Search results
What are you looking for?
Type in the search field.
The Polish Red Cross operates throughout Poland. Choose your local branch to view a page with information tailored to your region.
You are currently viewing the page for:
Whole Poland
In this service, we use cookies. By using the website, you consent to the use of cookies.
Privacy Policy
Preliminary information
Respecting the right to privacy, the Polish Red Cross (hereinafter: "Administrator") processes your personal data in accordance with national and European legal regulations.
The Administrator ensures the security of personal data, including its confidentiality, availability, integrity, and accountability of the activities carried out. To make the processing processes transparent for you, this privacy policy presents the most important information regarding the processing of personal data by the Administrator under the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: "GDPR").
Data Controller
The data controller, i.e., the entity deciding on the purposes and means of processing personal data, is the Polish Red Cross based in Warsaw (00-561) at Mokotowska Street 14. In matters related to the processing of your personal data, you can also contact us by email at:info@pck.pl.
The Polish Red Cross attaches great importance to the protection of personal data, which is why it has appointed a data protection officer – Mr. Andrzej Antoni, who you can contact at the email address: iod@pck.pl. The Administrator encourages contact with the DPO regarding any doubts regarding the processing of your personal data.
Acquisition of data and purpose of processing
Depending on your relationship with the Administrator, the Administrator processes personal data for various purposes and to different extents listed below.
1.Persons supporting the Administrator financially – making direct donations, making donations through the Administrator's website or on cooperating websites that enable the organization of collections.
Purpose of processing and legal basis:
The purpose of processing personal data is to carry out actions aimed at concluding a contract and fulfilling the contract with the Administrator (art. 6 sec. 1 lit. b GDPR).
The purpose of processing personal data is to conduct settlements, accounting, and financial reporting (art. 6 sec. 1 lit. c and f GDPR).
Personal data is processed for purposes related to the pursuit and defense of claims, which constitutes a legitimate interest of the Administrator (art. 6 sec. 1 lit. f GDPR).
The purpose of processing is to fulfill the legitimate interest of the Administrator, consisting of thanking for the support and informing previous donors about new collections and the possibility of further supporting the activities of the Administrator (art. 6 sec. 1 lit. f GDPR). Contact with donors will occur via email, phone calls, SMS messages, and regular mail.
Personal data is processed for statistical and analytical purposes, aimed at improving the actions carried out by the Administrator, which constitutes a legally justified interest of the Administrator (art. 6 sec. 1 lit. f GDPR).
Data retention period
In the case of concluding a contract with the Administrator, personal data is processed until the expiration of the limitation periods arising from the contract of claims and the expiration periods resulting from tax regulations, depending on which of the indicated periods will be longer.
Data obtained by the Administrator from Zrzutka.pl Sp. z o.o. for the purpose of contacting donors will be deleted after a period of 6 months if the person to whom the data relates or the Administrator has not undertaken any activity related to thanking for the donation or informing about other collections.
Data processed for statistical and analytical purposes will be retained for no longer than 5 years from the date of the last donation made by the person to whom the data relates.
Personal data processed based on the legitimate interest of the Administrator will be retained until an objection is raised, i.e., indicated in any manner that you do not wish to remain in contact with the Administrator and receive information about the actions taken by the Administrator.
After raising an objection, personal data may be retained for the purpose of demonstrating the correctness of fulfilling the legal obligations incumbent on the Administrator or until the expiration of the limitation periods of claims, depending on which period is longer.
2. Persons transferring 1.5% of tax, who have consented to the Administrator being provided with their personal data.
Purpose of processing and legal basis
The purpose of processing personal data is to conduct settlements, accounting, and financial reporting (art. 6 sec. 1 lit. c and f GDPR).
The purpose of processing is to fulfill the legitimate interest of the Administrator, consisting of thanking for the support and informing previous donors about new collections and the possibility of supporting the activities of the Administrator (art. 6 sec. 1 lit. f GDPR). Contact with donors will occur via email, phone calls, SMS messages, and regular mail.
Personal data is processed for statistical and analytical purposes aimed at improving the actions carried out by the Administrator, which constitutes a legally justified interest of the Administrator (art. 6 sec. 1 lit. f GDPR).
Data retention period
Data of persons who have consented to this in the tax declaration, provided by the Head of the Tax Office, will be retained for no longer than 5 years.
Personal data processed based on the legitimate interest of the Administrator will be retained until an objection is raised, i.e., indicated in any manner that you do not wish to remain in contact with the Administrator and receive information about the actions taken by the Administrator.
After raising an objection, personal data may be retained for the purpose of demonstrating the correctness of fulfilling the legal obligations incumbent on the Administrator or until the expiration of the limitation periods of claims, depending on which period is longer.
3. Newsletter recipients
Purpose of processing and legal basis
The purpose of processing is to fulfill the legitimate interest of the Administrator, consisting of informing about ongoing collections and the possibility of supporting the activities of the Administrator (art. 6 sec. 1 lit. f GDPR). Contact with donors will occur via email, phone calls, SMS messages, and regular mail.
Data will also be processed to establish, pursue, and defend claims, which constitutes a legally justified interest of the Administrator (art. 6 sec. 1 lit. f GDPR).
Data will be processed for analytical and statistical purposes related to improving the effectiveness of the undertaken actions, the quality of services provided, and adapting them to the recipients, which constitutes a legally justified interest of the Administrator (art. 6 sec. 1 lit. f GDPR).
Data retention period
Your personal data will be retained until the consent is withdrawn (if consent was given) or an objection is raised, i.e., indicated in any manner that you do not wish to remain in contact with us and receive information about the actions we undertake. After withdrawing consent or raising an objection, personal data may be retained for the purpose of demonstrating the correctness of fulfilling the legal obligations incumbent on the Administrator and related claims.
4. Persons contacting the Administrator by phone or email
Purpose of processing and legal basis
Personal data is processed for the purpose of conducting phone calls, SMS correspondence, email correspondence, or letters, particularly for the purpose of responding to the inquiries of the contacting persons, which constitutes a legally justified interest of the Administrator (art. 6 sec. 1 lit. f GDPR).
Personal data is also processed to inform about the possibility of getting involved in the statutory activities of the Administrator, which constitutes a legally justified interest of the Administrator (art. 6 sec. 1 lit. f GDPR).
Information on the purpose of processing data contained in the correspondence and related legal bases is provided in other parts of the information clause (depending on what the correspondence concerns).
Data retention period
The retention period of the data constituting the content of the correspondence depends on the purpose of processing the data concerning the correspondence, but it will not exceed 5 years.
5. Contractors (applies to employees and associates of the contractor, as well as contractors who are natural persons)
Purpose of processing and legal basis
Personal data is processed for the purpose of concluding and fulfilling a contract with the contractor (art. 6 sec. 1 lit. b GDPR).
Personal data of employees and associates of the contractor are processed for the purpose of concluding and fulfilling a contract with the contractor, which constitutes a legally justified interest of the Administrator (art. 6 sec. 1 lit. f GDPR).
Personal data is processed to fulfill the legal obligations incumbent on the Administrator in connection with the execution of the contract, including, in particular, for the purpose of conducting settlements, accounting, and financial reporting (art. 6 sec. 1 lit. c and f GDPR).
Personal data is processed for purposes related to the pursuit and defense of claims, which constitutes a justified interest of the Administrator (art. 6 sec. 1 lit. f GDPR).
Data retention period
In the case of concluding a contract with the Administrator, personal data will be processed for the duration of the contract, and after its termination, until the expiration of the limitation periods arising from it or the expiration periods resulting from tax regulations (art. 70 § 1 of the Tax Ordinance), depending on which of the indicated periods will be longer.
Personal data processed based on consent or on the basis of the legitimate interest of the Administrator will be retained until consent is withdrawn or an objection is raised, i.e., indicated in any manner that you do not wish to remain in contact and receive information about the actions taken by the Administrator.
After withdrawing consent or raising an objection, personal data may be retained for the purpose of demonstrating the correctness of fulfilling the legal obligations incumbent on the Administrator or until the expiration of the limitation periods of claims, depending on which period is longer.
6. Social media profiles
Purpose of processing and legal basis:
Data is processed to enable contact with the Administrator and to conduct promotional, analytical, and statistical activities allowing social media users to engage in activity on the profile, which constitutes a legally justified interest of the Administrator (art. 6 sec. 1 lit. f GDPR).
Data is processed to present social media users with information and activities on the Administrator's profile related to promoting the activities of the Polish Red Cross, which constitutes a legally justified interest of the Administrator (art. 6 sec. 1 lit. f GDPR).
Personal data may be processed for purposes related to the pursuit and defense of claims, which constitutes a legally justified interest of the Administrator (art. 6 sec. 1 lit. f GDPR).
Data retention period:
Personal data will be retained for the period necessary to fulfill the purpose for which it was collected, and at least until an objection is raised, i.e., indicated to the Administrator in any manner that you do not wish to remain in contact and receive information about the actions taken by the Administrator. After raising an objection, personal data may be retained for the purpose of demonstrating the correctness of fulfilling the legal obligations incumbent on the Administrator and related claims.
Data recipients
In justified cases, the Administrator may disclose personal data to the following entities:
entities cooperating with the Polish Red Cross in humanitarian and educational activities,
state authorities or other entities authorized under the regulations - if necessary for the fulfillment of legal obligations,
external providers of teleinformatics systems,
entities auditing the activities of the Administrator,
entities cooperating with the Administrator in campaigns promoting the activities of the Administrator, including entities supporting the Administrator in determining the target groups to which promotional campaigns are directed,
entities carrying out correspondence on behalf of the Administrator in the form of emails, SMS, letters, including informational materials and materials promoting the Administrator,
entities providing accounting, human resources, or legal services,
companies disposing of or archiving documents and other media,
companies providing courier and postal services.
Rights of the individuals whose data is processed
Every person whose data is processed by the Administrator has the right to:
access their personal data,
rectify their personal data,
delete their personal data,
limit the processing of their personal data,
object to the processing of their personal data (according to art. 21 sec. 1 GDPR, when submitting an objection, it is necessary to indicate its reasons related to your particular situation),
transfer their personal data.
Additionally, you have the right to lodge a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office - ul. Stawki 2, 00-193 Warsaw. Source of data acquisition
If your personal data has not been provided directly to the Administrator, it was obtained from the partners of the Polish Red Cross in implemented projects (in particular Zrzutka.pl Sp. z o.o.), or from contractors, banks, and payment operators, or from the Head of the Tax Office in the case of individuals who consented to the sharing of data when donating a portion of their tax to the Polish Red Cross.
In the case of acquiring your personal data from third parties, the processing of personal data may concern the following categories of data: names, surnames, email addresses, phone numbers, addresses.
Is providing personal data mandatory?
Providing data is necessary to conclude contracts and settle the conducted activities and for the Administrator to comply with the requirements of the law. In other respects (in particular regarding the processing related to promoting the activities of the Administrator), providing data is voluntary.
Transmission of data to third countries or international organizations
Data will be processed within the European Economic Area, meaning that in principle they are not transferred to third countries. However, considering the services provided by the Administrator's subcontractors in the implementation of support for teleinformatics services and IT infrastructure, the Administrator may outsource the performance of certain IT operations or tasks to recognized subcontractors operating outside the EEA, which may result in the transfer of your data outside the EEA, to the USA.
Your personal data will, in principle, not be transferred outside the European Economic Area (EEA). However, considering the services provided by our subcontractors in implementing support for IT services, we may outsource the performance of certain IT operations or tasks to recognized subcontractors operating outside the EEA. This may result in the transfer of data outside the EEA. According to the decision of the European Commission, recipient countries outside the EEA provide an adequate level of protection for personal data in accordance with EEA standards.
Your personal data may be transferred to the USA. In most cases, we will transfer personal data to entities based in the USA that participate in the Data Privacy Framework program. For more information: https://www.dataprivacyframework.gov/s/.
In other cases and for recipients in the territory of countries not covered by the decision of the European Commission to ensure an adequate level of protection for personal data, we will enter into agreements with data recipients based on standard contractual clauses issued by the European Commission in accordance with art. 46 sec. 2 lit. c GDPR.
The way the Administrator secures your data is in accordance with the principles provided in Chapter V of the GDPR. You may request further information about the security measures applied in this regard, obtain a copy of those security measures, and information about the location of their availability. If you have any questions regarding data processing, you can contact us at: iod@pck.pl.
Automated processing of personal data
If your data will be subject to automated decision-making causing legal effects or similarly significant impact, such decision-making will be conducted according to the principles specified in the content of the regulations, contract, or consent clause, for which the Administrator will request expression in a separate statement.
CHANGE OF PRIVACY POLICY
Due to the fact that the Administrator regularly reviews and updates this
Privacy Policy, there is a possibility of its change. Familiarizing yourself with the current content of the Privacy Policy is possible on the Administrator's website: pck.pl.
Privacy Policy of the Polish Red Cross, version as of September 5, 2024.
See also
Public Information Bulletin
Public Information Bulletin
Donation regulations
Gift regulation
You are currently viewing a page filtered by content from the department. Cała PolskaIf you want to view content from Cała Polskaclick the button