We give children hope
We give children hope
General information
This version of the Privacy Policy of A & A Rainbow Hearts Around The World Foundation is effective from 05 January 2024. It is an updated version of the document dated 04 October 2019 effective until 18 November 2021 and the document dated 19 November 2021 effective until 04 January 2024. As part of the update, information has been introduced to the Privacy Policy of the A & A Rainbow Hearts Around The World Foundation about the change of the name of the Foundation and the policy regarding the processing of personal data of recipients of the Foundation's activities / clients and those who contact the Foundation via WhatsApp messenger.
The administrator of the personal data is the A & A Rainbow Hearts Around The World Foundation based in Bydgoszcz, 85-432, at 12A/5 Kormoranów St. NIP: 554-297-99-97; KRS: 0000803950; REGON: 384550361, represented by the Management Board.
The Data Controller has appointed a Data Controller whom you can contact via email: joanna@rainbowhearts.com.pl
The purpose of this Privacy Policy is to bring together the key principles relating to the processing of personal data by the A & A Rainbow Hearts Around The World Foundation. In it, we outline the key groups of people whose data we process, describe for what purposes and on what legal basis we do so. We also inform you of the rights of those whose data we process.
To ensure the security of the data entrusted to us, we have developed internal procedures and recommendations to prevent data from being made available to unauthorised persons. We monitor their implementation and constantly check their compliance with the relevant legal acts - the Personal Data Protection Act, the Act on the Provision of Electronic Services, as well as all kinds of implementing acts and Community legislation, such as the General Data Protection Regulation of 27 April 2016 (RODO).
For the purpose of easier perception of the Privacy Policy, we have replaced the term ‘Data Owner’ with ‘You’, ‘Controller’ with ‘We’, ‘Foundation’, ‘A & A Rainbow Hearts Around The World Foundation’. The term ‘RODO’ means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC. The term ‘CRM’ (from customer relationship management) means the IT programme used by the A & A Rainbow Hearts Around The World Foundation for relationship management.
Whose data do we process and on what terms?
Personal data of recipients of the Foundation's activities / clients of the Foundation
We may collect and process the following personal data of our clients, i.e.: name, age, education, health information, telephone number, home address, registered address, data of family members, professional, family, financial situation, decisions of judicial authorities, administrative decisions. The purpose of the processing is: implementation of projects to provide assistance and support; monitoring purposes by authorised bodies. We process the data on the basis of Article 6(1)(e) RODO, i.e. the fulfilment of a public task, and Article 6(1)(f) RODO, i.e. the legitimate interest of the controller.
We do not share your data with anyone except the authorities authorised by law.
We process sensitive data necessary for the provision of assistance and support on the basis of Article 9(2)(b) RODO (processing is necessary for the fulfilment of obligations and the exercise of specific rights by the controller or the data subject in the field of social security and social protection), Article 9(2) (c) RODO (processing is necessary to protect the vital interests of the data subject) and Article 9(2)(d) RODO (processing is carried out in the course of legitimate activities carried out with appropriate safeguards by a foundation, association or other non-profit entity with political, philosophical, religious or trade union objectives)
We keep your data for a period of min. 5 years after the end of the year in which the project ended, due to billing and auditing obligations.
2. Data of users of the rainbowhearts.com website
Through our website, we only collect data to the extent that it is necessary to manage the website, to ensure the smooth operation of the functionalities offered within them and to analyse the effectiveness of the communication.
When using the Foundation's services, so-called system logs - anonymous information such as the time of the user's visit to the site, the user's IP address, URL, browser type, download data, etc. - are automatically recorded.
We keep statistical data on website usage until the end of the Foundation's activities based on our legitimate interest.
3. details of those who support us with donations
Financial support for the A & A Rainbow Hearts Around The World Foundation is possible by making a donation by bank transfer to a bank account or through T-Pay, Stripe and PayPal online payment systems in Polish banks and via payment cards.
In the case of a donation made to us by bank transfer, we process the personal data provided to us by the bank, i.e.: name, account number, donation amount, address. This is necessary for the performance of the contract and the fulfilment of the Foundation's legal obligations (e.g. under accounting regulations).
We process the additional information provided in the title of the transfer (e.g. your e-mail address) as well as your name and postal address on the basis of our legitimate interest to send you a thank you for your support and information about our ongoing activities. If you do not wish to be contacted by us in this way, please send your objection (e.g. stating ‘Do not send me thanks for my support by post/email’) to: info@rainbowhearts.com.pl. We may also address correspondence to an address other than the one shown on the transfer or contact you by e-mail, in which case please also contact us at info@rainbowhearts.com.pl.
In the case of a donation made via the T-Pay/Stripe/PayPal systems, we ask for your name so that we know who we are contracting with (e.g. so that we can issue a certificate to deduct the donation from tax or return money paid in error), the amount of the donation and the e-mail address which is necessary for the technical handling of the payment by the CRM system. This is necessary for the execution of the contract and the fulfilment of the Foundation's legal obligations. The provision of data is voluntary, but necessary for the donation. The e-mail address also serves us - on the basis of legitimate interest - to send you a confirmation of the transfer and to thank you for your support. If you do not wish to be thanked, please send your objection to: info@rainbowhearts.com.pl. If your address is also provided in the payment system, we process it as part of our legitimate interest, among other things for statistical purposes.
We also send our donors and contributors occasional mailings with highlights of the Foundation's activities. We do this on the basis of our legitimate interest. If you do not wish to receive such mailings, you can always unsubscribe via the link in the footer of the email or send your objection to info@rainbowhearts.com.pl.
In addition, donors can fill in a form in which they voluntarily share with us other data not shared with us when making a payment: email address, home address, telephone number, date of birth. We will process this data based on our legitimate interest to build relationships with donors, including keeping them informed about the Foundation's key activities, collecting feedback on the experience of being a donor or donor, thanking them for their support and encouraging them to continue or increase their support. If a person has shared additional data with us, but later wishes to opt out of a particular type of communication, they can send an objection at any time to: info@rainbowhearts.com.pl.
We process the data of people who support us with donations for 5 years from the end of the calendar year in which we recorded the last interaction with the person in the CRM system (e.g. we received a donation, recorded an email opt-out or participation in an event organised by us that requires registration).
4. Data of persons donating 1.5% of their tax
We receive from the tax office the data of persons who have donated 1.5% of their tax and who have indicated their consent to provide us with their data in the PIT form. These are: name and surname of the taxpayer, address, amount of tax donated, data of the spouse - in the case of joint tax settlement - and possible additional information provided in the 1.5% section of the PIT form. We process your data on the basis of our legitimate interest to thank you for your support. If you do not wish us to process your data for this purpose, please do not agree to provide us with your data on your next tax return.
We process the data of people who support us with 1.5% tax on the basis of our legitimate interest to manage the relationship for 5 years from the end of the calendar year in which we recorded the last interaction with the person in our database.
5. Data of subscribers to the newsletter
We process the names and email addresses of subscribers to the A & A Rainbow Hearts Around The World Foundation newsletter in order to send information about the Foundation's activities and issues related to our area of work, including fundraising information.
The basis for data processing is our legitimate interest. A person who has subscribed to the newsletter may unsubscribe from it at any time by clicking on the relevant link in the footer of the email or by sending an unsubscribe request to joanna@rainbowhearts.com.pl.
We process the data of former newsletter subscribers on the basis of our legitimate interest for the purpose of relationship management for 2 years from the end of the calendar year in which we recorded the last interaction with the person in the CRM system (e.g. recorded an unsubscribe from the newsletter). If you would like us to remove the information earlier that you ever subscribed to our newsletter and stop contacting you altogether, please also email us at joanna@rainbowhearts.com.pl.
6. Data of journalists
The A & A Rainbow Hearts Around The World Foundation processes data of journalists and journalists (also editors and publishers) obtained directly from them, from editorial offices or from the Internet. The scope of data processed may include: name, email address, telephone number, affiliation (including previous affiliations), editorial address, interaction and publication history. We process this data on the basis of our legitimate interest to inform you about the activities of the A & A Rainbow Hearts Around The World Foundation and to manage the relationship.
We process your data until the end of the Foundation's activities. If you do not wish to receive press releases from us, you can object to the processing of your data. In this case and if you have any further questions, please send an email to: info@rainbowhearts.com.pl.
7. data of employees of CSR departments or other persons representing companies and institutions with which we maintain relations.
The A & A Rainbow Hearts Around The World Foundation processes data of CSR or related employees obtained directly from them, from their employer or from the Internet. The range of data processed may include: name, email address, phone number, affiliation (including previous affiliations), company address, history of interaction and collaboration. We process this data on the basis of our legitimate interest to encourage support for the activities undertaken by the A & A Rainbow Hearts Around The World Foundation and to manage the relationship.
We process your data until the end of the Foundation's activities. If you do not wish to receive information from us with cooperation proposals, you can object to the processing of your data. If this is the case, and if you have any further questions, please send an email to: info@rainbowhearts.com.pl.
8.Data of persons using non-public communication channels
We process the data of people contacted by email (addresses in the ocalenie.org.pl domain), telephone, SMS or letter on the basis of legitimate interest, in order to handle the correspondence, for purposes arising from the content of the communication or for future contact. This data may include your name, address, email address, telephone number and any other information contained in the content of the communication. The provision of this data is voluntary. We process the data for archiving purposes and for relationship management until the end of the Foundation's activities, with the exception of data of a sensitive nature, which we delete or anonymise as soon as the case is closed. When writing or calling us, please try not to provide unnecessary data. If we need additional information, we will ask for it.
9. Data of persons communicating with the Foundation via social networks and instant messaging services
Facebook, Twitter and WhatsApp are the controllers of their users' personal data and process it under their own terms and conditions. When you interact with us via Facebook, Twitter or WhatsApp (liking/watching a page, joining a group administered by us, reacting to posts, sharing/retweeting, commenting, private messages), the controller of your personal data becomes the A & A Rainbow Hearts Around The World Foundation in addition to Facebook, Twitter or WhatsApp. We process your data, such as your name/nickname, image, public profile and other information provided in messages or comments, until the end of the Foundation's activities on the basis of our legitimate interest, in order to respond to comments and messages, to maintain relationships with those interacting with us, and to analyse the effectiveness of communications.
10. Details of participants in events organised by the A & A Rainbow Hearts Around The World Foundation
When organising events that require registration, as a general rule we ask for: name, email address, telephone number, unless the nature of the event (e.g. training) requires the collection of other information. We process this data for the purpose of organising the event, and the basis for the processing is the performance of tasks in the public interest arising from the statutes of the A & A Rainbow Hearts Around The World Foundation (Art. 6(1)(e) RODO).
After the event, we process attendees' data on the basis of our legitimate interest for relationship management purposes, for 5 years from the end of the calendar year in which we recorded the last interaction with the person in our CRM system. If you would like us to delete it earlier, please email us at: info@rainbowhearts.com.pl. In the case of events organised with grant funding requiring us to keep records for a longer period, the relevant information will be made available when signing up for the event.
11. Data of participants in competitions
When we organise a competition, we specify the scope of the information we will process in the competition rules. We usually limit ourselves to collecting the e-mail address of the participants and the name and postal address of the winners. We process the data for the purpose of adjudicating the competition and sending out the prizes, and the basis for the processing is the performance of tasks in the public interest arising from the statutes of the A & A Rainbow Hearts Around The World Foundation (Art. 6(1)(e) RODO).
Once the competition has ended, we process participants' data on the basis of our legitimate interest to manage the relationship for 5 years from the end of the calendar year in which we recorded the last interaction with the person in the CRM system. If you would like us to delete it earlier, please email us at: info@rainbowhearts.com.pl.
12. Data of job applicants
We process the data of job applicants/candidates on the basis of our entitlement under a legal provision, namely Article 22 of the Labour Code, in order to carry out the recruitment procedure. We process this data until the respective recruitment process is completed.
In justified cases, we may ask you to enter in your recruitment materials (CV and/or cover letter) your consent to the processing of your data also in future recruitment processes, in order to send you job offers. The relevant information will then be included in the job advertisement. In such a situation, your data will be processed until you revoke your consent, however, no longer than 5 years from the end of the last recruitment in which you participated.
Statistics (Google Analytics)
On our website, we use Google Analytics, a web analytics service offered by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (‘Google’).
Google analyses the use of our website on our behalf. For this purpose, among other things, the cookies described in section 9 are used. The information collected by Google in connection with your use of our website (e.g. referring URL, pages visited, browser type, language settings, operating system, screen resolution) is transmitted to a Google server in the USA, where it is stored and analysed. Their results are made available to us in anonymous form. Your usage data is not combined with your full IP address in this process.
You can withdraw your consent to the use of web analysis at any time by downloading and installing the appropriate Google browser plug-in.
Further information about Google Analytics is available in the Google Analytics Terms of Service, Google Analytics privacy and data protection guidelines and in Google's privacy policy.
Complaints
If you would like to exercise your rights regarding your personal data or simply ask a question related to our Privacy Policy, please write to: info@rainbowhearts.com.pl
You also have the right to complain about issues regulated by our Privacy Policy.
Complaints can be submitted in writing to the Foundation's e-mail address info@rainbowhearts.com.pl (please attach a scan of the hand-signed complaint document to the email).
A properly submitted complaint should at least include your name, postal address and the content and basis of your complaint. Providing the above data is the basis for considering the complaint. Complaints that do not meet the above requirements will not be considered.
Complaints will be considered within 14 days of receipt by the Foundation.
If you consider that your data is being processed unlawfully, you can also lodge a complaint with the supervisory authority, the President of the Office for Personal Data Protection.
Data sharing
The A & A Rainbow Hearts Around The World Foundation will only pass on your personal data:
In addition, when communicating by post, we entrust personal data to postal intermediaries (Poczta Polska and other companies operating under postal law) for processing on the basis of entrustment agreements and service regulations.
Personal data collected in the context of publicly funded projects may be made available for the purposes of monitoring, reporting and auditing the project only to entities authorised to carry out the above activities or their representatives.
Your data is not subject to automated decision-making, including profiling.
Data retention
The identifiable retention periods for personal data by the A & A Rainbow Hearts Around The World Foundation are described in section 2 of this Privacy Policy.
In addition to the situations described in section 2, we also reserve the right to process your data after the termination of the Agreement or the withdrawal of your consent to the extent that we need to pursue possible claims in court or if national or EU or international law obliges us to retain the data.
Your rights
You have the following rights regarding our processing of your personal data:
If you wish to access, correct, update or request the deletion of your personal data, you can always do so by contacting us at any time: joanna@rainbowhearts.com.pl.
In addition to this, you can object to the processing of your personal data, ask us to restrict the processing of your personal data or request a transfer of your personal data. And here too, you can exercise these rights by contacting us joanna@rainbowhearts.com.pl.
Where we have collected and processed your personal data with your consent, you may withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing that took place before that withdrawal, nor will it affect the processing of your personal data on lawful grounds for processing other than consent.
You also have the right to lodge a complaint with the data protection supervisory authority if you consider that the processing of your personal data is in breach of the law.
We respond to all requests we receive from persons wishing to exercise their data protection rights in accordance with current data protection legislation.
Data security
When processing your personal data, we use organisational and technical measures in accordance with the relevant legislation. We store the majority of your data electronically: primarily on our own and rented servers and, to a limited extent, on office computers, external drives and phones. We process data through IT tools used by the A & A Rainbow Hearts Around The World Foundation team and collaborators, primarily the CRM relationship management system (hereafter: CRM system), email and cloud-based file storage. We store some of our data as paper records, in appropriately secure cabinets and rooms.
Cookies
Cookies are small text files sent to your device when you visit our website rainbowhearts.com.pl
Cookies contain, among other things, the address of the website from which they originate, the settings made by the website user regarding page layout, text size, colours, contrast version, data entered into forms and a value, which is usually an automatically generated unique number. The cookie mechanism does not collect any personal data or any confidential information from the end user's device.
By using the services of A & A Rainbow Hearts Around The World Foundation you consent to the use of cookies. As an end user, you have the possibility to use the website without the use of cookies, but this means that some functions of the website will not work properly. Please note that you can change your cookie settings yourself and at any time, as well as delete cookies using the available functions in the web browser you are using. If you do not agree to the use of cookies, it is possible to select in your browser settings the option to reject cookies or to signal their transmission.
Our website may use the following cookies:
To manage your cookie settings, select the application you are using from the list of official websites of the manufacturers of the most commonly used web browsers and follow the manufacturer's instructions:
Mobile devices:
Changes to the Privacy Policy
A & A Rainbow Hearts Around The World Foundation reserves the right to unilaterally make changes to the content of this Privacy Policy at any time. The changes shall come into effect on the date they are published within the service www.rainbowhearts.com.pl.
