Dear user!

We care about your privacy and want you to feel safe while using our Services. Therefore, below we present the most important information about the principles of our processing of your personal data and cookies, which are used by our Portal.

Your data are processed in accordance with the provisions of:

Personal Data Protection Act;
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC ("GDPR");
The Act on Provision of Services by Electronic Means.
 

PERSONAL DATA CONTROLLER
The administrator of your personal data ("Administrator"), i.e. the entity responsible for ensuring security of your personal data is Fundacja Golden Ratio with its registered seat in Poznań, ul. Juliusza Słowackiego 55/1, 60-521 Poznań, entered into the register of associations and other social and professional organisations, foundations and independent public health care centres and the register of entrepreneurs kept by the District Court Poznań - Nowe Miasto and Wilda in Poznań, VIII Economic Division of the National Court Register under KRS number 0000860411, NIP 7812012899, REGON 387054020.

 

PERSONAL DATA AND PRIVACY
If you send us your application for the Training, we ask you to provide us with

name and surname - necessary for us to register the participant;
e-mail address - necessary for us to contact you regarding the Training;
telephone number - necessary to contact us about the Training;
In the event that it comes to conducting the Training, if you give your consent we also process:

the image captured in the photographs taken during the Training - for the Administrator's marketing and promotional and archival purposes.
 

The legal basis for the processing of the personal data provided to us is:

in the case of data specified in points. 1 - 3 above - Article 6(1)(b) GDPR, i.e. the processing is necessary for the performance of a contract to which the data subject is a party or in order to take action at the request of the data subject. The data provided are processed solely for the purpose of conducting the Training and are not used in any other way, nor are they transferred to other entities, including third countries or international organisations.
in the case of the image - Article 6(1)(a) and Article 9(1)(a) GDPR, i.e. the consent given by the data subject. The data are processed for the Administrator's marketing and promotional and archival purposes.
 

Providing the data is voluntary, but in some cases it may be necessary to conclude a contract.

 

Effect of not providing the data:

Depending on the purpose for which the data are provided:

inability to use the Services
No possibility to receive information about promotions or special offers offered on the Portal.
 

Possibility of withdrawing consent: at any time.

 

The processing of data remains lawful until you withdraw your consent.

 

DATA collected automatically (when you enter the website)
 

A: (server)

The IT system used by the website www.sklep.goldenratio.org.pl automatically collects in logs data related to the device you are using. This data is collected for statistical purposes only and concerns: IP address, page download address or exit address and is used for diagnostic purposes only.

This data is never combined with the data provided as mentioned in Part II and is only material for statistical analysis and system error correction mechanisms.

 

B: (cookies)

The website uses the technology of "cookies", i.e. text files placed on your device, for technical purposes of serving the session.

If you do not agree to the placement of cookies on your device, you can block their placement by appropriately configuring your web browser. Information on how to do this can be found in the help files of your web browser. Unfortunately, if you block cookies from the website, we cannot guarantee its correct operation.

If you agree to place cookies on your device, but would like to delete them after visiting the site, you can do so without any risk and information on how to do so can be found in the help files of your web browser.

C: Google Analytics (cookies)

Google Analytics uses "cookie" technology, which is a text file placed on your device, to help the Administrator analyse the source of traffic and how visitors use the site.

Google collects the data obtained by placing cookies on your device and uses this information to create reports and provide other services related to the traffic and use of the Internet.

Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.

This data is never combined with the data provided in Part II and only serves as material for statistical analysis and system error correction mechanisms.

If you do not agree to cookies being placed on your device, you can block their placement by configuring your web browser accordingly. Information on how to do this can be found in the help files of your web browser. Unfortunately, if you block Google cookies, we cannot guarantee the correct operation of the website.

If you agree to Google cookies being placed on your device but would like them to be deleted after visiting the website, you can do this without any risk and information on how to do this can be found in the help files of your web browser.

 

D: Google AdWords (cookies)

Google AdWords uses "cookie" technology, which is a text file placed on your device, to help the website evaluate the accuracy and effectiveness of its advertising activities using the AdWords network.

Google collects the data obtained by placing cookies on your device and uses this information to create reports and to provide other services related to the traffic and use of the Internet.

Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.

This data is never combined with the data provided in Part II and only serves as material for statistical analysis and system error correction mechanisms.

If you do not agree to cookies being placed on your device, you can block their placement by configuring your web browser accordingly. Information on how to do this can be found in the help files of your web browser. Unfortunately, if you block Google cookies, we cannot guarantee the correct operation of the website.

If you agree to Google cookies being placed on your device but would like them to be deleted after visiting the website, you can do this without any risk and information on how to do this can be found in the help files of your internet browser.

 

EXTERNAL SERVICES / DATA RECIPIENTS
The Administrator selects its business partners very carefully and equally carefully verifies links to other websites and privacy policies posted on the website. However, the Administrator is not responsible for the standard and privacy protection policy applied by the owners, operators or administrators of these websites. We therefore recommend that you review each of our partners for yourself and decide for yourself whether you wish to entrust them with your personal information.

Your personal data is also shared with the service providers we use to conduct our business. These service providers are processors, i.e. they process the personal data entrusted to them by us and in this respect are subject to our instructions as to the purposes and means of processing. Below is a list of these entities. These include, among others:

payment provider
persons cooperating with us on the basis of civil law contracts, supporting our current activities
hosting provider
accounting office
entity facilitating optimization of the Portal
entity providing marketing services
social portals
Our providers are based mainly in Poland and in other countries of the European Economic Area. Our suppliers guarantee a high level of personal data protection. We have signed appropriate contracts with our suppliers for the entrustment of the processing of your personal data.

In specific situations where we are required by law to disclose collected data to authorised state authorities, we will disclose such data. Except in these situations, your personal data will be disclosed only to the extent, purpose and entities listed in this Privacy Policy.

PROFILING
As part of the Portal, we may automatically tailor certain content to your needs, i.e. perform profiling, using the personal data you have provided.

Remember that you can revoke your consent at any time. Data processing remains lawful until you withdraw your consent.

 

PERIOD OF PROCESSING
We will only process your data for as long as we have a legal basis to do so, which is until:

we cease to be under a legal obligation requiring us to process your data;
the possibility of asserting claims related to the contract concluded by the Portal by the Parties ceases;
you withdraw your consent to the processing of your data, if it was the basis for such processing;
your objection to the processing of your personal data will be accepted - if the basis of the processing of your data was a legitimate interest of the Administrator or if the data were processed for direct marketing purposes, including profiling
whichever is applicable in the case and which will occur at the latest.

 

DATA SECURITY
When processing your personal data, we apply organisational and technical measures in accordance with the relevant legislation, including the use of SSL certificate connection encryption.

 

YOUR RIGHTS
 

A: Right to withdraw consent

You have the right to withdraw any consent you have given. The withdrawal of consent has effect from the moment of withdrawal. The withdrawal of consent does not affect the processing that we lawfully carried out before the withdrawal of consent. The withdrawal of consent does not entail any negative consequences for you. However, it may prevent you from continuing to use the Services or functionalities that we can lawfully provide only with your consent.

Legal basis: article 7(3) of the GDPR

 

B: Right to object

You have the right to object to the processing of your personal data at any time. If your objection proves to be valid and we have no other legal basis for processing your personal data, we will delete your data against the use of which you have objected.

Legal basis: article 21 GDPR

 

C: Right to erasure ("right to be forgotten")

You have the right to request the erasure of all or some of the personal data concerning you. You have the right to request erasure of personal data if:

you have withdrawn specific consent, to the extent that the personal data was processed based on your consent;
your personal data is no longer necessary for the purposes for which it was collected or for which it was processed;
you have objected to the use of your data for marketing purposes;
your personal data is being processed unlawfully.
Despite your request to erase your personal data, due to your objection or withdrawal of consent, we may retain certain personal data to the extent necessary for the establishment, investigation or defence of claims.

Legal basis: article 17 GDPR

 

D: Right to restrict data processing

You have the right to request the restriction of the processing of your personal data. If you make such a request, we will prevent you from using certain functionalities or services, the use of which will involve the processing of the data covered by the request, until the request is considered.

You have the right to request that we restrict the use of your personal data in the following cases:

when you question the accuracy of your personal data;
when the processing of your data is unlawful;
when your personal data is no longer necessary for the purposes for which we collected or used it, but is needed by you to establish, assert or defend your claims;
where you have objected to the use of your data, in which case the restriction is for the period necessary to consider whether, in the light of your particular situation, the protection of your interests, rights and freedoms outweighs the interests we pursue by processing your personal data.
Legal basis: Article 18 GDPR

PROFILING
As part of the Portal, we may automatically tailor certain content to your needs, i.e. perform profiling, using the personal data you have provided.

Remember that you can revoke your consent at any time. Data processing remains lawful until you withdraw your consent.

 

PERIOD OF PROCESSING
We will only process your data for as long as we have a legal basis to do so, which is until:

we cease to be under a legal obligation requiring us to process your data;
the possibility of asserting claims related to the contract concluded by the Portal by the Parties ceases;
you withdraw your consent to the processing of your data, if it was the basis for such processing;
your objection to the processing of your personal data will be accepted - if the basis of the processing of your data was a legitimate interest of the Administrator or if the data were processed for direct marketing purposes, including profiling
whichever is applicable in the case and which will occur at the latest.

 

DATA SECURITY
When processing your personal data, we apply organisational and technical measures in accordance with the relevant legislation, including the use of SSL certificate connection encryption.

 

YOUR RIGHTS
 

A: Right to withdraw consent

You have the right to withdraw any consent you have given. The withdrawal of consent has effect from the moment of withdrawal. The withdrawal of consent does not affect the processing that we lawfully carried out before the withdrawal of consent. The withdrawal of consent does not entail any negative consequences for you. However, it may prevent you from continuing to use the Services or functionalities that we can lawfully provide only with your consent.

Legal basis: article 7(3) of the GDPR

 

B: Right to object

You have the right to object to the processing of your personal data at any time. If your objection proves to be valid and we have no other legal basis for processing your personal data, we will delete your data against the use of which you have objected.

Legal basis: article 21 GDPR

 

C: Right to erasure ("right to be forgotten")

You have the right to request the erasure of all or some of the personal data concerning you. You have the right to request erasure of personal data if:

you have withdrawn specific consent, to the extent that the personal data was processed based on your consent;
your personal data is no longer necessary for the purposes for which it was collected or for which it was processed;
you have objected to the use of your data for marketing purposes;
your personal data is being processed unlawfully.
Despite your request to erase your personal data, due to your objection or withdrawal of consent, we may retain certain personal data to the extent necessary for the establishment, investigation or defence of claims.

Legal basis: article 17 GDPR

 

D: Right to restrict data processing

You have the right to request the restriction of the processing of your personal data. If you make such a request, we will prevent you from using certain functionalities or services, the use of which will involve the processing of the data covered by the request, until the request is considered.

You have the right to request that we restrict the use of your personal data in the following cases:

when you question the accuracy of your personal data;
when the processing of your data is unlawful;
when your personal data is no longer necessary for the purposes for which we collected or used it, but is needed by you to establish, assert or defend your claims;
where you have objected to the use of your data, in which case the restriction is for the period necessary to consider whether, in the light of your particular situation, the protection of your interests, rights and freedoms outweighs the interests we pursue by processing your personal data.
Legal basis: Article 18 GDPR

E: Right of access

You have the right to obtain confirmation from us as to whether we are processing your personal data and, if this is the case, you have the right:

gain access to your personal data;
obtain information about the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients of that data, the intended period of retention of your data or the criteria for determining that period, your rights under the GDPR and your right to lodge a complaint with a supervisory authority, the source of that data, automated decision-making, including profiling, and the safeguards applied in relation to the transfer of that data outside the European Union;
obtain a copy of your personal data.
Legal basis: Article 15 GDPR

F: Right to rectification

You have the right to rectify and complete the personal data you have provided. You can do this by requesting us to rectify this data (if it is incorrect) and to complete it (if it is incomplete).

Legal basis: article 16 of the GDPR

 

G: Right to data portability

You have the right to receive your personal data that you have provided to us and then send it to another personal data controller of your choice. You also have the right to request that we send your personal data directly to such other controller, insofar as this is technically possible.

Legal basis: article 20 GDPR

 

If, in exercise of the above-mentioned rights, you make a request to us, we shall either comply with the request or refuse to comply with it immediately, but no later than one month after receipt. However, if - due to the complexity of the request or the number of requests - we are unable to comply with your request within one month, we will comply within a further two months by informing you in advance of the intended extension. You may lodge complaints, queries and requests with us regarding the processing of your personal data and the exercise of your rights.

If you believe that your data protection rights or other rights granted to you under the DPA have been infringed, you have the right to lodge a complaint with the supervisory authority, the Data Protection Authority.

 

CHANGE OF PRIVACY POLICY
We reserve the right to change this privacy policy if required by applicable law, if the technological conditions of the website change, or if the change introduces a standard higher than the minimum required by law.

 

CONTACT
If you have any questions or concerns about this Privacy Policy and the security of your personal data, wish to update or delete your personal data, or exercise any other rights set out in Section VIII above, we encourage you to contact us by e-mail at: info@goldenratio.org.pl

In the above matters, you may also correspond with us at the following address: Fundacja Golden Ratio, ul. Juliusza Słowackiego 55/1, 60-521 Poznań.