The following document contains information about the rules for processing your personal data and about cookie files used by our websites.
1. Glossary of terms:
GDPR: Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC.
Our websites: www.lakareacts.com, www.lakaperspectives.com
We: the Laka Foundation (EU VAT No. PL6381817438)
You: a user using the services and products implemented by the Laka Foundation
Contract: a commitment regarding services and products that we provide, in which we are the suppliers of these services or products and you have decided to use them
2. General information
1. The administrator of the transferred personal data is the Laka Foundation (EU VAT No. PL6381817438, KRS No. 0000639902, REGON No. 365542066, with the registered office at Łąka 43-241, 1 Grabowa St.). The registration files of the Laka Foundation are run by the District Court Katowice-Wschód (Commercial Department VIII of the National Court Register).
2. We process your data with your consent and in order to implement the service you have selected (including participation in Laka Competitions, ordering of the ‘Laka Perspectives’ book, newsletter delivery, or other).
3. The basis for the processing of your personal data is your declaration to participate in one of our programs (Article 6(1)(b) of the GDPR). Additional bases include legal obligation (for example, related to accountancy, Article 6(1)(c) of the GDPR); our legitimate interest in the processing of data to establish, assert, or defend any claims (Article 6(1)(f) of the RODO); and processing of data for analytical and statistical purposes (Article 6(1)(f) of the GDPR).
3. Data administrator
1. The Laka Foundation is the administrator of the data of persons using the services or participating in the programs made available on our websites. We process your data in order to perform the contract (first and last names, e-mail, and address for shipping of ordered products).
2. Personal data are processed
a) in accordance with the provisions on the protection of personal data,
b) in accordance with the implemented Privacy Policy (i.e., with this document),
c) in accordance with the Program Regulations (if available),
d) to the extent and for the purpose necessary to establish a contract with you for the implementation of the services you have chosen, or to amend or terminate this contract.
3. You always have the right to access data; rectify, delete, or limit processing; or file an objection or complaint to the supervisory authority. The removal of your personal data may occur as a result of withdrawal of consent or opposition to the processing of this data.
4. If you want to exercise your personal data rights, have questions related to personal data, or think that your personal data are being processed unlawfully, please contact us at hello@lakareacts.com. You can also submit a complaint to the supervisory body (President of the Office for Personal Data Protection: https://www.giodo.gov.pl/).
5. We reserve the right to process your data after termination of the Agreement or withdrawal of consent only to the extent required by national, EU, and international regulations and the right to disclose your personal data to entities authorized under the applicable law (e.g., tax authorities in Poland).
6. During implementation of the statutory activities, we cooperate with the following entities that process personal data for the purpose of conducting our services. These entities process the transferred personal data in accordance with the requirements of the GDPR, i.e., guaranteeing the implementation of appropriate technical and organizational measures to ensure protection of your personal data. These entities operate on the basis of contracts for the entrustment of personal data or authorizations: ● accounting office ● provider of hosting services ● entities providing goods delivery ● payment system providers ● software supplier needed to provide our services ● provider of a platform related to the mailing system ● relevant public authorities in the scope in which we are obliged to provide them with data (e.g., tax authorities in Poland).
7. We do not share your personal data with other entities than those whose cooperation is necessary to provide our services (the above categories of entities). Your personal data are processed only by us or by persons authorized by us, with whom we work closely. Personal data provided in the forms on our pages are treated as confidential and are not visible to unauthorized persons.
8. In order to increase the security of personal data, we have implemented organizational and technical measures such as pseudonymization, updating the software with which data processing is carried out, controlling access to the IT system, implementing secure communication encryption protocol (SSL), encrypting folders containing personal data allowing identification of people, encrypting transmission during transfer of data between persons authorized to process them, and using licensed and up-to-date antivirus software.
4. Cookies
1. Our websites use “cookies”. These are small text files sent by the web server and stored by the browser software. Their parameters allow only the web server that created them to read information they contain. Cookies therefore make it easier to use previously visited websites.
2. The information collected relates to general location (information about the country), referring parties (information about from which website you have accessed our pages), general information about the device (specifying whether the connection is via a computer, tablet, or telephone), and open pages and time spent on them. The information exchanged is anonymous (does not identify you) and is provided to us for statistical purposes by Google Analytics. Thanks to them, we can improve our websites and their readability.
3. At any time, you have the option to disable or restore the option of collecting cookies by changing the settings in your web browser. Cookie management instructions are available at http://www.allaboutcookies.org/ among others.
4. Our website uses the following cookies:
a) “necessary” cookies enabling the use of services available as part of the website, e.g., authentication cookies used for services that require authentication within the website;
b) cookies used to ensure security, e.g., to detect fraud in the field of authentication within the website;
c) “performance” cookies enabling the collection of information on the use of website pages.
Information
The basis of the following description is Article 13 of the GDPR (Information provided when collecting data from the data subject).
Who is the administrator of your personal data?
The administrator of the personal data you have provided is the Laka Foundation, with its registered office at Laka 43-241, at 1 Grabowa St, Poland (KRS: 0000639902, EU VAT No. PL6381817438), hereinafter: “Laka Foundation”.
How can you contact the Laka Foundation?
Write to us at hello@lakareacts.com, or send a traditional letter to Fundacja Laka, 43-241 Łąka, Grabowa St., Poland.
Where did we get your data from?
We received it from you during your registration for one of the services we offer (e.g., newsletter), during participation in our programs (e.g., Laka Competitions), or during the purchase of our products (e.g., the ‘Laka Perspectives’ book).
Why are we processing your personal data?
It is necessary to perform the contract concluded with you when providing the services and products you have purchased, including to handle your requests (e.g., questions related to Laka’s programs) and to contact you for purposes related to the services we provide. In addition, we are obliged by the law to process your data for tax and accounting purposes (if you have used paid services or products).
What is the legal basis for the processing of personal data?
The processing of your personal data is necessary for the performance of the contract (according to Article 6(1)(b) of the GDPR), whose party you are (e.g., as a registered participant in the Laka Competition), or processing is necessary for legally legitimate interests carried out by us (in accordance with Article 6(1)(f) of the GDPR, e.g., to contact you in order to present additional opportunities to promote your projects from the Laka Competition).
Is it necessary to provide your personal data to us?
Within Laka’s services, we ask you to provide only the data that are necessary for us to be able to perform the contract with you, i.e., you are required to provide the services you want to use (e.g., e-mail address to contact you about your participation in selected programs; e-mail address for delivery of the newsletter, if you have expressed the desire to receive such; address for shipping products you have ordered; for prize winners, bank account details to enable the transfer of prizes; etc.).
What are your rights related to the data processed by us?
We ensure that all your rights arising from the GDPR are met, i.e., the right to access data, rectify, delete, or limit processing; the right to object; and the right to submit a complaint to the supervisory body. If you decide that your data are being processed unlawfully, please contact us. You can also submit a complaint to the supervisory body (to the President of the Office for Personal Data Protection: https://www.giodo.gov.pl/). If you want to use your personal data rights or have any questions about personal data and how to process them, please contact us at hello@lakareacts.com.
Who do we share your personal information with?
In the course of implementation of statutory activities, we cooperate with the following entities, whose activities are necessary for the implementation of our services. These entities operate on the basis of contracts for the entrustment of personal data or authorizations and in accordance with the requirements of the GDPR: ● accounting office ● provider of hosting services ● entities supplying goods ● payment system providers ● software provider needed to provide our services ● mailing system platform provider ● relevant public authorities, to the extent that we are obliged to provide them with data. We do not provide your data for marketing purposes, and we do not share it with third parties other than those that are associated with the direct implementation of our services.
How long do we keep your personal data?
We will store personal data provided by you until you withdraw your consent to their processing or complete the implementation of the statutory activities of the Laka Foundation. Otherwise (in case of your participation in projects with registration fees) and under the provisions of the Act of August 29, 1997, Tax Ordinance (Article 86 § 1), we will store such data for five years counting from the end of the calendar year in which the payment date of the tax on offer has expired.
Do we transfer your data to third countries or international organizations?
In order to implement our services, we cooperate with entities that process personal data (e.g., with hosting service providers, entities carrying out international deliveries of our products, etc.; we list them in the question “Who do we share your personal data with?”). These entities operate under contracts regarding the entrusting of personal data or authorizations and in accordance with the requirements of the GDPR and providing adequate security for these data (in accordance with Article 46(1) of the GDPR).
Do we process your personal data automatically in a way that affects your rights?
We do not process your personal data in an automated manner that would affect your rights (including the profiling of data referred to in Article 22(1) and (4) of the GDPR).