Data Protection and Privacy Policy

The website of the Fotografistka Foundation collects and processes personal data. This document sets out the principles and purposes of such processing and explains how we respect your rights and how you may exercise them.

Definitions:

Fotografistka Foundation / Foundation / We – with its registered office in Bydgoszcz, ul. Pomorska 68a/1 (85-051Bydgoszcz), entered into the Register of Associations, other social and professional organisations, foundations and independent public health care institutions under KRS number 0000448871, NIP 967 195 64 15, REGON 341386107.

Personal Data – all information relating to an identified or identifiable natural person, identifiable directly or indirectly in particular by reference to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of thatperson, including device IP address, location data, online identifier and information collected via cookies or similar technologies.

Foundation Websites –websites owned by the Foundation and covered by this Privacy Policy, including:

as well as the Fotografistka Foundation’s social media profiles used by the Foundation, including:

User / You – a natural person visiting the Foundation Websites or using one or more services or functionalities availableon the Foundation Websites.

GDPR – Regulation (EU) 2016/679 of theEuropean Parliament and of the Council of 27 April 2016 on the protection ofnatural persons with regard to the processing of personal data and on the freemovement of such data, and repealing Directive 95/46/EC.

Policy – this Privacy Policy, applicable to all websites owned by the Foundation.

A. PURPOSES AND LEGALBASES FOR PROCESSING PERSONAL DATA

1. Contracts with the Foundation

Your Personal Data, in particular your first name, last name, residential address, user address, email address, telephone number, and PESEL number, are processed for the purpose of concluding and performing a contract with the Foundation and for the establishment, exercise or defence of claims arising from such contract.

2. Use of the Websites

If you use the Foundation Websites as a User, the Foundation processes your Personal Data. This includes IP address or other identifiers and information collected via cookies orsimilar technologies.

Your activity on theFoundation Websites, including your Personal Data, is recorded in system logs. The collected data is processed primarily for purposes related to service provision, including:

  • analytical andstatistical purposes – to continuously improve the quality of services providedwithin the Foundation Websites and adapt their functionalities to your needs.The legal basis is the legitimate interest of the Foundation in analysing user activity;
  • detecting abuse, identifying and preventing threats to the stability andproper functioning of the Foundation Websites.

3. Newsletter

Persons who provide their email address in order to receive information about the Foundation’s activities are provided with a newsletter service.

Providing data is necessary to receive the newsletter; failure to provide it results in the inability to send it.

Personal Data is processed:

  • for the purpose ofproviding the newsletter service – the legal basis is consent;
  • for analytical and statistical purposes – the legal basis is the legitimate interest of the Foundation in analysing your activity (e.g. clicking links in emails) to improve the content and format of the newsletter.

4. Legal Obligations and Public Interest

Personal Data is processed to comply with legal obligations imposed on the Foundation and for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes.

The legal basis for processing is Article 6 (1) (a), (b), (c) and (f) GDPR. We are entitled to process your data to pursue our legitimate interests, including collecting, inventorying, cataloguing, scientific processing and making collections available.

B. COOKIES

1. Cookies are small text files installed on your device when you browse the Foundation Websites. They typically contain the domain name, storage duration, and a unique identifier.

Cookies used by the Foundation Websites are used solely for administrative purposes and for collecting anonymous statistical data on website usage (e.g. IP address, browser configuration, clicked links, duration of visits)

2. Third-party services we link to may also use cookies, including for login and personalised advertising purposes. These include YouTube, Facebook, Instagram and Google Analytics.

These services may use cookies to collect information and generate reports on website usage without identifying individual users.

3. Users may limit or disable cookies via browser settings. Instructions are available for:

Disabling cookies may limitsome functionalities of the Foundation Websites.

C. RIGHTS OF DATA SUBJECTS

You have the right to:

1. Access your Personal Data and request rectification, erasure or restriction of processing.

2. Object to further processing, and where processing is based on consent – withdraw that consent at any time. Withdrawal does not affect prior lawful processing.

D. PERSONAL DATA SECURITY

4. Lodge a complaint with the President of the Personal Data Protection Office (PUODO) if you believe your data is processed unlawfully.

3. Data portability.

Access to your PersonalData is granted only to authorised persons and only to the extent necessary fortheir duties.

We ensure that all operations on Personal Data are recorded and carried out only by authorised personnel and collaborators.

E. TRANSFER OF PERSONAL DATA

In accordance with applicable law, your data may be transferred to entities processing it on our behalf (e.g. service providers) and to entities authorised under the law (e.g. courts or law enforcement authorities).

Your Personal Data will not be transferred to third countries.

F. DATA RETENTION PERIOD

1. Personal Data related to website usage is stored for the duration of cookies, user agent data and     browsing activity. Google Analytics retains user and event data for 26 months.

2. For contracts – for the duration of the contractual relationship and thereafter for the period     necessary to pursue or defend claims and comply with legal obligations.

3. Where processing is based on consent – until the consent is withdrawn.

G. CONTACT DETAILS OF THE CONTROLLER

The controller of your Personal Data is the Fotografistka Foundation.

You may contact us regarding all matters related to Personal Data:

Pomorska 68a/1
85-051 Bydgoszcz
Tel. +48 508 732 871
e-mail: fundacja@fotografistka.pl

H. CHANGES TO THE POLICY

The protection of your Personal Data is a dynamic process subject to continuous updates.

This Policy is regularly reviewed and updated. Any changes will be communicated via the Foundation Websites or by email.

I. TERMINATION OF DATA PROCESSING (OFFBOARDING)

1. The Foundation applies a data processing termination (offboarding) procedure to ensure compliant deletion, restriction or anonymisation of data once the legal basis for processing ceases.

2. Termination occurs in particular when:

  • a contract is terminated or expires,
  • consent is withdrawn,
  • a valid objection is raised,
  • the purpose of processing ceases,
  • the retention period expires.

3. As part of the offboarding procedure, the Foundation:

  • deletes or anonymises Personal Data,
  • restricts access to authorised persons only,
  • removes data from IT systems, media and backups where technically feasible,
  • documents the deletion/anonymisation process,
  • ensures processors also delete the data.

4. Where further retention is required by law or for legal claims, processing is restricted to those     purposes.

5. Data used for statistical, archival, scientific or historical purposes may be further processed only in anonymised form.

6. After termination of cooperation or services, user access to services requiring Personal Data     processing is restricted or removed.