Privacy policy of MROJA.ME

1. Personal data controller

The controller of personal data processed in connection with the Foundation's activities through https://www.mroja.me/ is:

Fundacja MROJA
ul. Nowolipie 16/43
01-005 Warszawa
KRS: 0001250755
NIP: 5273228880

Contact the Foundation about personal data at: mroja.me.bel@gmail.com

2. Data we may process

Depending on how you use the website, we may process in particular:

• your first and last name;
• your email address;
• your telephone number, if you provide it;
• the content of messages sent to the Foundation;
• information provided in connection with participation in events, volunteering or other activities of the Foundation;
• technical data relating to website use, such as your IP address, device type, browser and information stored in cookies;
• data necessary to handle a donation, if the donation feature is introduced.

3. Purposes of processing

Personal data may be processed to:

• respond to messages and enquiries;
• contact people interested in the Foundation's activities;
• organise events, volunteering and other MROJA initiatives;
• handle donations;
• ensure the website functions correctly and securely;
• fulfil the Foundation's legal obligations;
• establish, exercise or defend potential legal claims.

4. Grounds for processing

Data may be processed on the basis of:

• the user's consent;
• steps taken at the user's request;
• the Foundation's legal obligations;
• the Foundation's legitimate interests, in particular communication, website security and protection against claims.

5. Recipients of data

Data may be shared with organisations that support the Foundation's activities, in particular:

• hosting and IT service providers;
• email service providers;
• accounting or legal service providers;
• payment operators, if donations through the website are introduced;
• entities entitled to receive data under applicable law.

The Foundation does not sell users' personal data.

6. Data retention

Data will be retained for as long as necessary for the purpose for which it was collected, and subsequently for the period required by applicable law or necessary for protection against claims.

Data processed on the basis of consent will be processed until consent is withdrawn, unless another legal basis allows its continued retention.

7. Your rights

In the circumstances provided for by law, you have the right to:

• access your data;
• have your data corrected;
• have your data erased;
• restrict processing;
• data portability;
• object to processing;
• withdraw consent at any time.

You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

8. Cookies

The website may use cookies and similar technologies.

Cookies may be used to:

• ensure the website functions correctly;
• ensure website security;
• remember your settings;
• analyse how the website is used, if you consent to this.

You can manage cookies through your browser settings and, where a suitable mechanism is available on the website, through the cookie consent settings.

Cookies other than those strictly necessary will be used in accordance with applicable law and, where required, after obtaining your consent.

9. Partners' products and websites

The MROJA website may display partners' products or offers.

Where an external seller is identified in an offer, Fundacja MROJA is not a party to the sales contract.

For the products currently displayed on the website, the manufacturer and legal seller is WolaGroup, which issues the invoice and receives payment.

The seller's processing of data is governed by its own privacy policy.

Customer communication, help with product selection and enquiries about cabins and saunas are handled by Siarhei Hun and Natalia Tiuliupova, separately from the Foundation's activities. They are the controllers of the data provided in these enquiries. Its processing is described in the separate privacy policy for cabin and sauna enquiries.

10. Changes to this privacy policy

This policy may be updated when the website's functionality, data processing practices or applicable law change.