Privacy policy

Last updated: 3 September 2026. The Polish version is the binding one.

1. What data we collect

The site does not require an account and does not profile users. We process personal data only when you give it to us:

• Programme application form: institution name and type, tax or registry number (optional), contact person's name, role (optional), e-mail, phone (optional), town, message.
• E-mail correspondence: e-mail address and message content.
• Donations: sender data visible on the bank statement (name, account number, transfer reference).

When the form is sent we also store the IP address and time of sending, solely to protect the form from abuse (a limit of applications per address).

2. Purposes and legal bases

• Handling an institution's application, verification and contact about an offer: Art. 6(1)(b) GDPR (steps prior to a contract) and Art. 6(1)(f) GDPR (legitimate interest: pursuing the foundation's statutory goals).
• Replying to correspondence: Art. 6(1)(f) GDPR.
• Accepting and accounting for a donation, issuing an acknowledgement: Art. 6(1)(c) GDPR (accounting and tax obligations).
• Protecting the form from abuse: Art. 6(1)(f) GDPR.
• Measurement with Google tools (see section 6): Art. 6(1)(a) GDPR, your consent.

3. Retention

• Applications that did not lead to a contract: up to 12 months after the last contact.
• Data connected with a contract or donation: for the period required by accounting and tax law (as a rule 5 years from the end of the year in which the tax obligation arose).
• Technical form-protection data (IP address): up to 1 hour.

4. Recipients

Data is not sold or shared for marketing. Access is limited to providers the foundation uses to the extent necessary: hosting and e-mail provider (servers in Poland), the accounting office, the bank holding the foundation's account and, only with your consent, Google (measurement). We never pass donor data to beneficiary institutions without your explicit written consent.

5. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest. The form data is not processed on the basis of consent, which is why we do not ask you to tick a consent box. Where processing is based on consent (measurement cookies), you may withdraw it at any time. You may lodge a complaint with the Polish supervisory authority (Prezes UODO, ul. Stawki 2, 00-193 Warsaw) or the authority in your country.

To exercise these rights, write to kontakt@fundacjapolmuz.pl.

6. Cookies and analytics

The site works without cookies. Google measurement tools (Google Analytics 4 and the Google Ads tag, used to account for free advertising under the Google Ad Grants programme) are started only after your consent given in the banner, using Google Consent Mode v2. Without consent no Google script loads and no cookies are set. You can withdraw consent at any time via "Cookie settings" in the footer. Your choice is stored in your browser's local storage on this device. Fonts are loaded from Google Fonts, so your browser sends your IP address to Google to fetch the font files.

7. Voluntary provision

Providing data is voluntary, but without the fields marked with an asterisk we cannot process an application.

8. Changes

The current version is always available at fundacjapolmuz.pl/en/privacy-policy.html. Material changes will be announced here.

← Back to the home page