Privacy Policy

1. Privacy policy effective from May 25, 2018

Feminist Fund with its registered office in Warsaw, Al. “Solidarności” 75 app. 35, 00-090 Warsaw, as the Personal Data Administrator, informs about the purposes, methods and scope of processing your personal data. Pursuant to Art. 13 of the GDPR and with a specific principle of respect for privacy, we describe what data we process, what legal bases we use for processing, how long we store your data, and whether and with whom we share it.

2. Methods of processing personal data

We store the personal data we process in electronic form, primarily on rented servers, as well as on laptops and phones. We process data through the civiCRM relationship management system, email, and file storage clouds. We also process data through a software which enables management of electronic agreements. Some data are stored in paper form. Both paper data and digital data are adequately protected by us in accordance with the GDPR, national regulations on maintaining information security, and ISO 27001 family standards.
Entities that need to process personal data administered by us in order to provide services are obliged to implement protection at least equal to the protection we have introduced ourselves on the basis of a personal data entrustment agreement.

3. Purposes and principles of personal data processing

If you are looking for information on our website:
We primarily collect your IP address using cookies in order to better tailor the website to your needs, and for statistical purposes. The legal basis for the processing is the legitimate interest of the controller (GDPR Article 6 par. 1 letter f).

If you leave your contact details in the form:
We collect your e-mail address and personal data (name and surname) in order to send information mailing about the activities of the Fund, including fundraising activities, and process it on the basis of the legitimate interest of the controller (GDPR art.6 par.1 letter f). Your e-mail address is stored in the contact database of the Feminist Fund in civicCRM, to which only persons working in the Fund have access based on written authorizations to process personal data. The external entity processing your e-mail address is the company operating our CRM database, which protects your data on the basis of a personal data entrustment agreement signed with us.
We store the e-mail address until we receive your objection to the following address: kontakt@femfund.pl

If you are the recipient of our activities (including the applicant):
We collect and process the following personal data concerning you: name, telephone number, and e-mail address. The purpose of data processing is to organize networking, support, educational, and promotional events of the Fund and the implementation of the grant competition, i.e. collection of applications, analysis of projects, selection of applications that will receive funding, evaluation. We process the data on the basis of Article 6 par.1 letters b. and f. of the GDPR, i.e. in order to perform a contract between the parties and due to the legitimate interest of the controller. We also process your sensitive data (if provided in the form) on the basis of art. 9 par. 2 letter d of the GDPR, i.e. processing is carried out as part of an authorized activity carried out with appropriate safeguards by a foundation, association or other non-profit entity with political, philosophical, religious or trade union purposes; provided that the processing concerns only members or former members of this entity or persons who maintain regular contacts with it in connection with its purposes and that personal data are not disclosed outside this entity without the consent of the data subjects.
We share your data with the company operating the database and providing IT services for us.
We process your data for 5 years from the end of the year in which the event or grant competition took place.

If you are our grantee or recipient:
We collect and process the following personal data concerning you: name and surname, address of residence, telephone number and e-mail address, PESEL number, ID number, bank account number. The purpose of processing is to carry out the grant procedure: making a donation/grant, ongoing contact, summary and settlement of the donation/grant, evaluation. We process data on the basis of article 6 par. 1 letter b of the GDPR, i.e. an agreement between the parties and article 6 par. 1 letter f of the GDPR, i.e. the legitimate interest of the controller. We share your data with the company operating the database and providing IT services for us, software providing e-signature services (electronic agreements), as well as the company providing accounting and human resources services for us.
We store your data for a period of 5 years after the end of the year in which the grant/donation was provided, due to the requirements of the Accounting Act.

If you donate to us:
You can support the Feminist Fund financially by donating through PayU or by bank transfer.
In the case of a donation by bank transfer, we process the personal data provided to us by the bank, i.e.: name and surname, account number, donation amount, address. The legal basis for the processing is article 6 par. 1 letter b of the GDPR, i.e. an agreement between the parties and article 6 par. 1 letter c of the GDPR, i.e. the implementation of a legal obligation.
We may use the data received in the transfer to send you thanks for the donation and other information regarding the donation. If you do not wish to receive thanks, send us an objection to the following address: wspieram@femfund.pl.
In the case of a donation made through the PayU system, we collect: name and surname, e-mail address, amount of the donation and, optionally, postal address and phone number. This is necessary to perform the contract and fulfill our legal obligations. Providing mandatory data is voluntary, but necessary to make a donation.
We may use the mandatory information to process donations, including the sending of a thank you for a donation and other information regarding the donation. If you do not wish to receive thanks, send us an objection to the following address: wspieram@femfund.pl.
Your data may be accessed by employees on the basis of written authorizations to process personal data, as well as a bank, the PayU system, a company operating a database and providing IT services for us (and an accounting and human resources office under a personal data processing agreement).
We process the data of persons supporting us with donations for 5 years from the end of the year in which we recorded the last payment.

If your data was provided in the grant or recruitment form as the data of a referrer:
We collect and process the following personal data concerning you: name, telephone number, and e-mail address. This data was provided to us by a third party, whom we informed about the need to obtain your consent. The purpose of data processing is to analyze and process an application for a grant under the Fund’s grant program or to conduct recruitment for work in the Fund. We process data on the basis of article 6 par. 1 letter f of the GDPR, i.e. due to the legitimate interest of the controller. We share your data with the company operating the database and providing IT services for us.
We process your data for 30 days from the end of the month in which recruitment or processing of the grant application ended.

4. Your rights in connection with the processing of personal data

You have the right to:

requests from the Personal Data Controller to access your personal data, receive a copy of your data, rectify it, delete or limit the processing of personal data,
object to further processing, if you do not want us to process your data for archiving and contact purposes on the basis of a legitimate interes,
if it is found that the data is processed in violation of the law – bring a complaint to the supervisory body – the President of the Office for Personal Data Protection.

5. Other information

Your personal data are not subject to automated decision-making, including profiling.
Providing data is voluntary, but necessary for the implementation of individual activities of the Feminist Fund. In the event of failure to provide data, it will not be possible to use these activities.
Your data will not be transferred outside the European Economic Area. The data will also not be transferred to international organizations.