Privacy Policy and Personal Data Protection

1. Data Controller

The controller of your personal data is the Handicap HERO Foundation, with its registered office in Poznań, entered in the National Court Register under number KRS 0001216227, NIP 7831945468, and REGON 54369793400000.

2. Contact Regarding Personal Data Protection

If you have any questions regarding the protection of your personal data, you may contact the Foundation at:
E-mail: contact@handicaphero.pl
Phone: +48 784 128 268
Correspondence address: Św. Marcin 29/8, 61-806 Poznań

3. Purpose and Legal Basis for Data Processing

a) Data of the Foundation’s beneficiaries

  • providing support in accordance with the Foundation’s statutory objectives;
  • maintaining documentation related to the assistance provided;
  • processing health data in order to ensure appropriate care and support;
  • on the basis of the data subject’s consent (Article 6(1)(a) GDPR) and, in the case of special categories of personal data, Article 9 GDPR.

b) Data of donors and partners

  • accepting and accounting for donations;
  • maintaining contact regarding cooperation;
  • providing information about the Foundation’s activities and events (newsletter);
  • on the basis of consent or for the performance of a contract / the Foundation’s statutory purpose.

c) Data of volunteers and collaborators

  • organizing and settling volunteer activities;
  • ensuring communication within the projects being carried out.

d) Data of website users

  • handling inquiries submitted via the contact form or e-mail;
  • website traffic analysis and cookies.

4. Recipients of Data

Personal data may be disclosed to:

  • entities cooperating with the Foundation (e.g. the accounting office, IT service providers, therapists, doctors);
  • public authorities, where required by law;
  • payment operators and banks for the purpose of processing donations;
  • persons authorized by the Foundation to process data as part of their official duties.

5. Data Retention Period

Personal data will be retained for as long as necessary to fulfill the purposes for which it was collected and, thereafter, in accordance with applicable law or until consent is withdrawn.

6. Place of Storage of Paper Documentation

a) Due to the fact that the Foundation uses a so-called virtual registered office address, which does not allow for the physical storage of documentation, some of the Foundation’s documents are stored outside the registered office address disclosed in the National Court Register.

b) The Foundation’s paper documentation, in particular:

  • statutory and organizational documents;
  • documentation relating to the Foundation’s beneficiaries;
  • documentation containing personal data, including special categories of personal data (health data), is stored at the place of residence of an authorized person – a member of the Foundation’s Management Board acting on behalf of the Personal Data Controller.

c) The place where the documentation is stored meets the requirements set out in Article 32 of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and has been secured by applying appropriate technical and organizational measures, in particular:

  • storing documents in a locked cabinet used exclusively for the Foundation’s documentation;
  • restricting access to the documents solely to persons holding written authorization to process personal data;
  • protecting the documents against access by third parties, including household members;
  • keeping the Foundation’s documentation separate from private documents;
  • protecting the documentation against destruction, loss, or damage.

d) The person at whose place of residence the documentation is stored is obliged to maintain the confidentiality of personal data and to process such data only to the extent necessary to achieve the Foundation’s statutory objectives.

e) In the event of a change in the place where the documentation is stored, the Personal Data Controller shall make the appropriate update to this Policy and to the Record of Processing Activities.

7. Rights of Data Subjects

Each data subject has the right to:

  • access their personal data;
  • have their personal data rectified;
  • have their personal data erased (“the right to be forgotten”);
  • restrict the processing of their personal data;
  • receive their personal data in a portable format;
  • withdraw their consent at any time;
  • lodge a complaint with the President of the Personal Data Protection Office.

8. Voluntary Provision of Data

Providing personal data is voluntary; however, it is necessary for the performance of certain activities of the Foundation (e.g. making a donation, registering as a volunteer, participating in an event, or contacting the Foundation via the contact form).

9. Cookies and Newsletter

The Foundation’s website uses cookies to ensure the proper operation of the website, analyze traffic, and customize content.

Users may change their cookie settings in their browser at any time.

The Foundation’s newsletter is sent only to users who have given their consent, and they may unsubscribe at any time.

10. GDPR Clause for the Contact Form

“I consent to the processing of my personal data provided in the contact form by the Handicap HERO Foundation for the purpose of responding to my inquiry and sending me a prize for participating in the ‘1000 Clubs – 1000 Hearts. Share Goodness. Pass It On’ campaign. Providing personal data is voluntary. I have the right to withdraw my consent at any time.”

Scroll to Top