Privacy and Cookies Policy

 Personal Data Administrator

The Personal Data Administrator is the Manus Foundation (hereinafter referred to as the “ADMINISTRATOR”), with its registered office at ul. Grunwaldzka 61, 50-366 Wrocław. The Administrator can be contacted in writing, by traditional mail to the above address or by e-mail to the following address: fundacja@manus.pl.

Data Protection Inspector

The Administrator has appointed a Data Protection Inspector, who can be contacted at the following e-mail address:  iodo@manus.pl.

Legal basis

Personal data are processed on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Contact

We use your personal data that you provided when contacting us (in particular your name, surname, e-mail address and other data that you provided in the content of the message addressed to the Administrator). Providing this personal data is necessary to be able to establish contact.

We use the above personal data to respond to the inquiry you sent. We act on the basis of our legitimate interest, which consists in ensuring contact – art. 6 sec. 1 letter f GDPR. Personal data will be processed by the Administrator for a period of 5 years, and then the necessity of the data will be verified and possibly deleted.

The data does not come from third parties.

The Administrator does not envisage automated decision-making.

 Business contacts

The processing of personal data takes place for the purpose of exchanging personal data as part of business contacts. We act on the basis of our legitimate interest – art. 6 sec. 1 letter f of the GDPR. Personal data may come from third parties, including: employees, co-workers, volunteers, beneficiaries, contractors, clients, officials. Personal data will be processed by the Administrator indefinitely.

The Administrator does not envisage automated decision-making.

Donations

We use your personal data that you provided in the payment form or in the transfer (in particular name, surname, address, e-mail address, bank account number). Providing personal data is necessary to be able to support our activities. We use the above. personal data in order to enable making and handling a donation to the Administrator. The legal basis for our actions is art. 6 sec. 1 letter b of the GDPR. In addition, we use the above-mentioned personal data to issue accounting records documenting donations. We operate based on our legal obligation – art. 6 sec. 1 letter c of the GDPR. We process personal data for this purpose for a period of 5 years from the settlement of the donation.

We use your personal data, including your e-mail address and address, to send you thanks for your support, as well as to send information about our activities that were financed from your support. We operate based on our legitimate interest – art. 6 sec. 1 letter f of the GDPR. We process personal data for this purpose for one year from the support of our activities or until an earlier effective objection to processing.

The data does not come from third parties.

The Administrator does not envisage automated decision-making.

Invoices

Personal data is processed for the purpose of issuing an invoice and payment – art. 6 sec. 1 letter b GDPR, invoice settlement – art. 6 sec. 1 letter c GDPR – in accordance with the Act of 29 September 1994 on accounting. Personal data will be processed by the Administrator for 5 years from the beginning of the year following the year in which the accounting documents were issued.

The data does not come from third parties.

The Administrator does not anticipate automated decision-making.

Online meeting participants

We process your personal data in order to provide you with participation in meetings and training courses organized by the Administrator in an online formula, including establishing contact. The legal basis for our action is art. 6 sec. 1 letter b GDPR. The data will be stored until the end of the meeting. Your data will also be processed for the purpose of determining and pursuing claims or defending against claims. The legal basis for using the data for this purpose is our legitimate interest – art. 6 sec. 1 lit. f GDPR. For this purpose, the data will be stored for 3 years from the date of completion of the meeting/training.

The data does not come from third parties.

The Administrator does not anticipate automated decision-making.

Video monitoring

The processing is carried out in order to ensure public order and the safety of persons staying in the monitored area and is necessary e for purposes resulting from legitimate interests pursued by the administrator – art. 6 sec. 1 letter f GDPR and ensuring the safety of persons and property in the area covered by monitoring.

The Administrator does not envisage automated decision-making.

PART FOR JOB CANDIDATES/EMPLOYEES

Recruitment based on the Labor Code

Personal data processing takes place for the purpose of conducting the recruitment procedure, within the scope specified in the provisions of labor law – art. 6 sec. 1 letter b, c GDPR – based on the Act of 26 June 1974, the Labor Code, in order to establish, pursue or defend against claims – art. 6 sec. 1 letter f GDPR. In addition, personal data may be processed to the extent exceeding the provisions of labor law on the basis of granted consent – ​​art. 6 sec. 1 letter a GDPR.

It is also possible to process personal data for the purpose of conducting future recruitment of employees, if consent is given – art. 6 sec. 1 letter a GDPR.

If the recruitment documents contain data referred to in art. 9 sec. 1 letter a GDPR, the processing of personal data takes place solely on the basis of consent – art. 9 sec. 2 letter a.

Applies to an employee based on the Labor Code.

In the case of candidates whose application was rejected, personal data will be processed until the recruitment process is completed and then for a period of 3 years in order to determine, pursue or defend claims. In the case of consent to the processing of personal data in subsequent recruitments, the data will be stored for a period of 1 year.

In the case of candidates with whom an employment contract has been concluded, the data is included in the employee’s personal files and stored in accordance with the provisions of the law.

The data does not come from third parties.

The Administrator does not transfer data to third countries.

The Administrator does not anticipate automated decision-making.

Recruitment based on the Civil Code

Personal data processing takes place for the purpose of conducting the recruitment process, including verification of qualifications – art. 6 sec. 1 letter b GDPR – based on the Act of 23 April 1964, the Civil Code, and for the purpose of determining, pursuing or defending against claims – art. 6 sec. 1 letter f GDPR. If the documents contain personal data that were not indicated in the advertisement as required, their processing will take place on the basis of expressed consent – art. 6 sec. 1 letter a GDPR.

If the documents contain data referred to in art. 9 sec. 1 GDPR, the processing of personal data takes place exclusively on the basis of consent – art. 9 sec. 2 letter a GDPR.

It is also possible to process personal data for the purpose of conducting future recruitment of collaborators, if consent is expressed – art. 6 sec. 1 letter a GDPR.

Personal data will be processed by the Administrator until the verification process is completed and qualifications are confirmed.

In the case of candidates whose application was rejected, personal data will be processed until the recruitment process is completed and then for a period of 3 years in order to determine, pursue or defend claims. In the case of expressed consent to the processing of personal data in subsequent recruitments, the data will be stored for a period of 1 year.

The data does not come from third parties.

The Administrator does not transfer data to third countries.

The Administrator does not envisage automated decision-making.

 SOCIAL MEDIA PORTALS

By placing social media buttons on our websites (Facebook, Instagram, X), we give the operators of these portals the opportunity to collect personal data of users of our sites and further process them for the purposes specified by these operators. We do this in two ways:

  • First, we refer you using the button to the website of the appropriate social media portal, where you can like or follow our fanpage, as well as recommend it to your friends; Your activity on social media portals is tracked by the operators of these portals, and the data collected in this way is used by them, among other things, for behavioral marketing purposes; this applies only to users of our sites who are subscribers to social media services;
  • Secondly, we allow social media operators to place cookies on your device, thanks to which they can track your activity on various websites; the data collected in this way is used by them, among other things, for behavioral marketing purposes; this applies to all users of our sites, regardless of whether they are subscribers to social media services; The purpose of placing social media buttons on the websites is to increase the attractiveness of these sites.

We act based on our legitimate interest (the basis of data use provided for in art. 6 sec. 1 letter f of the GDPR), consisting in the promotion and popularization of the Administrator’s activities.

In connection with the implementation of the purposes described above, we do not store personal data. However, such data may be stored – due to the purposes they define themselves – by social network operators. However, this remains outside any agreements with these operators.

Running fan pages on social networking sites

We use your personal data collected in connection with visits to our fan pages created by us on social networking sites (Facebook, Instagram, X) and activities undertaken on the forum of these fan pages, including information on following and liking the fan page, posting posts, posting comments under content published on the fan page, reactions to content published on the fan page and sharing content published on the fan page with other users, etc.). This information, in accordance with the specifics of the operation of social networking sites, is public to all or some of the other users of these sites. We use your personal data to run the fanpage, including to develop attractive content and make it available to users of social networking sites.

We operate based on the necessity to use the data to perform the contract for the provision of services by electronic means. The legal basis for the use of data is provided for in art. 6 sec. 1 letter b of the GDPR.

SERVER ADMINISTRATION AND STATISTICS OF USING THE RESOURCES OF OUR SITES

We use your personal data regarding your activity on our sites, including the content of HTTP requests sent to our server by your device (URL address, IP address, browser type, operating system, browser language, date and time of request, cookie identifier, viewed resources of the site). Data collected in this way is saved in the server logs.

We use your personal data to administer the server, ensure its security and for statistical purposes. We operate based on our legitimate interest, consisting in ensuring contact – art. 6 sec. 1 letter f of the GDPR consisting in administering the server, identifying errors in the structure of our pages and maintaining statistics of the most frequently viewed resources.

COOKIES FILES

Cookies are computer data, in particular text files, stored in end-user devices, intended for using websites. Cookies identify the User, which allows the content of the website they are using to be tailored to their needs. By remembering their preferences, it allows for appropriate matching of content addressed to them, including advertisements. The Personal Data Administrator uses Cookies to guarantee an appropriate standard of convenience of the Service, and the collected data is used only within the company to optimize activities.

Cookies are used for the purpose of:

    1. adapting the content of the Service to the User’s preferences;
    2. optimizing the use of the Service, in particular by recognizing the User’s end device,
    3. creating statistics,
    4. maintaining the User’s session,
    5. providing the User with advertising content.

The collected data is used to monitor and verify how Users use the Service,
to improve the functioning of the Service by providing more effective and problem-free navigation.

Please note that in some cases, beyond the Owner’s control, software installed by the User on the end device, used to browse websites (e.g. a web browser) introduces default storage of Cookies on the User’s end device. Users can change the settings for Cookies at any time. These settings can be changed, among other things, in such a way as to block automatic Cookies settings or inform about each time they are placed on the User’s end device. Detailed information in this regard is available in the settings and instructions for the software (internet browser).

The User can at any time disable or restore the option of collecting cookies by changing the settings in the internet browser.

Changing the settings constitutes an expression of objection, which may cause difficulties in the future
in using the Service. Completely disabling the option of accepting Cookies will not mean the inability to view the content posted on the Service, except for those for which access requires logging in.

Failure to change the settings means that the data will be placed on the User’s end device (using the Service will result in automatic placement of Cookies on the User’s end device).

Storage
The data stored in the User’s end device do not cause any configuration changes in the User’s end device or software installed on this device.

Information regarding Cookies also applies to other similar technologies used within the Service.

ENTITIES TO WHICH WE DISCLOSE YOUR PERSONAL DATA

Our website contains links to other websites. We cannot be held responsible for the privacy policies in force on these websites. We encourage you to familiarize yourself with the privacy policy established there after going to other websites. This privacy policy applies only to the website managed by the Personal Data Administrator.

We entrust personal data for processing to entities with which we cooperate on a permanent basis and which are responsible for the accounting services of the Foundation (this applies to the data of people supporting us with donations and people with whom we conclude civil law contracts).

These entities operate on the basis of entrustment agreements and are obliged to protect personal data on an equal basis with us.

In addition, in the case of using traditional postal communication, we entrust personal data for processing to postal intermediaries (Poczta Polska and other companies operating under postal law) on the basis of entrustment agreements and service regulations.

In some situations, we transfer data to other recipients (e.g. those cooperating with us in organizing training or another event). In such cases, we always inform about it in advance, e.g. at registration.

In addition, personal data may be disclosed to public authorities on the basis of legal regulations and to entities cooperating with us on the basis of concluded entrustment agreements for the processing of personal data.

YOUR RIGHTS

In connection with our use of your personal data, you may request from us:

  • access to your personal data, obtain confirmation as to whether your personal data is being used, obtain a copy of your personal data and obtain information related to the use of this data (Article 15 of the GDPR),
  • a copy of your personal data that you have provided to us and provide this copy either to you or to an entity indicated by you in a commonly used, machine-readable format (Article 20 of the GDPR),
  • correction of your personal data if it is incomplete or incorrect (Article 16 of the GDPR),
  • deletion of all or some of your personal data (Article 17 of the GDPR), if the purpose or legal basis for using this data has ceased to exist, e.g. in the event of withdrawal of consent or submission of a justified objection or if the personal data has been used unlawfully,
  • restrict the use of your personal data (Article 18 of the GDPR) for the time necessary to decide on the validity of the request to delete or rectify this data or to decide on the validity of the objection you have filed or for the time necessary to establish, pursue or defend your claims;

You may file an objection to the use of your personal data based on our legitimate interest (Article 21 of the GDPR). As a result of the objection filed, we will consider whether, for reasons related to your particular situation, your rights and freedoms take precedence over the protection of the confidentiality of the personal data processed by us.

You may withdraw your consent to the use of your personal data at any time (Article 7 of the GDPR). Withdrawal of consent does not affect the lawfulness of their use based on consent before its withdrawal.

You have the right to lodge a complaint in connection with the use of your data to the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw. You can file a complaint electronically, in writing or orally for the record at the office of the President of the Office.

Changes to the Privacy Policy

We may change and supplement the Privacy Policy as needed. We will inform you about any changes or supplements by posting appropriate information on our websites, and in the case of significant changes, we will inform you directly to the e-mail address provided.