1. Data controller
The controller of personal data processed in connection with this website is the Stock Foundation (Fundacja Stock), with its registered office in Lublin:
Fundacja Stock
ul. Spółdzielcza 6, 20-402 Lublin
KRS 0000980058 · NIP 9462718618
wolontariat@fundacjastock.pl · +48 538 183 916
2. Purposes of processing
Personal data are processed for the following purposes:
- Handling enquiries sent to us directly by e-mail or phone — including questions about the foundation’s activities, partnerships, volunteering and donations.
- Analysing website traffic and optimising our content.
- Ensuring the security of the website.
- Managing cookie consents and remembering your preferences.
Providing your data is voluntary; however, if you contact us, it is necessary to handle your enquiry. We do not make automated decisions producing legal effects based on the data collected, nor do we carry out profiling.
3. Scope of the data processed
Data provided voluntarily when you contact us:
If you contact us directly (by e-mail or phone), we process your e-mail address, phone number, name and any other information you voluntarily provide in the conversation or in the message.
Data collected automatically (analytics and logs):
The IP address of your device, information about your browser and operating system, time spent on the site, pages visited, the source of your visit and your cookie preferences.
4. Legal basis of processing
- Art. 6(1)(a) GDPR (consent) — for optional analytics cookies (Google Analytics), installed only if you agree.
- Art. 6(1)(f) GDPR (legitimate interest) — for handling correspondence, ensuring the security of the website, remembering your privacy preferences (necessary entries) and pursuing potential claims.
5. Recipients of the data
The website operates thanks to external service providers. Your data may be entrusted to the following categories of entities:
- Hosting and technical service providers maintaining the website.
- E-mail service providers handling our correspondence.
- Analytics providers: Google Ireland Limited (Google Analytics, Google Search Console).
- Entities authorised to provide accounting and legal services to the foundation.
6. Analytics tools and cookies
Necessary cookies and local storage:
Required for the website to work properly — they remember your selected language (the “fs-lang” entry) and your decision regarding cookies (the “fs-consent” entry). They are stored in your browser’s local storage on your device and cannot be switched off.
Analytics cookies:
With your consent, we use Google Analytics 4, provided by Google Ireland Limited, to analyse website traffic. The tool does not log full IP addresses of EU users, and the reported data are statistical in nature. Analytics entries are installed only after you give consent in the cookie banner; consent can also be refused.
Google Search Console:
We use this tool to monitor the site’s presence in search results and to optimise content. It does not involve installing any cookies on your device.
We do not use marketing or advertising cookies. You can manage your preferences at any time in the cookie banner or through your browser settings.
7. Transfers outside the EEA
In connection with the use of Google tools, your data may be transferred to third countries (e.g. the USA). These entities ensure an adequate level of data protection through participation in programmes such as the EU–US Data Privacy Framework.
8. Your rights
You have the right to:
- Access your data and have it rectified.
- Have your data erased or restrict its processing.
- Data portability.
- Withdraw your consent to cookies at any time (by clearing your browser data or changing your choice in the banner) — without affecting the lawfulness of processing carried out before the withdrawal.
- Object to the processing of your data.
- Lodge a complaint with the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, Poland.
9. Retention periods
Correspondence is kept for the period necessary to handle the enquiry and then until potential claims become time-barred (as a rule, no longer than 6 years). Preferences saved in your browser’s local storage (language, cookie decision) remain on your device until you delete them. Google Analytics data are deleted automatically after the retention period (a maximum of 14 months).
10. Data security
We apply appropriate technical and organisational measures (including SSL/TLS encryption) to protect the processed data against unauthorised access or loss.
11. Contact
In matters concerning the protection of personal data, please contact us:
Fundacja Stock, ul. Spółdzielcza 6, 20-402 Lublin
wolontariat@fundacjastock.pl
12. Changes to this privacy policy
The controller reserves the right to amend this privacy policy. Changes will be published on this page together with the date of the update. We recommend reviewing this document regularly.