Privacy Policy

§1 General provisions
This document is for information pursuant to Art. 13 sec. 1 and 2 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 on the protection of natural persons in connection with the processing of personal data and on the free transfers of such data and repealing Directive 95/46 / EC (hereinafter GDPR) for individuals (customers) using the services of the data administrator.

The administrator of personal data as meant in art. 4 point 4 of the GDPR is The Stowarzyszenie Betlejem (Bethlehem Association) (ul. Długa 16 43-603 Jaworzno, NIP: 632-177-06-21), e-mail: dom@betlejem.org.

In accordance with art. 32 sec. 1 of GDPR the Administrator adheres to the principle of protection personal data and applies appropriate technical and organizational measures to prevent accidental or illegal destruction, loss, modification, unauthorized disclosure or unauthorized access to personal data processed in connection with conducted activity.

Providing personal data by the customer is voluntary. It is, however a condition necessary to finalize a contract whose subject are services provided by the administrator or products offered by him. The customer is obliged to provide personal information and the failure to do so is the inability to use the administrator’s offer.

§2 The purpose and grounds for processing personal data.
The administrator processes personal data for the following purposes:
– conclusion and implementation of sales contracts, the subject of which are products offered by the data controller;
– providing electronic services as available on the data administrator’s website (e.g. newsletter);
– sending marketing information regarding the product or service offered by the data administrator;
– answering questions addressed to the data administrator through the contact form available on its website.

The basis for the processing of personal data is:
6 sec. 1 lit. b) GDPR for the purposes referred to in sec. 1 lit. a – b;
6 sec. 1 lit. a) and f) GDPR for the purposes referred to in para. 1 lit. c – d.

§3 Recipients of data. Data transfer to third countries.
The recipients of personal data processed by the administrator may be entities involved in delivering or carrying out deliveries to people purchasing products of the data administrator. Personal data will be not transferred to countries outside the European Area Economic Zone.

§4 The timeframe and scope of personal data storage.
The data administrator stores personal data for a period of time related to the term of the contract and after the termination of the contract no longer than:

– for the period of time in which the subjected person may exercise
– rights under the administrator’s warranty for defects of the sold item or warranty, unless a longer period of storage is required by applicable law;
– for a period of 5 years for personal data on billing documents (invoices) in accordance with the Accounting Act;
– until the consent for the processing of personal data is withdrawn.

The administrator collects and processes the personal data provided in the contact form containing: name, surname, e- mail address, phone number.

§5 Rights of the data subject
Any person whose personal data is processed by the administrator has the right to access their data, the right to rectify it, delete (“the right to be forgotten”), the right to restrict processing, the right to data portability, the right to refuse and the right to withdraw consent to the processing of data at any time.

Any person who considers that their personal data is being processed by the administrator in violation of the provisions of the GDPR has the right to place a complaint to the President of Urzad Ochrony Danych Osobowych (the Personal Data Protection Office.

§6 Profiling
Personal data obtained by the data administrator are not automatically processed, including profiling.

§7 Cookies
Our website (www.betlejem.org) uses cookies. These are small text files sent by the web server and stored by the browser software on the user’s computer. When the browser reconnects with the page, the site recognizes the type of device from which the user connects. Parameters allow reading the information contained therein only to the server that created them. Cookies therefore facilitate the use of previously visited sites. The rules for the processing of data collected by cookies are provided in the “Cookie Policy” document. The cookie technology does not collect, process nor stores the personal data.

§8 How can I get more information?
If you have questions about this Privacy Policy, your personal data or data protection on this website, please contact us. Before we can comply with your request we may need to confirm your identity. We respond to such requests as quickly as possible. Please do not submit sensitive personal information via e-mail.

Send your correspondence to: dom@betlejem.org