Privacy Policy
Introduction
This document – issued under the provisions of Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016, on the protection of natural persons in connection with the processing of personal data and on the free flow of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (Text with EEA relevance) – hereinafter referred to as the RODO or the General Regulation, and the Act of May 10, 2018, on the protection of personal data (Journal of Laws item 1000, as amended), hereinafter referred to as the Act – is referred to in common language as the Privacy Policy.
In order to carry out tasks carried out in the public interest, among others, by submitting petitions to the relevant authorities and for the protection of the fundamental rights and freedoms of all natural and legal persons using the podpisuje.to , in particular, their right to
protection of personal data, the rules for the processing of personal data and their use.
The types of personal data collected and processed result from the way in which the service is used – and thus provides certain information (personal data) for the Personal Data Controller. At each stage, personal data are subject to the protection required by law and the data subject has a number of rights related to the processing of his/her data, about which this document is about.
Who collects, collects and processes personal data:
The administrator of the personal data is the Administrator of the podpisuje.to website, i.e. the Centaurus Foundation – International Organization for Animals and Ecology with headquarters in Wrocław, ul. Wałbrzyska nr 6-8, 52-314 Wrocław, entered in the register of associations, other social and professional organisations, foundations and independent public health care institutions kept in the National Court Register by the District Court in Wroclaw, VI Economic Department of the National Court Register under the KRS number 0000257551, Regon 020319750, NIP 8982093147
Contact the Personal Data Administrator:
1. e-mail kontakt@centaurus.org.pl
2. mailing address
Centaurus Foundation – International Organization for Animals and Ecology with.
based in Wrocław, ul. Wałbrzyska nr 6-8, 52-314 Wrocław
Contact the personal data inspector:
1. e-mail kancelaria@u-ska.pl
2. mailing address – Kancelaria Adwokacka Uszyński S.K.A., ul. Broniewskiego 48/127, 01-771 Warsaw.
What data is processed:
All information and data are provided by the signers voluntarily during the using the service, e.g., when signing petitions, one fills in the appropriate fields of the form and makes an acceptance of this form. The service administrator sends it to the email address provided
a message containing a link, the acceptance of which is tantamount to giving consent
for the processing of personal data under the terms of the Privacy Policy and Personal Data Protection Policy.
If the Signer signs the petition processed are:
1. first and last name.
2. email address.
3. telephone number (optional).
4. mailing address (optional).
– depending on the method of contact.
We process data from cookies stored on your device.
Legal basis for the processing of personal data and their use.
1. regulation of the European Parliament and of the Council (EU) 2016/679 of April 27 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (Text with EEA-relevant),
2. the Act of May 10, 2018, on the protection of personal data (Journal of Laws, item 1000,
as amended),
3. the Act of July 11, 2014, on petitions (Journal of Laws of 2018, item 870, as amended).
Legality of processing
Article 6 RODO
(1) Processing is lawful only if and to the extent that – at least one of the following conditions is met:
(a) the data subject has consented to the processing of his or her personal data for one or more specified purposes;
(b) the processing is necessary for the realization of a contract to which the data subject is a party, data subject, or to take action at the request of the data subject to which the data subject is a party, before entering into the contract;
(c) processing is necessary for compliance with a legal obligation incumbent on the controller;
(d) processing is necessary to protect the vital interests of the data subject or another natural person;
e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of public authority entrusted to the controller;
(f) processing is necessary for purposes arising from the legitimate interests pursued by the controller or by a third party, except where these are overridden by the interests or these interests are the interests or fundamental rights and freedoms of the person the data subject, requiring protection of personal data, in particular when the data subject is a child.
Subparagraph (f) of the first paragraph shall not apply to processing carried out by public authorities in the performance of their tasks.
Conditions for consent
Article 7 RODO
(1) If processing is based on consent, the controller must be able to demonstrate that the data subject has consented to the processing of their personal data.
(2) If the data subject gives consent in a written statement that also concerns other matters, the request for consent must be presented in a way to clearly distinguish it from the other issues, in an understandable and easily accessible form, in clear and simple language. The part of such a statement of the data subject in violation of this regulation is not shall not be binding.
(3) The data subject shall have the right to withdraw consent at any time. The withdrawal of consent shall not affect the lawfulness of the processing that was carried out on the basis of consent before its withdrawal. The data subject shall be informed of this before he or she gives consent. The withdrawal of consent must be as easy as giving it.
(4) In assessing whether consent has been given voluntarily, as much as possible
consideration shall be given to whether, among other things, consent to data processing is not dependent on the performance of a contract, including the provision of a service, if the processing of personal data is not necessary for the performance of this contract.
The conditions for the child’s consent in the case of information society services information
Article 8 RODO
(1) Where Article 6(1)(a) applies, in the case of social services information offered directly to a child, it is lawful to process of personal data of a child who has reached the age of 16. If the child has not reached the age of 16, such processing is lawful only in cases where the consent has been given or approved by the person exercising parental authority or custody of the child, and only to the extent of the consent given consent.
EU member states may provide in their law for a lower age limit, which must be at least 13 years old.
(2) In such cases, the administrator, taking into account available technology,
shall make reasonable efforts to verify that the person exercising parental authority or custody of the child has consented to or approved it.
(3) Paragraph (1) shall not affect general provisions of law, and contracts of member states, such as provisions on the validity, conclusion or effect of an agreement with respect to a child.
Processing of special categories of personal data
Article 9 RODO
(1) It shall be prohibited to process personal data revealing a person’s origin racial or ethnic origin, political opinions, religious or worldview, trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person or data concerning health, sexuality or sexual orientation of that person.
(2) Paragraph (1) shall not apply if one of the following conditions is met:
a. the data subject has expressly consented to the processing of such data
personal data for one or more specific purposes, unless the law of the Union or Member State law provides that the data subject may not waive the prohibition referred to in paragraph 1;
b. the processing is necessary for the fulfilment of obligations and the exercise of specific rights by the controller or the data subject, in the field of labour law, social security and social protection, insofar as permitted by Union law or the law of a member state, or a collective agreement under the law of a Member State providing adequate safeguards for fundamental rights and interests of the data subject;
c. the processing is necessary to protect the vital interests of the data subject
data subject or another natural person, and the data subject is physically or legally incapable of giving consent;
d. the processing is carried out within the framework of authorized activities conducted with appropriate safeguards by the foundation, association or other non-profit entity with political purposes, philosophical, religious or trade union purposes, provided that the processing concerns only members or former members of that entity of the entity or persons in regular contact with it in connection with its
purposes and that the personal data are not disclosed outside that entity without the consent of the data subjects;
e. the processing concerns personal data clearly made public by the data subject;
f. the processing is necessary for the establishment, investigation or defence of claims or in the administration of justice by the courts;
g. the processing is necessary for reasons of substantial public interest
public interest, on the basis of Union law or the law of a Member State, which are proportionate to the stated purpose, do not prejudice the essence of the right to data protection and provide for adequate and specific measures to protect the fundamental rights and interests of the data subject;
h. the processing is necessary for the purposes of preventive health care or
occupational medicine, for the assessment of the employee’s fitness for work, medical diagnosis medical treatment, the provision of health care or social security treatment or management of health care or social security systems and services social security on the basis of Union or Member State law Member State, or in accordance with a contract with a health care worker and subject to subject to the conditions and safeguards referred to in paragraph 3;
i. the processing is necessary for reasons of public interest in the field of public health, such as protection against serious cross-border health threats or to ensure high standards of quality and safety of health care and medicinal products or medical devices, on the basis of Union law or the law of a Member State, which provide for appropriate, specific measures to protect the rights and freedoms of data subjects, in particular, professional secrecy;
j. the processing is necessary for archival purposes in the public interest
public interest, for scientific or historical research purposes, or for statistics in accordance with Article 89(1), on the basis of Union law or the law of a Member State, which are proportionate to the designated purpose, do not violate the essence of the right to data protection and provide for appropriate, concrete measures to protect the fundamental rights and interests of the data subject.
Rights of the signer – what can be requested:
Information is provided when data are collected from the data subject
If the personal data of the data subject is collected from the data subject, the controller shall
provide him/her with all of the following information when obtaining personal data:
1. his or her identity and contact information and, where applicable, the identity and
contact information of its representative:
Centaurus Foundation – International Organization for Animals and Ecology
based in Wrocław, Wałbrzyska Street No. 6-8, 52-314 Wrocław, entered in the register of
associations, other social and professional organizations, foundations and independent public health care facilities kept in the National Court Register by the District Court in Wroclaw, VI Economic Division of the National Court Register under number KRS 0000257551, Regon 020319750, NIP 8982093147,
2. where applicable, the contact details of the Data Protection Officer:
e-mail kancelaria@u-ska.pl
correspondence address – Kancelaria Adwokacka Uszyński S.K.A., Broniewskiego St.
48/127, 01-771 Warsaw.
3. purposes of personal data processing, and the legal basis for processing:
– on the basis of Article 6(1)(a) of RODO, i.e. on the basis of expressed consent to the processing of personal data (e.g. acceptance of legal acts),
– on the basis of Article 6(1)(b) RODO i.e. when the processing is necessary for the purpose of carrying out a contract to which the data subject is a party (e.g. contracts concluded with the Service Administrator),
– on the basis of Article 6(1)(c) RODO i.e. when processing is necessary for the fulfilment of a legal obligation (e.g. obligation of public authorities),
– on the basis of Article 6(1)(e) RODO i.e. when processing is necessary for the performance of a task carried out in the public interest (e.g. informing about the statutory goals of the
Service Administrator, informing about collections, appeals for help),
– on the basis of Article 6(1)(f) RODO i.e. when processing is necessary for the purposes of
resulting from the legitimate interests pursued by the Administrator,
4. information about recipients of personal data or categories of recipients, if exist:
Recipients of personal data – apart from the Administrator – will be the only entitled to obtain personal data on the basis of the law, in particular entities to which petitions will be addressed.
5. the period for which personal data will be stored, and when this is not possible,
criteria for determining this period:
– processing on the basis of Article 6(1)(a) of the RODO – until withdrawal of consent,
– processing on the basis of Article 6(1)(b) of RODO – for a period of 6 years /or based on the legitimate interest pursued by the administrator for a longer period,
– processing on the basis of Article 6(1)(c) RODO – for a period of 50 years,
– processing on the basis of Article 6(1)(e) RODO – for a period of 5 years or until the withdrawal of consent,
– processing on the basis of Article 6(1)(f) RODO – for a period of 5 years or until the withdrawal of consent,
6. information on automated decision-making, including profiling, data will be processed by automated means of profiling.
Signer’s rights – what can be requested:
(1) The signer has the right to request from the Service Administrator access to personal data concerning the data subject.
(2) The signer has the right to demand that the Service Administrator rectify
of his/her personal data processed by the Service Administrator.
The data subject has the right to demand from the Service Administrator the immediate rectification of personal data pertaining to him/her that is incorrect. Taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including by providing an additional statement.
(3) The signer has the right to request the Service Administrator to delete
processed by the Service Administrator of his/her personal data. The data subject has the right to demand from the Administrator the immediate deletion of the personal data pertaining to him or her, and the administrator is obliged to remove without undue delay the
personal data if one of the following circumstances occurs:
(a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
(b) the data subject has withdrawn the consent on which the processing in accordance with Article 6(1)(a) or Article 9(2)(a), and there is no other legal basis for the processing;
(c) the data subject objects under Article 21(1) to the processing and there are no overriding legitimate grounds for processing or the data subject objects under Art. 21(2) against the processing;
(d) the personal data have been processed unlawfully;
(e) the personal data must be erased in order to comply with a legal obligation under Union law or the law of a Member State to which the controller is subject;
(f) the personal data were collected in connection with the offering of services information society services referred to in Article 8 (1).
(4) The signer shall have the right to request the Service Administrator to restrict the processing of his/her personal data processed by the Service Administrator personal data,
The Data Subject has the right to request the Administrator to restrict processing in the following cases:
(a) the data subject disputes the accuracy of the personal data -. for a period that allows the controller to verify the correctness of such data;
(b) the processing is unlawful, and the data subject, objects to the erasure of the personal data, requesting instead the restriction of their use;
(c) the controller no longer needs the personal data for the purposes of the processing, but they are needed by the data subject to establish, assert or defend claims;
(d) the data subject has objected under Article 21(1) to the processing – until it is determined whether the legitimate grounds on the part of the controller override the grounds of the data subject’s objection, the data subject.
(5) The signer has the right to object to the processing of his/her data personal data.
The data subject has the right to object at any time – for reasons related to his/her particular situation – against the processing of personal data concerning him/her based on Article 6 (1) (e) or (f), including profiling on the basis of these provisions. regulations. The controller shall no longer be allowed to process such personal data, unless it demonstrates the existence of valid legitimate grounds for the processing, overriding the interests, rights and freedoms of the data subject, or grounds for establishing, investigating or defending claims.
