ATTACHMENT NO. 1
TO THE TERMS AND CONDITIONS OF THE WEB SERVICE
Of the Society of African Missions
Charitable-Voluntary Center “Solidarni”
and held projects
of 1 December 2021
PRIVACY POLICY
§1
Main rules
- The service provider assures data protection of its users and protection of data processed in frames of its service
- The service provider ensures appropriate user data protection of data given by the users, and does not share them with any third party, with the only condition of law enforcement, where such is compulsory.
- Those written with a capital letter, have a meaning given to them in Terms & Conditions.
§2
Collecting personal data
- Using of Service by all users does not require logging in, meaning providing username and password
- User may, through the Service, agree to additional ways of contact with the provider – informational or direct marketing (newsletter). User may also sign to other services offered.
§3
Acceptance for data processing – users of service and Organisation beneficiaries
An user voluntarily agrees to processing of personal data in frames of registering forms published on the Organisation’s website and acknowledges following:
On 25. May 2018 there has been Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) introduced, known as General Data Protection Regulation (GDPR), and with relation to pt. 13 of GDPR regulation, African Mission Association – Charitable-Voluntary Center “Solidarni” informs of following:
- African Mission Association – Charitable-Voluntary Center “Solidarni” residing in Borzecin Duzy, ul. Warszawska 826, 05-083 Zaborow, NIP: 1181764189 and REGON: 04001847000044 is the Administrator of personal data provided in this form
- Administrator processes personal data in Poland, ensuring proper protection of data.
- Personal data provided in the form will be processed in specifically given aim in the given module of data saving and for the purpose of appropriate and legitimate service functionality of the Organisation, as well as implementation of your rights and responsibilities as the service user, donor or beneficiary of service performed by the Organisation.
- Legal ground of personal data processing depends on the area of processing, such as:
- Agreement for data processing (GDPR 6.1) – i.e. newsletter
- Realisation of a contract (GDPR 6.1) – i.e. donation
- Necessity of legal responsibility of the Administrator – such as finance and taxes (GDPR 6.1).
- Administrator’s legitimate interest (GDPR 6.1) – i.e. marketing
- You are entitled anytime to withdraw personal data processing agreement, processing which is the ground of the agreement. This may result in some of the services being unavailable.
- Your personal data given in the form will be processed during the time of using the service or being a beneficiary of services provided by the Organisation and will be processed for accounting, legal and archiving reasons. Data will be removed immediately after demanding their removal.
- Your personal data will be available to such subjects: accounting, financial brokers and banking institutions, IT, and legal firms cooperating with the Administration in order to effectively and lawfully run the Organisation.
- According to GDPR regulations, you are entitled to
- Right to access your data and getting their copy
- Right to correcting (amending) and supplementing your personal data
- Right to remove or restrict data processing
- Right to place objection against data processing
- Right to transferring data
- Right to placing a complaint to a supervisory authority, who in Poland is President of Personal Data Protection Office, and every other supervisory authority called for GDPR purpose.
- All motions, questions and demands related to your personal data processing should be directed to our mailbox: solidarni@sma.pl
- In order to perform a high standard of service, the Organisation uses other providers i.e. for IT support purposes. Due to this fact your personal data may be transferred outside of the European Union. The Organisation ensures that in such cases transfer of data is placed in the form of a special business agreement between the Organisation and such provider, containing standard data protection clauses agreed by the European Commision, or on the basis of related European Commision decision.
- Your data will not be used for profiling or performing automated decision making. That means, that the administrator does not use IT systems to process the data and automatically analyse its content for marketing use.
§4
Information of DONORS personal data processing
African Mission Association – Charitable-Voluntary Center “Solidarni” residing in Borzecin Duzy, ul. Warszawska 826, 05-083 Zaborow, NIP: 1181764189 and REGON: 04001847000044 is the Administrator of personal data provided in this form, whom you can contact via mail or e-mail: solidarni@sma.pl
- Processing of personal data is done on the grounds of:
- GDPR 6.1. Of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016, with the goal of fulfilling Dotpay agreement on payment service
- GDPR 6.1., with the goal of concluding a donation agreement
- GDPR 6.1., with the goal of fulfilling legal responsibilities of the Administrator, i.e. those on accounting and taxes.
or
- GDPR 6.1. – Administrator’s justified interest
- Data is processed in the necessary scope of performing correct DotPay Payment Service (including donation agreement) up to the time of recalling the donation, and in other scope, rightfully with existing law (i.e. tax cases up to 6 years).
- Personal data given in the form are required in order to perform the agreement in accordance with the existing law regulations. Refraining from providing the data would result in no money transfer or no donation agreement performance.
- Donors have rights to accessing their personal data, correction, deletion, transfer or limitation of its processing, as well as objecting towards processing of data, if donors claim that their data are processed unrightfully; they may put a complaint to the President of Personal Data Protection Office.
- All can be managed by sending related claim to the Organisation’s email address: solidarni@sma.pl
- In the case of a Donor agreeing to recurring donations to the Organisation (via recurring DotPay payments), Organisation will be storing the information on the Donor’s agreement for the recurring form of payment. The agreement will be stored the whole time of the recurring payment duration, as well as claim aging if a Donor withdraws from this agreement. Additionally the Organisation is obliged, basing on their agreement with DotPay, to transfer to DotPay the information on agreement and sustaining the agreement by the Donor, so that their account can be legally debited with the set amount of donation.
§5
DotPay terms and conditions
Please consider that one of the receivers of your Personal data is DotPay, which is related to the donation, as there is no other possibility to perform the donation, other than via Organisation’s website. Therefore the goal of performing the agreement, Organisation is transferring personal data to the payment broker – DotPay, in frames of GDPR
- Because of performing the payments via means given by DotPay, the service itself is provided by DotPay sp. Z o.o. Residing in Krakow (30-522), ul. Wielicka 72. Payment authorisation is done as with Donor’s bank requirements or credit/debit card issuer.
- With DotPay payment service performance (that is donation agreement), both credit card payment and bank transfer is done via DotPay settlement centre., as in the service terms and conditions available at: www.dotpay.pl
- Current payment terms and conditions as privacy policy of DotPay will be availabe during the payment itself.
- In order to fulfil the duty, despite the previous statement, we give the note available as per 1. 12. 2021.
- DotPay payment terms and conditions https://ssl.dotpay.pl/t2/cloudfs1/magellan_media/regulamin_platnosci
- Cookies policy and privacy policy of DotPay http://www.dotpay.pl/polityka-plikow-cookies/
- Information clause of DotPay, that becomes a separate Amdinistrator of personal data the moment you are transferring money via DotPay to the Organisation https://ssl.dotpay.pl/t2/cloudfs1/magellan_media/rodo
- DotPay is not collecting any additional charges for the money transfer. All additional charges may come from Donor’s bank charges only.
- Credit card and electronic bank transfer settlement are done via DotPay.pl
- In an agreed way, the Organisation provides information to the donor containing chosen way of DotPay payment service (one-time or recurring), that will allow to determine the donation. Additionally the information should contain:
-
- Date of recurring payment ending, as well as last debited payment by DotPay
- Price of overall amount of donation given to the Organisation, being the sum of all recurring donations
- Single amount of donation in recurring donations if the amount is fixed or
- Information on the recurring amount calculation if there is no possibility to provide an upfront amount.
§6
Cookies
- African Mission Association – Charitable-Voluntary Center “Solidarni” residing in Borzecin Duzy, ul. Warszawska 826, 05-083 Zaborow, NIP: 1181764189 and REGON: 04001847000044 sharing content in frames of hereby service (“Service”) uses cookies files, that is files containing IT data, especially text files, which are stored on the end device of a Service user and are aimed for usage of Service’s websites. Usually they contain the name of the website they originate from, time of their storage on end device and unique number.
- Cookies are used for:
- Adjusting content of Service webpages to user’s preferences as well as optimisation of using webpages; especially they let recognise the end device of Service user and display the website correctly to their individual needs.
- statistics creation, which help understand how the Service users are using the websites, which helps in improving their structure and content.
- Maintaining session of the Service user (after logging in), thanks to which the user does not need to log onto each separate subsection of the Service.
- Providing users advertisements suited to their interests
- In frames of the service there are two types of cookies used: session cookies and persistent cookies. Session cookies are temporary files that are stored on an end device of the user up to logging out, leaving a website or switching off the software (web browser). Persistent cookies are stored on an end device of the user set in cookies files parameters for a specific period of time or up to their removal by the user.
- In frames of the Service there are following types of cookies used:
- “Essential” cookies, allowing usage of services available within the Service. I.e. authentication cookies used for authentication within the Service
- Security cookies, ie. used for authentication misusage within the Service
- “Efficiency” cookies, allowing gathering of data on the ways of using Service’s websites
- “Functional” cookies, allowing “remembering” chosen settings and interface personalisation of a user, ie. in frames of chosen language or region of user’s origin, font size, website’s layout etc.
- “Ad” cookies, allowing providing ad content to users better shaped to their preferences.
- In many cases software used for browsing (a browser) allows default cookies storage on user’s end device. Service users may change those settings anytime. Settings can be changed in the way that blocks automatic provision of cookies in browser settings, or inform the user every time when cookies are being stored on a device. Specific information on ways of cookies maintenance are available in software settings (that is web browser).
- Service Operator informs that limitation of cookies usage may affect some of the functionalities of the Services websites.
- Cookies stored on user’s end device may also be used by Service operator, advertising and partners.
- In frames of using cookies files, Service Provider may gather following anonymous (unable to identify) information:
– User
-
-
- Location of terminal used
- Device IP
- Host names
- Connection speed
- Time spent in the Service
- Type of browser and its language
- Ways of entering website and its display
- Subsections visited