Dear Sirs
We process your personal data based on the provisions of generally applicable law, including in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter: “RODO”) and the Act of 10 May 2018 on the Protection of Personal Data, as amended (hereinafter: “Data Protection Act”).
Below we would like to present to you the rules according to which we collect and store your personal data, as well as the rights you have in connection with this fact.
What is personal data and what is its processing?
The RODO, in Article 4(1), defines personal data as any information from which an individual can be directly or indirectly identified. These include your name, phone number, email address, IP address, or image. In addition, such data also includes information about your location sent by smartphones, tablets and other electronic devices.
Furthermore, we would like to inform you that according to the RODO, data protection only applies to the data of natural persons, so it does not extend to legal entities.
Processing personal data is basically any action on personal data, whether or not it is done by automated means, such as collecting, storing, capturing, organizing, modifying, viewing, using, sharing, restricting, deleting or destroying.
Who is the Personal Data Administrator?
The Administrator is the entity responsible for the collection of personal data. The Administrator is also the addressee to whom you can address any requests you may have, related
to our collection and processing of your personal data. The administrator of your data is the Play Sustain Foundation with its registered office in Warsaw, 2/168 Bagno Street, 00-112 Warsaw, registered in the register of associations of the National Court Register under, NIP: 525 279 23 16, REGON: 383608319 (hereinafter: the Foundation). The data controller can be contacted by letter or e-mail at hello@playsustain.pl.
The Administrator has appointed a Data Protection Supervisor, who can be contacted by email: lukasz@saran.org.pl or in writing at: Play Sustain Foundation, Data Protection Supervisor, 2/168 Bagno Street, 00-112 Warsaw. The Data Protection Supervisor can be contacted on all matters concerning the processing of personal data and the exercise of rights related to the processing of personal data.
What personal data do we process?
As a general rule, we process personal data only when it is actually necessary to carry out our statutory activities or to perform a contract. In this case, we process the personal data of those who contact the Foundation in order to obtain information about its activities, share comments on its activities, enter into cooperation or participate in initiatives organized by the Foundation, i.e. in particular the following personal data: first and last name, residential address, e-mail address, telephone number.
We do not process data other than those mentioned above. At the same time, we would like to draw your attention to the fact that each time you provide in person, through the Foundation’s website: www.playsustain.pl, an e-mail message or during a telephone conversation information containing your personal data other than those indicated above, it will imply your express consent to our collection and use of such information in the manner specified in this document or specified in the place where the information is disclosed.
On what basis and for what purpose do we process data?
We process your personal data in accordance with the law, in a fair
and transparent manner. We process your personal data on the basis of:
- 1. your voluntary consent (e.g., by directing an email to us or agreeing to receive a newsletter or other form of marketing),
- 2. the execution of the concluded agreement, as well as the start of cooperation or the signing of the agreement,
- 3. the legitimate interests of the Foundation as a Data Controller (e.g. in terms of creating a database, analytical activities, including activities concerning the analysis of the use of products, direct marketing of own products, securing documentation for the purpose of defense against possible claims or for the purpose of asserting claims),
- 4. obligations under the law (e.g. tax law or accounting regulations).
The purposes for which we process your personal data are as follows:
- 1. to ensure the fulfillment of our statutory purposes, e.g. in a situation where you are or become a party to a contract between us we will process only the personal data necessary for its fulfillment, for example it will be your name, telephone number or home or delivery address.
- 2. legitimate interests pursued by the Administrator, which are: execution of contracts and fulfillment of orders, due provision of services to you, keeping statistical data, related to visits to our website www.playsustain.pl, improving our services and matching them to your personalized needs, as well as conducting marketing and self-promotion.
To whom may we share your data?
If you agree, your data will be transferred only to trusted entities
cooperating with us, i.e., in particular, your data may be transferred to our cooperating entities, our subcontractors, collaborators or service providers who help us to carry out our activities (e.g., entities providing postal, courier, accounting, order processing, emailing). The transfer of personal data to another entity, does not entitle it to use them freely, but only to process them for the purposes specified in the data processing entrustment agreement, with the assurance of processing security and to the extent necessary for the proper provision of services to you and the performance of contracts binding us. The transfer of personal data does not relieve us (as the transferor) of responsibility for its processing. We would like to point out that your data may also be transferred to a public authority, but only if such authorization arises from generally applicable laws and provided that the authority makes an appropriate request in this regard. Your data will not be transferred outside the European Economic Area.
For how long will we process your personal data?
Your personal data will be processed as long as it is expedient, from the point of view of the legal relationship between us, i.e. until the basis for processing your personal data exists. For example, in the case of granting consent until revocation, restriction or other actions on your part limiting that consent; in the case of the necessity of the data for the performance of a contract – for the duration of its performance and after its performance until the expiration of the statute of limitations for claims arising therefrom; and in the case where the basis for processing is the legitimate interest of the Administrator – until the existence of that legitimate interest. In addition, your personal data will be processed by us for as long as necessary
due to applicable laws, the processing periods for this purpose are determined by these laws.
Profiling
We do not use profiling of your personal data.
Cookies
We perform functions of obtaining information about you and other users of our site and their behavior, among other things, by collecting “cookies”.
When visiting the Foundation’s website for the first time, the user is informed about the use of cookies. By remaining on the site, the user accepts the use of cookies on the website. Failure to change the browser settings on the user’s side is equivalent to consent to the use of cookies.
“Cookies” are small data files stored on your device by the websites you use. References to “cookies” in this document also include other technologies and ways to store data or automatically access data on your device.
When you entered the Foundation’s website, a message was displayed informing you of the site’s use of cookies and offering you the opportunity to consent to the use of certain types of such cookies. A cookie usually contains the name of the website from which it originated, the “lifetime” of the cookie (that is, the length of time it is stored) and an assigned value, which is usually a randomly generated unique number.
We must have used a cookie to display this message. Continued use of this site will place further cookies on your device that are necessary for its proper functioning. Other cookies will be placed on your device only if you have given your consent. Detailed descriptions of the different types of cookies used by this site are provided below:
The Foundation website uses the following types of cookies:
- session – they remain in your browser until you turn it off or log out of the Foundation’s website,
- Permanent – they remain in the browser of your device until you delete them or until a predetermined time specified in the parameters of the cookie.
Other than the above, we do not use other cookies. However, some of our tools and content are provided (and in some cases hosted) by third-party content providers. When you view this content, such third-party providers may store cookies on your computer or mobile device. You have the option to disable the storing and storage of such cookies on your device. We use cookies for:
- To improve the functionality of the site, its structure or to improve its speed,
- Internet traffic measurement,
- Analyze advertising activities,
- Matching the content of the offer to your expectations.
The current list of third-party cookies used on the Foundation’s website is available below:
- Google Analytics
- Storage period – 2 years
- Storage Purpose: Required for the operation of Google Analytics used to generate statistical data about how you use the site. More information at: https://policies.google.com/privacy?hl=pl
The Foundation’s website uses Google Analytics, a web analytics service from Google Inc. (“Google”). Google Analytics uses cookies. The information generated by the cookies about users “use of the website is usually sent to a Google server in the United States, where it is stored. On this website, IP address anonymization has been activated so that the IP addresses of Google users are truncated in advance with respect to Member States of the European Union or the European Economic Area. The full IP address will be sent to a Google server in the United States and shortened there only in exceptional cases. Google will use this information on behalf of the site operator of the Foundation for the purpose of compiling estimates of users” use of the site, preparing reports on site activity and for other purposes related to the use of the site and use of the Internet to provide services to the site operator.
The IP address provided by the browser within Google Analytics will not be combined with other Google data. The Foundation collects the following information through Google Analytics: the number of visitors, the URLs from which visitors go to this site, and the addresses of credible websites.
You can prevent Google from collecting data collected by cookies by running a so-called “blocking cookie” on your computer – to do so, go to the following page and download a browser add-on that blocks Google Analytics:
http://tools.google.com/dlpage/gaoptout .
For more information about cookies, including what browser settings will cause you to reject cookies, go to www.allaboutcookies.org.
The Foundation’s website may contain links to other websites that operate independently of the Foundation’s website and are not supervised by the Foundation in any way. These sites may have their own privacy policies and rules and regulations, which we recommend you read carefully
What credentials do you have?
The RODO provides a number of rights for individuals whose personal data is collected and processed. In accordance with the RODO, you have:
- The right to access the content of your personal data,
- The right to request the rectification of your personal data,
- The right to request their deletion or restriction of their processing,
- in the case of granting consent for the processing of personal data – the right to withdraw it,
- The right to data portability,
- The right to object to the processing of your personal data.
In the event that you have any questions, objections or concerns about the content of this notice or the way we process personal data, as well as complaints regarding these issues (although we hope that it will not be necessary to file such complaints), please send an email with details of your complaint to lukasz@saran.org.pl. Any complaints received will be reviewed and we will respond to them.
In addition, you also have the right to lodge a complaint to the supervisory authority, i.e. the President of the Office for Personal Data Protection (at Stawki 2 Street, 00-193 Warsaw) if, in your opinion, our processing of your personal data violates the provisions of the RODO Regulation or the Personal Data Protection Act.


