Privacy Policy

1. Introduction

This document is the WorldLink Foundation’s Privacy Policy. In the presented document, we provide you with information about processing of your personal data.

We want you to know that the protection of your personal information (i.e. information about you or that allows you to be identified) is important to us.

The Foundation strives to ensure the highest standards of protection of personal data. We act in the light of legal provisions as well as best practices in this regard.

The Foundation, as an entity established in Poland (EEA area) is obliged to apply the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “GDPR“).

This document provides information about the personal information we collect through this website (online) as well as those that we may otherwise collect. This website is not intended for children under the age of 16.

2. Who is the controller of your personal data?

The controller of personal data is the entity that decides what it will do with personal data (e.g. it decides from whom it will collect the data and what data it will be, what it will use, how it will be used, how it will be kept, to whom it will continue to share (transmit) it, and how long it will use it).

The controller of your personal data processed for the following purposes is the WorldLink Foundation based in Śledziejowice (near Krakow). We are a foundation entered in the register of associations, other social and professional organisations, foundations and independent public health care facilities, as well as the register of entrepreneurs of the KRS, kept by the District Court for Krakow-Downtown in Krakow, XII Commercial Division of the National Court Register, under the number KRS 00007636333.

3. How can you contact us?

You can contact us in any way convenient for you.

• Postal correspondence may be addressed to us at the address of the Foundation’s registered office, i.e. Śledziejowice 602, 32-020 Wieliczka, Poland
• E-mail correspondence may be addressed to us at the e-mail address: office@worldlink.pl. In terms of exercising your rights under the GDPR or questions/concerns regarding the protection of personal data, you can contact us at the following e-mail address: rodo@worldkink.pl

4. Whose data do we process?

As part of our business, we process the following data:

• Your data, as website visitor,
• members of our bodies (the Management Board and the Foundation Board),
• our employees, colleagues and volunteers,
• supportive people (partners, sponsors, donors),
• people taking part in our public events (artists, speakers, moderators, animators, participants),
• representatives of the press and the media,
• newsletter subscribers,
• visitors to our social media sites (Facebook, Linkedin, Twitter).
• our contractors.

5. For what purposes we process your data (why do we process data?)

We process personal data for the purposes of:

• administering our website and ensuring the functionality of the website,
• related to the function of members of the foundation’s bodies,
• fulfilling our obligations as an employer or principal,
• performance of concluded partnership/sponsorship agreements/donations,
• participation in public events,
• promotion of our business,
• the provision of commercial information ordered,
• accounting,
• performance of legal obligations,
• documentary evidence,
• archiving,
• defend against claims.

Detailed information about the purposes of processing of personal data is indicated by us in the relevant information clauses, which are made available before the collection of personal data.

6. On what legal basis we process your data (why can we process your personal data?)

We process personal data only if we have a legal basis for doing so. It is worth pointing out that consent is not the only legal basis for the processing of personal data (and it is equal important as the rest of the legal grounds for the processing). There are cases where the processing of your personal data can be done without your consent.

As part of our business, we mostly rely on the following legal bases:

• your consent, e.g. when we process your personal data as a subscriber of our newsletter (Article 6(1)(a) GDPR),
• the necessity of performance of the contract to which you are a party, or to take steps at your request prior to entering into a contract; e.g. when we enter into a contract with you e.g. for volunteering or sell you a ticket for an event organized by us (Article 6(1)(b) of the GDPR),
• the necessity for compliance with a legal obligation e.g. when, the processing by us of certain data is required by law e.g. for the purpose of issuing an invoice (Article 6(1)(c) of the GDPR),
• the necessity for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms., e.g. when we assert our claims (Article 6(1)(f) of the GDPR).

If you collect data from you, you will receive detailed information from us about the legal basis for the processing of your personal data.

7. How long will we keep your personal data?

We will retain your personal data for the period necessary for the purposes for which the data are processed. The information about the retention period is indicated by us in the relevant information clauses.

8. With whom do we share your personal data?

Where we transfer your personal data to other entities, you will receive detailed information from us in the relevant information clauses.

As a general rule, we transfer when necessary, your personal data to our processors (i.e. entities that act in our name and on our behalf) and other data controllers (i.e. entities that will process personal data for their own purposes) i.e.: companies providing IT services to the Foundation, companies providing accounting and human resources services, etc. ).

9. Do we transfer your data outside the european economic area (EEA) or to an international organisation?

If we intend to transfer your personal data outside the EEA or to an international organisation, you are informed by us in the relevant information clauses. We also indicate the appropriate security information for such a message. The transfer of personal data outside the EEA or to an international organisation is based on decisions of the European Commission establishing an adequate level of protection or standard data protection clauses. 

10. What rights do you have?

Below we inform you what rights, according to the GDPR, are granted to persons whose data we process.

What rights you have depends on the circumstances of the data processing, including, but not limited to, on what legal basis we process your personal data, as well as what our technical capabilities are.

As a general rule, under the GDPR, you have the following rights:

• right to be informed in a transparent manner (Article 12 GDPR),
• right to information in case of data collection from you (Article 13 GDPR),
• right to information when collecting your personal data in a way other than from you (e.g. when we obtained your data from public sources) (Article 14 GDPR),

We want you to be fully aware of processing of your data and, in particular, what your data is, how, for what purposes, on what basis, and for how long they are processed by us. We also inform you of your rights and the fact that you have transferred data to third countries or international organisations. We communicate all this information in plain and clear language.

• Right of access and copies of data (Article 15 GDPR),

In the event that you contact us, we confirm whether we process your personal data and will also provide you with any relevant information about this processing. If you ask for it, we will transfer you a copy of your personal data, according to the principles indicated in the GDPR.

• Right to rectification (Article 16 GDPR),

At your request, we will remove errors, inconsistencies in the data processed or we will complete it, because we make sure that the data processed by us is up-to-date and in accordance with the facts.

• Right to erasure (Article 17 GDPR),

If you so request, and there are no circumstances provided for by the GDPR, enabling us to process your personal data against your will, we will not delete your personal data.

In particular, you may request the deletion of personal data when:

• • your personal data is no longer necessary for the purposes for which they were collected or otherwise processed,
  • you have withdrawed your consent on which the processing is based and there is no other legal basis for processing (where the processing is based on your consent),
  • personal data are processed unlawfully,
  • personal data must be removed in order to comply with a legal obligation under the law.

• Right to restrict processing (Article 18 GDPR),

You may exercise your right to restrict the processing of your data by restricting our activities on your personal data solely to the storage of your personal data or to activities agreed with the you, if:

• • you question the accuracy of your personal data,
  • the processing is unlawful and you object to their deletion;
  • you no longer need this personal data for the purposes of processing, but they are needed for you to establish, exercise or defend claims;
  • you have objected to the processing for reasons related to your particular situation.

• Right to data portability (Article 20 GDPR),

You have the right to request that we receive your personal data in a structured, commonly used machine-readable format and to request that this personal data be transferred to another controller if the processing of such data is based on your consent or necessity for the performance of the contract or to take action at your request before and by automated means.

• Right to object on grounds related to your particular situation (Article 21(1) GDPR),

Where we process your personal data on the basis of a legitimate interest, and where the processing is necessary for us to perform a task carried out in the public interest, you have the right to object to this processing if you believe that your particular situation justifies our failure to process the data.

Your object we will take into account if we believe that the grounds for our processing of your personal data override our interests, rights and freedoms, or are necessary for us to establish, exercise or defend claims.

• Right to withdraw consent (Article 7(3) GDPR),

You have the right to withdraw your consent at any time, but please note that this does not affect the lawfulness of processing carried out before its withdrawal.

• The right not to be subject to a decision based solely on automated processing, including profiling (Article 22 GDPR),

You have the right not to be subject to a decision that is based solely on automated processing, including profiling, and produces legal effects on you or similarly significantly affects you. If there are indications that we can make such a decision, then you will be informed.

• Right to a complaint to a supervisory authority

If you believe that we are processing your personal data in violation of the GDPR or other data protection laws, you have the right to lodge a complaint with the authority supervising the processing of personal data, which is competent for your habitual residence, your place of work or the place of the alleged infringement. In Poland, the supervisory authority is the President of the Office for Personal Data Protection (https://uodo.gov.pl/).

However, if you are not satisfied in any way with the way we process your personal data or if you have any doubts about it, please contact us.

11. How can you exercise your rights?

If you decide to exercise your rights as indicated above,you may contact us in person, by post (to our address) and by e-mail to: rodo@worldkink.pl

If you are unable to identify or we have doubt about it, we may ask you for additional information to help us verify this. The verification method depends on the sensitivity of the transmitted data and the risk to your rights and freedoms. Providing such additional verification data is voluntary, however failure to provide them may result in refusal of execution of the request.

We make every effort to ensure that the response to the request made to us is given within one month of its receipt. If we have to extend this deadline, e.g. in the case of a due to the complex nature of the request, we will notify you of this, stating the reasons for the extension of the deadline.

As a rule, we respond as requested, unless you clearly indicate the way you expect your response.

The procedure for applications is free of charge. We may collect fees only if: (a) request a second and subsequent copy of your data, (b) you make excessive (e.g. extremely frequent) or manifestly unfounded requests.

The fee is calculated by us in a reasonable amount resulting from the administrative costs incurred. 

12. The entry into force of the policy and its amendment

This Privacy Policy takes effect on January 18, 2020. This policy is monitored on an ongoing basis and will be subject to necessary changes. The part of the Privacy Policy is Cookies Policy which is presented here