of the activities covered by the fundraising campaigns to which they have contributed, about the settlement of fundraising campaigns, about other similar fundraising campaigns and initiatives of the Foundation, as well as about opportunities to get involved in activities promoting the Foundation’s mission. This contact is based on the controller’s legitimate interest (Article 6(1)(f) of the GDPR) in building and maintaining relationships with those who support the Foundation. Each such message includes the option to opt out of further correspondence.
Analytics: creating aggregated statistical data to improve our website and the effectiveness of the Foundation’s activities.
Security: defending against claims and ensuring the security of the platform.

3. Sources of personal data

Personal

We collect donors’ personal data directly from the data subjects themselves (e.g. via the contact form on the website), as well as through crowdfunding platforms (in particular Pomagam.pl), which make donors’ data available to campaign organisers in accordance with their own terms and conditions and privacy policies. In such cases, the Foundation acts as a separate controller of donors’ personal data.

4. Legal basis for processing

We process personal data on the following legal bases:

Article 6(1)(b) of the GDPR – processing necessary for the performance of a donation agreement (processing of donations, issuing tax certificates);
Article 6(1)(c) of the GDPR – processing necessary for compliance with a legal obligation to which the controller is subject (accounting and tax obligations);
Article 6(1)(f) of the GDPR – processing necessary for the purposes of the controller’s legitimate interests, i.e. building relationships with donors, providing information about the Foundation’s activities, analytics, security, and the establishment and defence of claims;
Article 6(1)(a) of the GDPR – consent of the data subject (analytical cookies, newsletter – if implemented).

5. Data storage and hosting (Wix.com)

Our website is hosted on the Wix.com platform. Wix.com provides us with an online platform enabling us to present the Foundation. Your data may be stored in Wix.com’s databases and applications. The data is stored on secure servers protected by a firewall.

6. Recipients of data

We ensure the security of your data. Apart from Wix.com (hosting), your data may be transferred to:

Payment providers: entities handling electronic payments (e.g. Stripe, PayPal) for the purpose of processing donations.
External professional service providers: accounting firms and entities providing services relating to the maintenance, development and technical support of the IT systems used by the Foundation.
Public authorities: only where required by law.
Crowdfunding platforms: websites such as Pomagam.pl may share donors’ data with the Foundation to the extent necessary to fulfil the donation agreement. In its dealings with donors whose data has been obtained via such platforms, the Foundation acts as a separate data controller.
IT tool providers: entities providing tools for donor relationship management (CRM), sending electronic correspondence, web analytics or other tools supporting the Foundation’s activities. These entities process data on behalf of the Foundation under a data processing agreement (Article 28 of the GDPR).

Your data is not transferred outside the European Economic Area, unless this is necessary due to the nature of the service (e.g. international payment operators or Wix data centres operating with appropriate safeguards).

7. Data retention period

Data relating to donations is retained for at least 5 years from the end of the tax year in which the donation was made. We retain correspondence data for the period necessary to conduct the correspondence and thereafter for evidential purposes.

We process data on the basis of a legitimate interest (Article 6(1)(f) of the GDPR) until a valid objection to the processing is raised or until the legitimate interest ceases to exist.

8. Your rights

You have the right to request access to your data, to have it rectified, to restrict its processing, to have it erased (where applicable) or to object to its processing. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).

In particular, if we process your data on the basis of a legitimate interest (e.g. to build relationships with donors), you have the right to object to such processing at any time. If you object, we will cease processing your data for this purpose, unless we demonstrate compelling legitimate grounds for the continued processing which override your interests.

To exercise your rights, please contact us at: info@pus3foundation.org.

9. Cookies

We use cookies for the following reasons:

Essential: to ensure the website functions correctly for users (e.g. security).
Analytical: to monitor and analyse the performance and effectiveness of the website.

You can manage your cookie preferences via the banner on our website or your browser settings.

10. Updates

We reserve the right to amend this privacy policy at any time. Please review it frequently. Changes take effect immediately upon publication on the website.