PRIVACY

Privacy 
Policy

Privacy Policy of the HAKOACH 
Association

§ 1. General provisions

  1. This Privacy Policy sets out the rules for the processing and protection of personal data of Users using the website operated by the HAKOACH Association (hereinafter referred to as the "Website").
  2. The owner and administrator of the Website is the HAKOACH Association (hereinafter referred to as the Website Administrator).
  3. Data processing is carried out in accordance with the provisions of:
    GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.  

§ 2. Personal data administrator

  1. The personal data controller is the President of the HAKOACH Association (hereinafter referred to as the "Personal Data Controller").
  2. Contact with the Administrator is possible:
    - by e-mail: hakoach.lodz@gmail.com - in writing: to the address of the Association's registered office 

§ 3. Joint data controllers

  1. In the scope of using external services, data controllers may also be:
    - Meta Platforms Technologies Ireland Limited (Facebook, Instagram)
    - Google Ireland Limited (e.g. YouTube, Google Analytics)
  2. These entities act as independent controllers or joint controllers within the meaning of Article 26 of the GDPR 

§ 4. Purposes of data processing

Users' personal data are processed for the purpose of:

  1. promotion and implementation of community activation activities and programs;
  2. communicating with Users (comments, private messages, reactions);
  3. analysis of User activity on the Website;
  4. optimizing the content published on the Website. 

§ 5. Legal basis for processing

  1. The basis for data processing is:
    - Article 6 paragraph 1 letter f of the GDPR – legitimate interest of the Controller (communication and promotion of activities),
    - Article 6 paragraph 1 letter a of the GDPR – User's consent (if expressed).
  2. Consent may be withdrawn at any time. 

§ 6. Scope of data processing

The Administrator may process the following data:

  1. profile data: name, surname, username, profile photo;
  2. content published by the User;
  3. activity statistics. 

§ 7. Data source

  1. Data may be obtained:
    - directly from the User,
    - from service providers (e.g. Meta, Google). 

§ 8. Data recipients

  1. Data may be transferred to:
    - entities authorized under the law,
    - service providers (Meta, Google – in accordance with their regulations),
    - other Users (in the scope of public content). 

§ 9. Transfer of data outside the EEA

  1. The Website Administrator generally does not transfer data outside the European Economic Area (EEA).
  2. Service providers (Meta, Google) may transfer data outside the EEA using appropriate safeguards (e.g. standard contractual clauses). 

§ 10. Data storage period

  1. The data is stored for the period necessary to achieve the purposes of processing or until:
    - an objection is raised,
    - consent is withdrawn,
    - data is deleted by the User.
  2. Data:
    - in comments - until they are deleted,
    - statistical - in accordance with the rules of service providers. 

§ 11. User Rights

The user has the right to:

  1. access to data,
  2. rectification of data,
  3. deletion of data,
  4. processing restrictions,
  5. filing an objection,
  6. withdrawal of consent,
  7. lodging a complaint to the President of the Personal Data Protection Office ( www.uodo.gov.pl ). 

§ 12. Joint data controllership (Meta and Google)

  1. The Data Controller and Meta and Google are joint controllers of statistical and analytical data.
  2. Joint control includes the analysis of User activity.
  3. Detailed information:
    - Meta: https://www.facebook.com/legal/terms/page_controller_addendum/
    - Google: https://support.google.com/analytics/answer/9012600  

§ 13. Data security

  1. The Administrator uses appropriate technical and organizational measures to protect data.
  2. Service providers are responsible for the security of data within the scope of their services. 

§ 14. Service Provider Policies

The principles of data processing by suppliers are available at:

§ 15. Voluntary provision of data

Providing data is voluntary, but may be necessary to use certain functions of the Website.

§ 16. Final provisions

  1. In matters not regulated, the provisions of law and the regulations of external services shall apply.
  2. The Administrator reserves the right to change this Privacy Policy.
  3. Any questions should be directed to: hakoach.lodz@gmail.com