Privacy policy
- INTRODUCTION
The Ordo Iuris Institute for Legal Culture Foundation with its registered office in Warsaw, at Zielna 39, 00-108 Warsaw (hereinafter referred to as the Institute or the Administrator), fulfilling its obligations under the applicable legal provisions on the protection of personal data, including the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as the RODO), wishes to provide you with information regarding the processing and protection of your personal data.
The information contained in this Privacy Policy will help you to understand what personal data the Institute collects and processes, the purpose for which it is used and your rights in relation to data protection.
II. Personal data processing processes at the institute
The Institute collects and processes personal data in relation to:
1. maintaining regular contact with the Institute in connection with the realisation of its statutory objectives, in particular by informing about organised social actions (campaigns, debates, seminars, scientific and press conferences), as well as opportunities to support the Institute's activity <read more>
2. conducting social actions (collecting signatures for actions, petitions, protests, etc.) <read more>
3. establishing contact through the contact forms available on the websites <read more>
4. organisation of public events, debates, seminars, scientific or press conferences <read more>
5. making available publications, analyses, brochures, positions of the Institute <read more>
6. providing legal aid to individuals and organisations (beneficiaries of the Process Intervention Programme) <read more>
7. support of the Institute's activity by the donors <read more>
8. online recruitment for vacant positions, internships or apprenticeships at the Institute <read more>
9. use of the Institute's websites by users (use of cookies) <read more>.
III. CATEGORIES OF DATA PROCESSED BY THE INSTITUTE
The Institute collects and processes personal data to the extent necessary to fulfil the purpose for which they were collected.
Depending on the purpose and legal basis of personal data processing, the Institute may collect and process, among others, the following data:
1. identifying data, including: name, surname, PESEL, date of birth;
2. contact data, including: address of residence or correspondence address, telephone number, e-mail address;
3. data collected and processed in connection with the statutory purposes of the Institute, including among others: data necessary for the organisation of public events, social actions, providing legal assistance to the beneficiaries of the litigation intervention programme, data on donors in connection with the support provided to the Institute.
IV. Purposes, legal bases and periods for the processing of personal data at the institute
(1) If you receive invitations from the Institute or information about the Institute's statutory objectives, including social actions organised.
This applies to persons who have subscribed to the mailing list, persons communicating with the Institute via social networking sites (facebook, twitter, youtube) as well as persons whose data has been obtained by the Institute from publicly available sources.
Purpose of processing personal data |
Legal basis of processing personal data |
Personal data processing period |
Information on the implementation of the Institute's statutory objectives, including information on organised social actions (campaigns, actions, protests, petitions, debates, seminars, scientific or press conferences) as well as the possibilities for supporting the Institute's activities |
Article 6(1)(f) RODO the exercise of the controller's legitimate interest in maintaining regular contact with our Institute in connection with its statutory objectives |
The period necessary to fulfil the purpose, but for no longer than until you object to the processing of your personal data |
Establishment, exercise and defence of claims, including documentation of objections raised against the processing of personal data |
Article 6(1)(f) of the RODO Article 17(3)(e) RODO Legitimate interest of the Administrator in processing the data |
The period of limitation of potential claims under the law |
2. If you support social actions (protests, petitions, campaigns) organised by the Institute.
This applies to individuals who have filled in paper forms and sent them to the Institute's address or individuals who have filled in forms on websites run by the Institute in support of actions, petitions, protests or campaigns organised by the Institute.
Purpose of processing personal data |
Legal basis of processing personal data |
Personal data processing period |
Informing people who have supported a social action about its further development |
Article 6(1)(f) RODO The realisation of the legitimate interests of the controller in the form of communication with the persons providing support for a given social action |
The period necessary to keep you informed about the social action, but for no longer than until you object to the processing of your personal data |
Providing information on the implementation of the Institute's statutory objectives, including information on organised social actions (campaigns, actions, protests, events, meetings, competitions, debates, seminars, scientific and press conferences) as well as possibilities to support the Institute's activities. |
Article 6(1)(f) RODO The exercise of the controller's legitimate interest in maintaining regular contact with our Institute in connection with its statutory objectives |
For the period necessary to achieve the purpose, but for no longer than until you have raised an objection to the processing of your personal data |
Establishment, exercise and defence of claims, including documentation of objections raised against the processing of personal data |
Article 6(1)(f) of the RODO Article 17(3)(e) RODO Legitimate interest of the Administrator in processing the data |
The period of limitation of potential claims under the law. |
(3) If you use the contact forms available on websites operated by the Institute.
This applies to individuals who have made enquiries or submissions via a contact form on sites administered or co-administered by the Institute.
Purpose of processing personal data |
Legal basis of processing personal data |
Personal data processing period |
contact in relation to a question or request submitted via the contact form on the website |
article 6(1)(f) RODO to pursue the legitimate interests of the controller in the form of communication with users of the website |
the period necessary for answering your enquiry or request, but for no longer than if you object to the processing of your personal data |
providing information on the implementation of the Institute's statutory objectives, including information on social campaigns organised and the possibilities for supporting the Institute's activities |
article 6(1)(f) RODO the legitimate interest of the controller, which is to maintain regular contact with our Institute in connection with its statutory objectives |
the period necessary to achieve the purpose, but for no longer than until you object to the processing of your personal data for that purpose, after which time they may be processed for the period of limitation of any claims (Article 17(3)(e) RODO) |
establishment, exercise and defence of claims, including documentation of objections raised against the processing of personal data |
Article 6(1)(f) of the RODO Article 17(3)(e) RODO legitimate interest of the Administrator in processing the data |
the period of limitation of potential claims under the law |
(4) W przypadku uczestnictwa w wydarzeniach publicznych organizowanych przez Instytut.
Dotyczy osób fizycznych, które wyraziły chęć uczestnictwa w danym wydarzeniu, spotkaniu, debacie, seminarium, konferencji naukowej lub prasowej organizowanej przez Instytut, np. wygłoszenia referatu lub udziału w konferencji w charakterze słuchacza poprzez wypełnienie formularza na stronie internetowej informującej o danej konferencji lub poprzez wypełnienie formularza w recepcji bezpośrednio przed wydarzeniem.
Purpose of processing personal data |
Legal basis of processing personal data |
Okres |
informing about an organised event, meeting, debate, seminar, scientific or press conference |
article 6(1)(f) RODO the pursuit of the legitimate interests of the controller in the form of communication with persons who have expressed a wish to participate in a given public event |
the period necessary to inform you about the event organised, but for no longer than until you object to the processing of your personal data |
providing information on the implementation of the Institute's statutory objectives, including information on social campaigns organised and the possibilities for supporting the Institute's activities |
article 6(1)(f) RODO the legitimate interest of the controller, which is to maintain regular contact with our Institute in connection with its statutory objectives |
the period necessary to achieve the purpose, but for no longer than until you object to the processing of your personal data for that purpose, after which time they may be processed for the period of limitation of any claims (Article 17(3)(e) RODO) |
establishment, exercise and defence of claims, including documentation of objections raised against the processing of personal data |
Article 6(1)(f) of the RODO Article 17(3)(e) RODO legitimate interest of the Administrator in processing the data |
the period of limitation of potential claims under the law |
5. if you receive free publications issued by the Institute.
Applies to individuals to whom the Institute provides free scientific publications, books, reports, newsletters, brochures, analyses, position papers issued by the Institute.
Purpose of processing personal data |
Podstawa prawna |
Okres |
order processing of the publication, including delivery to the purchaser, contact in relation to the processing of the order |
Article 6(1)(b) of the RODO |
the period necessary to achieve the purpose of processing the personal data |
providing information on the implementation of the Institute's statutory objectives, including information on social campaigns organised and the possibilities for supporting the Institute's activities |
article 6(1)(f) RODO the legitimate interest of the controller, which is to maintain regular contact with our Institute in connection with its statutory objectives |
the period necessary to achieve the purpose, but for no longer than until you object to the processing of your personal data for that purpose, after which time they may be processed for the period of limitation of any claims (Article 17(3)(e) RODO) |
Pursuing and defending against possible claims , which constitutes a legitimate interest of data processing by the Controller |
Article 6(1)(f) of the RODO Article 17(3)(e) of the RODO |
the period of limitation of potential claims under the law |
(6) If you are a beneficiary of the Institute's litigation intervention programme.
Applies to individuals to whom the Institute provides free legal assistance in civil, criminal, family, misdemeanour, employment or administrative court cases.
Purpose of processing personal data |
Podstawa prawna |
Okres |
provision of legal aid, including representation of the beneficiary before public authorities and courts |
art. 6 ust. 1 lit. c RODO |
until the conclusion of the case |
implementation of the agreement concluded with the beneficiary on provision of free legal assistance |
Article 6(1)(c) of the RODO |
duration of the agreement with the beneficiary |
dochodzenie roszczeń i obrona przed roszczeniami z tytułu zawartej umowy z beneficjentem, co stanowi prawnie uzasadniony interes przetwarzania danych przez Administratora |
Article 6(1)(c) of the RODO Article 17(3)(e) RODO |
the period of limitation for any claims arising from the contract with the beneficiary |
the assertion and defence of claims under a contract concluded with a beneficiary, which constitutes a legitimate interest of data processing by the Administrator |
Article 6(1)(c) of the RODO
|
the period necessary to achieve the purpose, but for no longer than until you object to the processing of your personal data for that purpose, after which time they may be processed for the period of limitation of any claims (Article 17(3)(e) RODO) |
7. if you support the Institute's activity with donations
Applies to individuals making donations directly to the Institute's bank account indicated on the website www.ordoiuris.pl or via and payment system: tpay.pl or PayPal.
Purpose of processing personal data |
Podstawa prawna |
Okres |
managing donor contributions, including issuing certificates for tax purposes |
Article 6(1)(c) of the RODO |
the period in which the donation is made, including the issue of a certificate allowing the amount of the donation to be deducted from personal income tax returns |
contacting donors by mail or e-mail in order to respond to their enquiries or requests and to send their thanks for their support |
Article 6(1)(c) of the RODO |
the period necessary to respond to donor enquiries or notifications or to send donor acknowledgements of support |
maintenance of accounting books and tax records |
Article 6(1)(c) of the RODO in conjunction with Article 74(2) of the Accounting Act and other specific provisions |
the period for keeping accounting and tax records under the law |
informowanie o realizacji celów statutowych Instytutu, w tym informowanie o organizowanych akcjach społecznych oraz możliwości dalszego wsparcia Instytutu |
to provide information on the implementation of the Institute's statutory objectives, including information on social campaigns organised and the possibility of further support for the Institute |
the period necessary to achieve the purpose, but for no longer than until you object to the processing of your personal data for that purpose, after which your personal data may be processed for the period of limitation of any claims (Article 17(3)(e) RODO) |
the assertion and defence of claims under the concluded contract, which constitutes a legitimate interest of data processing by the Administrator |
Article 6(1)(c) of the RODO Article 17(3)(e) RODO |
the period of limitation of potential claims under the law |
8. if you are interested in a job, internship or traineeship at the Institute.
Applicable to applicants for a job, internship or traineeship at the Institute.
Purpose of processing personal data |
Podstawa prawna |
Okres |
assessment of the qualifications, aptitudes and skills of a candidate for a job, internship or apprenticeship in a specific position, which is necessary to select a suitable person for employment or to establish cooperation with the Institute |
Article 221 § 1 of the Labour Code in terms of processing the candidate's personal data necessary to conclude the employment contract Article 6(1)(a) of the RODO consent to the processing of data provided in the CV or other application documents if the candidate provides data other than: name and surname, parents' names, date of birth, place of residence (correspondence address), education, previous employment history (e.g. image in CV, interests or the candidate expresses a desire to participate in future recruitments)
Article 6(1)(b) of the RODO in relation to civil law contracts
Article 6(1)(f) RODO in respect of data collected during the interview and the results of the selection tests |
until the decision on the conclusion of the agreement is taken |
Pursuing and defending against claims related to recruitment, which is the legitimate interest of the Administrator to process the data |
Article 6(1)(c) of the RODO Article 17(3)(e) RODO |
the period of limitation of any claims under employment discrimination legislation |
9. If you use the Institute's websites.
For your convenience, this website uses cookies for the following purposes:
- to customize the site to your needs, such as remembering your preferred language or font size, and for statistical purposes,
- to understand the activities and behaviours of website visitors,
- to recognize new or past visitors,
- to improve our website and to better understand your visits on our platforms,
- to integrate with third party social media websites,
- to better understand the interests of our customers and our website visitors,
- to facilitate basic website functionality,
- to serve targeted advertisements.
The site sometimes uses the Internet services of third parties to display certain content, for example, images or videos. We cannot prevent these sites or domains from collecting information about how our users use the content they place there. To understand how they use the information they collect about you and how you can opt-out or delete the relevant cookies, please read the terms of use of these sites regarding their privacy and cookie policies.
V. YOUR RIGHTS CONCERNING THE PROCESSING OF DATA BY THE INSTITUTE
In relation to the Institute's processing of your personal data, you have:
1. the right of access to your personal data pursuant to Article 15 of the RODO;
2. the right to rectify your personal data pursuant to Article 16 of the RODO;
3. the right to request erasure in the cases set out in Article 17(1) of the RODO (subject to the exceptions set out in the provision of Article 17(3) of the RODO), in particular if you exercise the following rights:
1.
a. The right to withdraw consent - where the Institute processes personal data on the basis of consent - individuals have the right to withdraw their consent at any time, without affecting the lawfulness of processing that was carried out on the basis of consent given before its withdrawal. However, please note that the Institute does not process personal data on the basis of consent, as it usually acts on the basis of other legal grounds contained in Article 6 of the RODO and set out in Section IV of this Policy. Satisfaction of any of the legal bases set out in Article 6 of the RODO is sufficient for the Institute to process your data;
b. The right to object - in case your personal data is processed on the basis of a legitimate interest pursued by the Institute (e.g. in case of informing about the realization of the Institute's statutory goals, sending invitations to public events organized by the Institute, sending thank-you notes to donors for their support). In such a case, the Institute will no longer process the personal data or will restrict the processing, unless the Institute can demonstrate that there are compelling legitimate grounds for the processing overriding the interests, rights and freedoms of the data subject, or grounds for the establishment, investigation and defence of the Institute's claims;
4. the right to request the restriction of processing in the cases referred to in Article 18 of the RODO;
5. the right to data portability in the cases referred to in the provisions of Article 20 of the RODO.
If you wish to exercise any of these rights, the Institute allows you to contact the designated Data Protection Officer by email: [email protected] or by post: Ordo Iuris Institute for Legal Culture Zielna 39 Street, 00-108 Warsaw, marked "Data Protection Inspector".
If you believe that the processing of your personal data violates the regulations on personal data protection, you also have the right to lodge a complaint to the President of the Office for Personal Data Protection.
VI. AUTOMATED DECISION MAKING WITH REGARD TO YOUR PERSONAL DATA
Your data may be processed by the Institute by automated means, including profiling. However, decisions concerning an individual person related to this processing will not be automated
VII. SHARING OF YOUR PERSONAL DATA WITH THIRD PARTIES
The Institute applies appropriate technical and organisational measures to ensure the security of your personal data, including protecting personal data against unauthorised access, loss or destruction. The Institute has implemented appropriate personal, organisational, technical (IT) and physical safeguards to ensure the security of your personal data.
We will only transfer personal data to other entities if we are permitted to do so by law. In this case, we contractually provide for provisions and security mechanisms to protect the data and to maintain our standards of data protection, confidentiality and security.
Your personal data may be accessed by:
1. employees and associates of the Institute authorised to process your personal data by order of the Administrator;
2. entities entrusted by the Institute with the processing of your personal data, including entities providing hosting, IT, printing, shipping, payment, legal, accounting, HR services to the Institute.
The Institute applies appropriate technical and organisational measures to ensure the security of your personal data, including protecting personal data against unauthorised access, loss or destruction. The Institute has implemented appropriate personal, organisational, technical (IT) and physical safeguards to ensure the security of your personal data.
We will only transfer personal data to other entities if we are permitted to do so by law. In this case, we contractually provide for provisions and security mechanisms to protect the data and to maintain our standards of data protection, confidentiality and security.
Your personal data may be accessed by:
1. employees and associates of the Institute authorised to process your personal data by order of the Administrator;
2. entities entrusted by the Institute with the processing of your personal data, including entities providing hosting, IT, printing, shipping, payment, legal, accounting, HR services to the Institute.
VIII. AMENDMENTS TO THIS PRIVACY POLICY
Bearing in mind the principle of transparency, the Institute will regularly review and update the above Privacy Policy by publishing a new version on its website.
RODO
We would like to inform you that your personal data is processed by the Foundation Institute for Legal Culture Ordo Iuris with its registered office in Warsaw at Zielna 39, postal code 00-108 (data controller) as part of maintaining regular contact with our Foundation in connection with its statutory objectives, in particular by informing you about organised social actions. The legal basis for processing personal data is Article 6(1)(f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (RODO). The provision of data is voluntary, nevertheless without their indication it is not possible to implement the newsletter service. We would like to inform you that you have the right to access the content of your personal data, to correct, delete or restrict the processing thereof, the right to data portability, the right to object to the processing thereof, as well as the right to lodge a complaint to the supervisory authority. The use of the newsletter is unlimited. At any time you have the right to object to the processing of your personal data. In this case, the data entered by you in the registration process will be deleted immediately after the expiry of the period of limitation of possible claims and rights provided for in the Civil Code. Your personal data may also be accessed by entities providing us with services, in particular hosting, IT, printing, mailing, payment, legal, accounting and HR services. The personal data provided may be processed by automated means, including profiling. However, decisions concerning an individual person related to this processing will not be automated. Should you have any requests, questions or doubts regarding the processing of your personal data, please contact the Data Protection Officer appointed by us by writing to the address of the Foundation's headquarters: Zielna 39 Street, 00-108 Warsaw, marked "Data Protection Officer", or to the e-mail address [email protected].