Kahibalo Foundation Privacy Policy

Here you will find information on the processing of your personal data, who is their administrator and what are your rights related to the use of data.

I. General information

  1. The Privacy Policy applies to the Users of the website www.kahibalo.com, whose sole owner is the Kahibalo Foundation (hereinafter referred to as the Foundation) with its registered office in Poznań at ul. Kassyusza 5/3, 60-549 Poznań, KRS number: 0001005750. Every person who uses the website in any way is a User.
  2. The Foundation strives to ensure that the Users of the website protect their personal data and privacy in accordance with the principles set out, among others, in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as the GDPR), the Personal Data Protection Act of May 10, 2018 and in special acts (lex specialis) in the national order.
  3. The administrator of Users’ personal data is Fundacja Kahibalo with its registered office in Poznań at ul. Kassyusza 5/3, 60-549 Poznań, KRS number: 0001005750. You can contact the Foundation by e-mail at the address fundacja@kahibalo.com

II. Scope and purpose of data collection

  1. The website limits the collection and use of information about Users to the minimum necessary. Data is collected actively (data that the User provides voluntarily) or passively (data automatically saved by the server).
  2. The User’s personal data is processed for the purposes of:
  • accepting and posting a donation made by the User in connection with the collection run by the Kahibalo Foundation, possibly providing the User with e-mail notifications regarding the collection he supported, and issuing confirmation of the donation for tax purposes. In this case, the scope of the processed data includes: name, surname, e-mail address, telephone number, bank account number, donation amount. Providing data is contractual, however, failure to provide them will result in the inability to conclude the contract. We process the User’s personal data in order to accept and record the donation made by him and to fulfill the legal obligations imposed on the Kahibalo Foundation, resulting in particular from the provisions of the Accounting Act and the provisions of tax laws. GDPR: see article 6 sec. 1 lit. to beat).
  • contacting the User in order to conduct a telephone conversation, e-mail or postal correspondence related to matters related to the activities of the Kahibalo Foundation, e.g. in order to respond to User’s inquiries or to take actions aimed at concluding relevant contracts, agreements, making arrangements for cooperation. The legal basis for the processing of personal data is the legitimate interest pursued by the Data Administrator (Article 6(1)f) of the GDPR). The legally justified interest of the Data Administrator is then to answer the questions you ask. In this case, the scope of data processed by the Administrator may include: name, surname, e-mail address, telephone number or possibly other data provided by you in the inquiry. Providing data is voluntary, but failure to provide them will result in the inability to provide an answer and/or feedback to your question.
  • in the case of consent by the User, sending a newsletter. As part of this purpose, the scope of the processed data includes the e-mail address, and if the e-mail address contains any personal data, e.g. name, surname, it also includes these data. The legal basis for data processing is Art. 6 section 1 letter a) of the GDPR, i.e. the data subject has consented to the processing of his personal data.
  • saving data in cookie files. Cookies are used to adjust the content of subpages to the User’s preferences, optimize the use of the website and for statistical purposes to help us adjust the structure, functionality and content of the website. They are saved on the user’s end device. The www.kahibalo.com website does not require the acceptance of cookies, but their acceptance will allow you to fully use all the website’s functionalities. At any time, the User may change the settings for cookies in his browser, including blocking them, but in this case we do not guarantee the correct operation of the website. The method of blocking or deleting these files varies depending on the web browser you use. The full Cookie Policy can be found here.

III. User permissions

  1. The Foundation provides Users with the exercise of rights under the Regulation and the Act on the Protection of Personal Data. The User has the right to request from the Data Administrator access to personal data concerning the data subject, rectification, deletion or limitation of processing and the right to object to the processing, as well as the right to transfer data.
  2. Please be advised that the supervisory body in matters related to the protection of personal data is the President of the Office for Personal Data Protection. The user has the right to lodge a complaint in connection with the processing of personal data by the Kahibalo Foundation to the supervisory body, i.e. to the President of the Personal Data Protection Office with its registered office at ul. Stawki 2 in Warsaw (00-193), www.uodo.gov.pl

IV. Recipients of personal data

Please be advised that in connection with the conducted activity, personal data may be:

  1. entrusted for processing pursuant to art. 28 of the GDPR to processors – i.e. entities to which the Administrator entrusts data in connection with the need to provide services under the concluded contract. Processors are, for example, entities providing services in the field of marketing activities, accounting and financial, legal, postal, courier and IT services. These entities, as long as they process Users’ personal data on behalf of the Kahibalo Foundation, operate on the basis of entrustment agreements concluded with it and are obliged to protect Users’ personal data on an equal footing with the Foundation.
  2. In situations requiring it and based on relevant regulations, we may transfer Users’ personal data to public authorities.
  3. Please be advised that in connection with the services provided to you, personal data is or may be transferred outside the EEA (European Economic Area), i.e. to a third country.

V. The time frame in which Users’ personal data may be processed

  1. For contact purposes, i.e. providing answers and feedback to questions asked by Users – until feedback is provided, and in the event of further questions – until comprehensive information is provided.
  2. For purposes related to the conclusion and implementation of the contract – for the duration of the contract.
  3. For purposes related to the sending of the newsletter – from the moment the Users agree to receive it until the Users withdraw their consent to receive it.
  4. For the purposes of pursuing claims in connection with the contract – for the time resulting from applicable law, entitling to pursue claims in connection with the concluded contract, but not longer than for 10 years.

If you have questions related to the Privacy Policy, please contact us!