In order to fulfil our information obligation as the controller of your personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “GDPR”), we hereby inform you that:

1. The Controller of your personal data is the Omenaa Foundation with its registered office in Warsaw, at ul. Heleny Kozłowskiej 1 lok. 43, 00-710 Warsaw, entered into the register of associations, other social and professional organizations, foundations and independent public healthcare facilities by the District Court for the capital city of Warsaw in Warsaw, 13th Commercial Division of the National Court Register, KRS number: 0000509539, REGON: 147357946, NIP: 5272719133 (hereinafter referred to as the “Controller” or “Foundation”).

2. You can contact the Controller via traditional mail (mailing address: ul. Heleny Kozłowskiej 1 lok. 43, 00-710 Warsaw), as well as via e-mail (e-mail address:  [email protected] ).

3. Our main website (https://omenaafoundation.com/) allows you to contact us via the form available in the “Contact” tab. Submitting an inquiry using the form requires providing contact information: name, surname, and email address. Of course, other personal data may be included in the message.

4. You can also contact us by traditional mail sent to the Foundation’s address. In this case, we will receive your address details.

5. We understand that any messages sent to us via the contact form or by traditional mail constitute your consent to the processing of the personal data contained therein and your address details by the Foundation – we may therefore process them pursuant to Article 6(1)(a) of the GDPR. The data will also be processed by the Foundation pursuant to Article 6(1)(f) of the GDPR for the purpose of:

a. to respond to the message received and for further communication, if necessary (data processing is in our and your legitimate interest – it enables communication between us),

b. adding your data to our contact database (it is in our legitimate interest to be able to contact people we already know),

c. in the case of traditional correspondence – for the purposes of our documentation regarding the sent and received mail (it is in our legitimate interest to document the receipt and dispatch of correspondence in accordance with internal office rules).

6. In connection with the processing of your personal data by the Controller for the above-mentioned purposes, they may be transferred to the Foundation’s collaborators and entities providing legal, marketing, accounting, IT, postal, courier and other services to the Controller to the extent necessary to settle the matter to which the exchange of correspondence relates.

7. Our main website also allows you to make payments to the Foundation using a system provided by a payment service provider. To enable these payments, the Administrator will collect your email address. The legal basis for processing your personal data in this case is Article 6(1)(f) of the GDPR, i.e., the Administrator’s legitimate interest in enabling you to make payments to the Foundation.

8. To the extent referred to in paragraph 7 above, the recipient of your data will be PayPro SA with its registered office in Poznań at ul. Kanclerska 15, 60-327 Poznań, entered into the register of entrepreneurs of the National Court Register maintained by the District Court for Poznań Nowe Miasto and Wilda, 8th Commercial Division of the National Court Register under the KRS number: 0000347935, REGON: 301345068, NIP: 7792369887. In connection with the processing of your personal data by the Controller for the above-mentioned purpose, they may also be transferred to entities providing legal, accounting, IT and other services to the Controller to the extent necessary to execute the payment.

9. Notwithstanding the above, when you visit our websites (https://omenaafoundation.com/, https://rioeducentrum.com/), IT data relating to your visit are automatically collected, in particular:

a. IP address,

b. type of operating system,

c. browser type/type.

Simply visiting our website does not require you to provide any other information or personal data. However, when you visit our website, some data is collected automatically using so-called cookies.

10. Cookies are files sent to your computer or other device while you browse a website. They allow the website to remember and track your preferences. This allows, among other things, to improve search results and ensure the accuracy of the information you see.

11. Cookies do not make any modifications or changes to the settings on your device or software that has been installed on your device.

12. You have the right not to consent to our use of cookies (you can block them). If you wish to block cookies, we recommend selecting the appropriate settings in your web browser.

13. Cookies can usually be deleted from the browser by selecting the “delete history” option and selecting the “check box” to allow cookies, or by blocking the browser from accepting cookies.

14. We would also like to inform you that by using the Foundation’s websites, you consent to our use of cookies. An appropriate message regarding this is automatically displayed each time a user visits the website for the first time. Blocking or deleting cookies may impede the use of the website, and some features may become unavailable.

15. Data collected automatically using cookies will be used by us to analyze user behavior on the website and collect demographic data about users, which allows us to customize the website content and display content about the Foundation on other websites you visit (more below). If you do not consent to such personalization of content, please

changing your browser settings.

16. The technologies we use to track activities undertaken on the website are:

a. Google Analytics (cookies) – website statistics analysis. Google Analytics uses “cookies” technology to analyze traffic sources and how visitors use the website. Google collects data obtained from cookies on its servers and uses this information to create reports and provide other services related to traffic and internet usage. Google may also transfer this information to third parties if required to do so by law or if such third parties process such information on Google’s behalf. This data is used solely for statistical analysis and error correction mechanisms, and therefore, cookie data is not combined in any way with other data you provide to us.

b. Google AdWords (cookies)
Google AdWords uses “cookies” technology to remember which websites you have visited from your device. Google collects data obtained from cookies placed on your devices on its servers and uses this information to display advertisements on other websites you visit.

As advertisers using Google services, we do not have access to the data from cookies stored on your device, but we can send advertisements to recipients of our choice, e.g. to all people who visited our website in the last 7 days.

Google may also transfer this information to third parties if required to do so by law or if such third parties process such information on Google’s behalf. This data serves only as statistical material for us, and we only commission advertising based on aggregate criteria (to specific target groups, not to any specific user). Therefore, cookie data is not combined in any way with other data you provide to us.

c. Facebook Conversion Pixel

Our website uses the so-called “Facebook conversion pixel” from the social network Facebook to manage advertising on Facebook and Instagram and to conduct remarketing activities.

We only receive statistical data from Facebook without any personal reference. This allows us to measure the effectiveness of Facebook and Instagram ads for statistical and market research purposes. If you have a Facebook or Instagram account, please note the privacy notices on the following websites:

– https://www.facebook.com/about/privacy/

– https://help.instagram.com/155833707900388.

The Facebook pixel is designed to track visits and user behavior as they navigate a website. This allows ads to be targeted to those who have visited the website (remarketing) or to specific subpages of the website.

This data only serves as material for statistical analysis, and we only commission advertisements based on aggregate criteria (to specific target groups, not to a specific user), so the data from the Facebook pixel is not combined in any way with other data you provide to us.

17. Your personal data will not be transferred to entities from countries outside the European Union and the European Economic Area or to international organizations.

18. Your personal data will be stored for the period necessary to resolve the matter to which the correspondence relates. Your contact details will remain stored in our contact database (in the case of traditional correspondence, also for the purposes of our documentation of sent and received mail), unless you request their deletion. In such a case, we will immediately delete your data.

However, we may continue to process your personal data if there is a legal basis for doing so arising from our ongoing relationship (in particular, a concluded contract) or for other reasons, which we will inform you about in a separate communication. A request to delete data will also not affect the lawfulness of data processing prior to your request.

19. In cases and to the extent specified in the provisions of the GDPR, you have the right to request from the Controller access to your personal data, their rectification, erasure or restriction of processing, the right to object to the processing, as well as the right to transfer data.

20. If you find any irregularities in connection with the processing of your personal data by the Controller, you have the right to lodge a complaint with the President of the Personal Data Protection Office, whose contact details are available at:

https://uodo.gov.pl/pl/p/kontakt.

21. The personal data covered by this information has (will) been provided by you voluntarily. Providing it is not mandatory.