Privacy Policy

information clauses regarding the processing of personal data in connection with the use of the 8Marca Foundation's websites

This Privacy Policy contains information on the processing of personal data in connection with the use of the website maintained by the 8Marca Foundation, operating at the following url:8marca.org

The Privacy Policy contains information required by the provisions of Regulation (EC) No 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).

The document contains the following information clauses regarding the processing of personal data.

• Visiting and browsing the site.

• Visiting and downloading materials from the website.

• Registration and participation in events.

Each clause indicates the purpose and duration of data processing. Below the clauses, common information for all data processing cases is provided, including data recipients, profiling, information on rights, and instructions for data deletion.

1. Personal data administrator

The operator of the website operating at the following url address:8marca.organd the Personal Data Administrator is: Fundacja 8Marca, ul. Kościuszki 4, 37-611 Cieszanów (Podkarpacie)

Operator's email contact address:rodo@8marca.org

The Operator is the Administrator of your personal data in relation to the data provided voluntarily on the website.

In the case of social media profiles linked to our website, in accordance with the case law of the Court of Justice of the European Union, we are a joint controller of personal data together with the provider of the social media service on which the profile operates.

Details regarding the processing of personal data by individual social media providers we use are available below:

• Facebook https://pl-pl.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0,

• LinkedIn https://pl.linkedin.com/legal/privacy-policy?_l=pl_PL,

• Instagram https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect,

• YouTube i Google https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect.

The website operator uses, among others, the following data protection methods:

• The areas where you log in and enter personal data are protected at the transmission layer (SSL certificate). This means that personal data and login information entered on the website are encrypted on the user's computer and can only be read by the target server.

• The operator periodically changes its administrative passwords.

• An important element of data protection is the regular updating of all software used by the Operator to process personal data, which in particular means regular updates of programming components.

2. Data processed in connection with visiting the website

The website is hosted (technically maintained) on the operator's servers: wix.com

To ensure technical reliability, the hosting company maintains server-level logs. The following may be recorded:

• resources specified by the URL identifier (addresses of requested resources – pages, files),

• time of arrival of the request,

• time of sending the response,

• name of the client station – identification performed via the HTTP protocol,

• information about errors that occurred during the execution of the HTTP transaction,

• URL address of the page previously visited by the user (referrer link) – if the Website was accessed via a link,

• information about the user's browser,

• IP address information,

• diagnostic information related to the process of self-ordering services via the website's registers,

• information related to the handling of e-mail addressed to the Operator and sent by the Operator.

a. Data Information about user behavior on the website may be subject to logging in. The above-mentioned data is used for website administration purposes. Cookies and similar data about user activity or devices are also stored.

b. The data controller is the 8Marca Foundation, ul. Kościuszki 4, 37-611 Cieszanów,rodo@8marca.org

c. We process data for the following purposes:

​i. enabling convenient use of the website

ii. monitoring abuse,

iii. providing information about the activities and opportunities for cooperation and providing support to the 8Marca Foundation

iv. conducting statistics, measuring quality and effectiveness,

d. The basis for data processing is the necessity to achieve the above-mentioned purposes, which result from the legitimate interests of the controller.

e. Legitimate interests consist in achieving the statutory objectives of the 8Marca Foundation described in the foundation's statute and enabling the proper functioning of the website

f. The Administrator may disclose data to other recipients only at the request of entities authorized to do so by law or when it is necessary to achieve the above-mentioned purposes, e.g. to entities providing hosting, IT services or other technical support.

g. The Administrator stores data only for the time necessary to achieve the above-mentioned purposes, no longer than until the objection to processing is raised.

3. Data processed in connection with visiting and downloading materials from the website

The website collects information provided voluntarily by the user, including personal data, if provided.

The website may save information about connection parameters (time stamp, IP address).

In some cases, the website may store information to facilitate linking the data in a form with the email address of the user completing the form. In such cases, the user's email address appears within the URL of the page containing the form.

Data submitted in forms is processed for the purpose required by the specific form's function, for example, to monitor and generate statistics on the number of downloads of materials posted on the website. The context and description of each form clearly indicate its purpose.

a. Data: user's email address, IP addresses, cookies and similar data about user activity or devices.

b. The data controller is the 8Marca Foundation, ul. Kościuszki 4, 37-611 Cieszanów,rodo@8marca.org

c. We process data for the following purposes:

​i. enabling convenient use of the website

ii. monitoring abuse,

iii. providing information about the activities and opportunities for cooperation and support for the 8Marca Foundation,

iv. keeping statistics, measuring quality and effectiveness, creating archives

d. The basis for data processing is the necessity to achieve the above-mentioned purposes, which result from the legitimate interests of the controller.

e. Legitimate interests consist in achieving the statutory objectives of the 8Marca Foundation described in the foundation's statute and enabling the proper functioning of the website.

f. The Administrator may disclose data to other recipients only at the request of entities authorized to do so by law or when it is necessary to achieve the above-mentioned purposes, e.g. to entities providing hosting, IT services or other technical support.

g. The Administrator stores data only for the time necessary to achieve the above-mentioned purposes, no longer than until the objection to processing is raised.

4. Data processed in connection with registration or participation in events

a. Data: name and surname, e-mail address, name of company/institution/organization/editorial office/university, position/student.

In some cases, this also includes country, postal code, city, province, landline phone number, mobile phone number, and login details (email address and password). A photo may be required for certain individuals and events.

b. The data controller is the 8Marca Foundation, ul. Kościuszki 4, 37-611 Cieszanów. In the case of an event co-organized by the 8Marca Foundation, the Joint Controllers are the entities indicated in the regulations of the given event and its website.

c. Data will be processed for the following purposes:

 i. registration for an event,

ii. identity verification upon entry to the venues where the event will take place and issuance of an appropriate ID badge,

iii. granting access to the broadcast and retransmission of the event;

iv. marketing and communication by the 8Marca Foundation with the participant, in the form of written or electronic correspondence or using telecommunications devices (telephones, text messages) – only if there is a legal basis for such action,

v. keeping statistics, measuring quality and effectiveness,

vi. handling complaints and securing claims.

d. Providing data is necessary to participate in the event and communicate with participants, which constitutes the legitimate interest of the 8Marca Foundation. In the case of certain data or specific types of processing that cannot be deemed necessary to fulfill the above-mentioned purposes, or for purposes that cannot be deemed sufficiently justified – indicated separately in the appropriate data field or in the consent declarations at the end of the registration form – the basis for processing will also be the participant's consent.

e. Legitimate interests consist in ensuring communication with participants and proper preparation of the event, adapted to the number of participants, as well as in continuously improving the quality, increasing the availability of events and the number of event participants.

f. The Administrator does not share data with other entities, with the exception of events of which it is a Co-organizer.

g. The Administrator stores data only for the time necessary to achieve the above-mentioned purposes, no longer than until the objection to processing is raised.

h. Providing data is voluntary, but necessary to register for an event. Failure to provide the required data will prevent you from completing the registration process and creating an individual account in the event's registration system.

5. Recipients of personal data

External service providers involved in the processing of website users' personal data are identified below. These are entities that enable the operation of the Foundation's website, such as hosting providers, cloud server and service providers, technical support, IT solution providers, and subcontractors. Some personal data processing operations may involve transferring personal data to third countries.

• Wix.com Ltd, Namal 40, 6350671 Tel Aviv, Israel

• Google Ireland Limited Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

The website operator uses statistical analysis of website traffic through Google Analytics (Google Inc., based in the USA). The operator does not transfer personal data to the operator of this service, only anonymized information. The service relies on the use of cookies on the user's end device. In terms of information about user preferences collected by the Google advertising network, the user can view and edit information derived from cookies using the following tool:https://www.google.com/ads/preferences/

In addition to the above-mentioned cases, the operator may transfer users' personal data to third countries in connection with the use of tools other than those mentioned above, which utilize resources located in third countries, in particular the U.S. The providers of these tools guarantee an adequate level of personal data protection through appropriate compliance mechanisms provided for by the GDPR, in particular through the use of standard contractual clauses.

6. Profiling

The Administrator does not make decisions regarding website users or event participants based solely on automated processing, including profiling, that would produce legal effects or similarly significantly affect website users or event participants.

7. Information about your rights

In connection with the processing of personal data, the user (data subject) has the following rights:

 i. the right to request access to data,

ii. the right to request rectification of data;

iii. the right to request the deletion of data,

iv. the right to request data transfer,

v. the right to request restriction of data processing,

vi. the right not to be subject to automated decision-making, including profiling,

vii. the right to object to the processing of personal data,

viii. the right to withdraw consent at any time (e.g. by reporting to the following address:rodo@8marca.org) without affecting the lawfulness of processing based on consent before its withdrawal,

ix. the right to lodge a complaint regarding the processing of personal data with the President of the Personal Data Protection Office or another competent supervisory authority.

If you have any questions or comments regarding the processing of personal data on the websites or in connection with the services available through them, you can contact the data controllers at:rodo@8marca.org .

8. Instructions for deleting personal data

a. The User has the right to request the deletion of their personal data processed by the Administrator. A request for deletion should be sent to:rodo@8marca.orgTo expedite the request processing, the user may specify their request, indicating, for example, that they wish to delete their data or no longer wish to receive information related to the statutory purposes of the 8Marca Foundation. In the absence of a clear statement regarding the extent to which personal data is to be deleted, the Administrator may contact the user to confirm whether the user's request constitutes a request to delete their full data. The Administrator will respond to the above-mentioned request promptly, no later than one month, and if it is impossible to comply, the Administrator will provide a reason. The Administrator is obligated to delete personal data if one of the following circumstances occurs:

i. the data is no longer necessary for the purposes for which it was collected;

ii. the user has withdrawn the consent on which the data processing was based and there is no other legal basis for the processing;

iii. the user has objected to the processing of the data and there are no overriding legitimate grounds for the processing or has objected to the processing of the data for direct marketing purposes;

iv. personal data were processed unlawfully;

v. The Administrator has a legal obligation to delete the data.