Privacy Policy of the Wyjść z Ciemności Foundation

 

1. Definitions

1.1. Administrator – The Wyjść z Ciemności Foundation, based in Gdańsk at ul. Bernarda Milskiego 1/37, entered in the Register of Associations, Other Social and Professional Organisations, Foundations and Public Healthcare Institutions, maintained by the District Court Gdańsk-Północ in Gdańsk, 7th Commercial Division of the National Court Register, under KRS number 0001205323, NIP 5833555701.

1.2. Personal data – all information about a natural person who is identified or identifiable by one or more specific factors determining physical, physiological, genetic, mental, economic, cultural or social identity, including device IP, internet identifier and information collected through cookies and other similar technologies.

1.3. Privacy Policy – this Privacy Policy.

1.4. RODO – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

1.5. Service – the website operated by the Administrator at fundacjawzc.pl.

1.6. User – any natural person visiting the Website or using one or more services or functionalities of the Website.

2. Data processing in connection with the use of the Website

2.1. The Privacy Policy describes the rules for the use of cookies or other similar technologies and the rules for the processing of personal data collected during the use of the Website by the User.

2.2. In connection with the User's use of the Website, the Administrator collects data to the extent necessary to provide specific services, as well as information about the User's activity on the Website, including the device's IP address, device data, Internet identifier, and information collected through cookies and other similar technologies.

2.3. When using the contact form or volunteer form, the User provides personal data voluntarily. The scope of data collected includes: name and surname, e-mail address and message content.

3. Cookies and similar technologies

3.1. In connection with the use of the Website, cookies or similar technologies are used to provide the User with access to the Website and to improve its functioning.

3.2. Cookies are small text files stored on the User's device (computer, phone, tablet, etc.) when using the Website, allowing information to be stored and read.

3.3. We use two types of cookies:

  • Session – files stored on the User's device until they leave the Website;
  • Permanent – files stored on the User's device until they are deleted by the User or until the cookie expires.

3.4. The Administrator uses cookies for the following purposes:

  • Essential cookies – necessary for the proper functioning of the Website;
  • Functional cookies – used to personalise the User interface;
  • Analytical cookies – used to monitor website traffic and generate statistics.

3.5. The user may change their cookie settings at any time by changing their privacy settings in their browser. This change may result in some features of the Website becoming unavailable.

4. Purposes and legal basis for data processing

The Administrator may process Users' personal data for the following purposes:

  • Providing access to the Website – pursuant to Article 6(1)(f) of the GDPR;
  • Responses to enquiries sent via the contact form – pursuant to Article 6(1)(a) of the GDPR (consent);
  • Contact with persons interested in volunteering – pursuant to Article 6(1)(a) of the GDPR (consent);
  • Achieving the Foundation's statutory objectives – pursuant to Article 6(1)(f) of the GDPR;
  • Keeping statistics and analysing website traffic – pursuant to Article 6(1)(f) of the GDPR;
  • Detection and elimination of abuse – pursuant to Article 6(1)(f) of the GDPR.

5. Period of personal data processing

5.1. Personal data from contact forms will be processed for the period necessary to establish contact, no longer than 2 years from the last contact, and in the case of consent – until its revocation.

5.2. Statistical data is processed for a period of 14 months.

5.3. You may delete cookies from your device yourself by clearing your browser's cache.

6. User Rights

6.1. In connection with the processing of personal data, the User has the following rights:

  • Right of access to data – You can find out what data we process;
  • Right to rectification – if the data is incorrect or incomplete;
  • Right to erasure – the so-called ‘right to be forgotten’;
  • Right to restriction of processing – in specific situations;
  • Right to data portability – receiving data in a structured format;
  • Right to object – with regard to data processing based on the legitimate interest of the Controller;
  • Right to withdraw consent – at any time, without affecting the lawfulness of prior processing.

6.2. The user may lodge a complaint regarding the processing of personal data with the supervisory authority – the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).

7. Data recipients

Users' personal data may be transferred to the following categories of recipients:

  • The hosting company LH.pl – for the purpose of storing data on the server;
  • IT service providers supporting the operation of the Website;
  • Entities authorised under the provisions of law.

8. Transfer of data outside the EEA

As a rule, the User's personal data is not transferred outside the European Economic Area. When using analytical tools (e.g. Google Analytics), data may be transferred to third countries provided that appropriate safeguards are in place, such as standard contractual clauses adopted by the European Commission.

9. Personal data security

9.1. The Administrator shall implement appropriate technical and organisational measures to ensure the security of personal data, including:

  • SSL certificate (encrypted connection);
  • Regular software updates;
  • Restricted access to data for authorised persons only.

9.2. The Administrator conducts ongoing risk analysis to ensure that personal data is processed securely.

10. Contact details

Requests, statements and all correspondence concerning personal data should be addressed to:

  • In writing to the following address: Fundacja Wyjść z Ciemności, Bernarda Milskiego 1 / 37, 80-809 Gdańsk
  • By email to: fundacja.wzc@gmail.com

11. Changes to the Privacy Policy

The Privacy Policy is reviewed on an ongoing basis and updated as necessary. The current version of the Privacy Policy was adopted and has been in force since 5 January 2026.