Privacy Policy

1. Privacy policy effective from May 25, 2018
Feminist Fund with its registered office in Warsaw, 00-687 at Wspólna 61/102, as the Personal Data Controller, informs about the purposes, methods, and scope of processing your personal data. Pursuant to Art. 13 of the GDPR and with a specific principle of respect for privacy, we describe what data we process, what legal bases we use for processing, how long we store your data, and whether and with whom we share it.

2. Methods of processing personal data
We store the personal data we process in electronic form, primarily on rented servers, as well as on laptops and phones. We process data through the civiCRM relationship management system, email, and file storage clouds. Some data are stored in paper form. Both paper data and digital data are adequately protected by us in accordance with the GDPR, national regulations on maintaining information security, and ISO 27001 family standards.
Entities that need to process personal data administered by us in order to provide services are obliged to implement protection at least equal to the protection we have introduced ourselves on the basis of a personal data entrustment agreement.

3. Purposes and principles of personal data processing

If you are looking for information on our website:
We primarily collect your IP address using cookies in order to better tailor the website to your needs and for statistical purposes. The legal basis of the processing of data is the justified interest of the controller (article 6 paragraph 1 (f).

If you leave your contact details in the form:
We collect your e-mail address and personal data (name and surname) in order to send mailing informing about the activities of the Fund, including fundraising activities, and process it on the basis of the legitimate interest of the controller (GDPR article 6 paragraph 1 (f). Your e-mail address is stored in the contact database of the Feminist Fund in civicCRM, to which only persons working in the Fund have access based on written authorizations to process personal data. The external entity processing your e-mail address is the company operating the database Grow Brand Sp. z o.o., who protects your data on the basis of a personal data entrustment agreement signed with us.
We store the e-mail address until we receive your objection to the following address: kontakt@femfund.pl.

If you are the recipient of our activities (including the applicant):
We collect and process the following personal data concerning you: name, telephone number, and e-mail address. The purpose of data processing is to organize networking, support, educational, and promotional events of the Fund and to carry out tasks related to the grant contest, i.e. collection of applications, analysis of projects, selection of applications that will receive funding, evaluation. We process data on the basis of article 6 paragraph 1 letter f of the GDPR, i.e. due to the legitimate interest of the controller. We provide your data to the company operating database and providing IT services (Grow Brand Sp. z o.o.).
We process your data for 5 years from the end of the year in which the event or grant competition took place.

If you are our grantee or recipient:
We collect and process the following personal data concerning you: name and surname, address of residence, telephone number and e-mail address, PESEL number, bank account number. The purpose of the processing is the implementation of the grant procedure: donation/grant, ongoing contact, summary and settlement of the donation/grant, evaluation. We process data on the basis of article 6 paragraph 1 letter b of the GDPR, i.e. the agreement between the parties and article 6 paragraph 1 letter f of the GDPR, i.e. the legitimate interest of the controller. We share your data with the company operating database and providing IT services for us (Grow Brand Sp. z o.o.) and the company providing accounting services to us (PRONGO.PL Sp. z o.o.).
We store your data for a period of 5 years after the end of the year in which the grant/donation was provided, due to the requirements of the Accounting Act.

If you donate to us:
You can support the Feminist Fund financially by donating through PayU or by bank transfer.
In the case of a donation by bank transfer, we process the personal data provided to us by the bank, i.e.: name and surname, account number, donation amount, address. The legal basis for such data processing is article 6 paragraph 1 letter b of the GDPR, i.e. the agreement between the parties and article 1 letter c of the GDPR, i.e. the implementation of a legal obligation.
We may use the data received in the transfer to send you thanks for the donation and other information regarding the donation. If you do not wish to receive thanks, send us an objection to the following address: wspieram@femfund.pl.
In the case of a donation made through the PayU system, we collect: name and surname, e-mail address, amount of the donation and, optionally, postal address and phone number. This is necessary to perform the contract and fulfill our legal obligations. Providing mandatory data is voluntary, but necessary to make a donation.
We may use the mandatory information to process donations, including the sending of a thank you for a donation and other information regarding the donation. If you do not wish to receive thanks, send us an objection to the following address: wspieram@femfund.pl.
The entities that have access to your data are: employees on the basis of written authorizations to process personal data, as well as bank, PayU system, the company operating database and providing IT services for us (Grow Brand Sp. z o.o.) and an accounting office (PRONGO.PL Sp. z o.o.) on the basis of a personal data processing entrustment agreement.
We process the data of persons supporting us with donations for 5 years from the end of the year in which we recorded the last payment.

If your data was provided in the grant or recruitment form as the data of the referrer:
We collect and process the following personal data concerning you: name, telephone number, and e-mail address. This data was provided to us by a third party, whom we informed about the need to obtain your consent. The purpose of data processing is to analyze and process an application for a grant under the Fund’s grant program or to conduct recruitment for work in the Fund. We process data on the basis of article 6 paragraph 1 letter f of the GDPR, i.e. due to the legitimate interest of the controller. We provide your data to the company operating the database and providing IT services (Grow Brand Sp. z o.o.).
We process your data for 30 days from the end of the month in which recruitment or processing of the grant application ended.

4. Your rights in connection with the processing of personal data
You have the right to:

• request from the Personal Data Controller to access your personal data, receive a copy of your data, rectify it, delete, or limit the processing of personal data,
• object to further processing, if you do not want us to process your data for archiving and contact purposes on the basis of a legitimate interest,
• if it is found that the data is processed in violation of the law – bring a complaint to the supervisory body – the President of the Office for Personal Data Protection.

5. Other information

• Personal data are not subject to automated decision-making, including profiling.
• Providing data is voluntary, but necessary for the implementation of individual activities of the Feminist Fund. In the event of failure to provide data, it will not be possible to use these activities.
• Your data will not be transferred outside the European Economic Area. The data will also not be transferred to international organizations.