Privacy Policy

Introduction

As the Association “Free Belarus Museum,” we take the protection of personal data of our stakeholders and all users of our websites and services seriously.

This document explains how we protect your data and for what purposes we use it.If you have any questions, please contact us at: freebelarusmuseum@gmail.com

Website: freebelarus.museum
Last updated: 10.05.2023

I. Personal Data Controller Information

The controller of your personal data is the Association “Free Belarus Museum,” address: ul. Nowy Świat 33/13, 00-029 Warsaw, entered in the National Court Register (KRS) under no. KRS 0001033578, NIP 5252954842 (hereinafter referred to as the “Association”).

For matters concerning data protection, please contact: freebelarusmuseum@gmail.com.

II. Data Protection Officer

The Association has appointed a Data Protection Officer (DPO). For questions regarding data protection and the exercise of rights related to processing, please contact us by email.

Contact for the Data Protection Officer: NATALLIA ZADZIARKOUSKAYA, email: contact@kupalaucy.pl.

III. Purposes and Legal Bases for Processing Personal Data

We process your data only within the framework of the law and to the extent necessary to achieve statutory objectives and provide services. Below are the main processing scenarios and their legal bases (Art. 6 GDPR):

Informing about the Association’s activities (mailings, announcements, news):
Data: name, surname, gender, email, city, country.
Basis: consent of the individual (Art. 6(1)(a)).

Registration as a supporting member:
Data: name, surname, gender, email, date of birth, phone number, address, amount of paid contributions.
Basis: necessity for the conclusion and performance of a contract/statutory relationship (Art. 6(1)(b)); compliance with legal obligations (contribution records, tax and accounting rules) — Art. 6(1)(c); additional communications — based on consent (Art. 6(1)(a)).

Accounting, archiving, and evidentiary purposes (including donations):
Data: name, surname, gender, email, phone, address, date of birth, donation amount.
Basis: legal obligation (Art. 6(1)(c)) and/or legitimate interest of the controller (Art. 6(1)(f) — confirmation of services/payments, protection of claims).

Order fulfillment in the online store:
Data: name, surname, gender, email, phone, delivery address.
Basis: performance of a contract (Art. 6(1)(b)) and compliance with legal obligations (Art. 6(1)(c)).

Issuing invoices and fulfilling tax obligations:
Data: name, surname/company name, NIP (tax ID), address, email, phone.
Basis: legal obligation (Art. 6(1)(c)).

Agreements for providing exhibition space during events:
Data: name, surname, company name, address, NIP, phone, email.
Basis: performance of a contract (Art. 6(1)(b)) and compliance with legal obligations (Art. 6(1)(c)).

Submission and processing of volunteer applications:
Data: name, surname, gender, email, phone, address.
Basis: consent (Art. 6(1)(a)) and/or steps prior to entering into a contract (Art. 6(1)(b)).

Collecting signatures for petitions:
Data: name, email, phone (if necessary).
Basis: consent (Art. 6(1)(a)).

Recruitment and employment of staff:
Data: name, surname, email, phone, address, employment and education history.
Basis: steps prior to entering into a contract (Art. 6(1)(b)); consent — for additional data not required by law (Art. 6(1)(a)).

Contacts with food sector companies as part of marketing communication:
Data: name, surname, company name, business email, business phone.
Basis: legitimate interest of the controller — pursuing statutory objectives in the public interest (Art. 6(1)(f)).

IV. Cookies

Our website uses cookies — small text files that are stored on your device and can be read by our systems and by partner systems (e.g., Google, Meta/Facebook).Main functions of cookies:
— security and authentication;
— performance and saving settings between visits;
— session status and error diagnostics;
— supporting login without re-entering username/password;
— statistics and analytics (e.g., Google Analytics);
— social features (e.g., Facebook/Meta pixel).

Some cookies are depersonalized — without additional information we cannot identify a user.

On your first visit, we ask for consent to use cookies. You can completely block or limit cookies in your browser settings or enable notifications about each cookie placement. Please note: restricting cookies may reduce website performance (repeated logins, slower loading, limited functionality).

V. Right to Withdraw Consent

If processing is based on consent, you may withdraw it at any time. To do so, simply:
— write to us at freebelarusmuseum@gmail.com;
— use the unsubscribe link at the end of an email;
— delete a posted comment or review.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

VI. Obligation to Provide Data

Providing data is voluntary, but in certain cases it is necessary to deliver services or fulfill your requests, including:
— signing petitions/applications: name and email;
— making an online donation: name, email, and data required by the payment provider;
— receiving news and announcements: name, email; for local news — postal code;
— communication by phone — phone number;
— joining the Association — name, surname, email, phone, address;
— receiving an invoice — data required by tax law (name/company, address, NIP);
— placing an order in the online store — delivery and payment data.

VII. Automated Decision-Making and Profiling

We may use your data for limited profiling (analysis of interactions with our materials, website activity, forms of support, provided name/postal code) for the purposes of personalized communication, verifying supporting membership status, and informing you about events in your region.

We do not make automated decisions concerning you that produce legal effects or similarly significant consequences. Profiling may result in changes to the frequency/content of communication or updates to membership status.

You have the right to object to such a decision and submit a complaint stating your reasons. Contact: freebelarusmuseum@gmail.com. We guarantee that your complaint will be reviewed by an authorized person (not an algorithm).

VIII. Recipients of Personal Data

We use the services of providers to whom data may be transferred when necessary: Adobe Systems Incorporated; Meta Platforms, Inc. (Facebook); Google LLC; Poczta Polska S.A.

In addition, in exceptional cases (legal requirements, decisions of competent authorities), data may be transferred to other entities. Each access request is carefully reviewed to ensure that information is not shared with an unauthorized party.

We never sell or lease personal data or information about visits and traffic on our websites.

IX. Transfer of Data to Third Countries

Your data may be transferred outside the European Economic Area in connection with our activities and/or the provision of services. We comply with GDPR requirements regarding appropriate safeguards. If a country does not provide an adequate level of protection and no other safeguards exist (e.g., standard contractual clauses), the transfer will be carried out only with your explicit and voluntary consent, after prior information about the risks.

We are ready to provide additional explanations regarding data transfers upon your request.

X. Data Retention Periods

We retain data no longer than necessary for the purposes of processing (e.g., for the duration of employment, contract validity, or tax reporting periods). After the required period, the data is irreversibly deleted or destroyed.

XI. Rights of the Data Subject

You have the right:
— to access your data;
— to rectify (correct) your data;
— to erase your data;
— to restrict processing;
— to object to processing;
— to data portability.

These rights are not absolute; in certain cases we may justifiably refuse (for example, where there are compelling legitimate grounds for processing or legal requirements). You may always object to processing for marketing purposes, and we will stop such processing.

You can exercise your rights via email: freebelarusmuseum@gmail.com.

XII. Right to Lodge a Complaint

If you believe that the processing of your data violates the law, you may lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland.

XIII. Final Provisions

In matters not regulated by this Privacy Policy, the provisions of personal data protection law apply. If you have agreed to electronic communication, we will inform you of changes to this Policy by email.

Date of entry of the Association “Free Belarus Museum” in the Register of Associations: 05/05/2023