This document (hereinafter: the “Rules”) contains information on the principles governing the processing of your personal data in Fundacja Fundusz Współpracy (hereinafter: the “Foundation”). From the text below you will learn, among other things, for what purposes and for how long the Foundation processes or will process your personal data. You will also learn which categories of entities may have access to your personal data, as well as which rights you may exercise in connection with the processing of your personal data. The scope of the information provided complies with the requirements arising from EU data protection legislation, i.e. Regulation (EU) 2016/679 of the European Parliament and of the Council, also referred to as the General Data Protection Regulation (hereinafter: the “Regulation”).
Controller
The controller of your personal data is Fundacja Fundusz Współpracy
address: ul. Górnośląska 4A, 00-444 Warsaw
e-mail: cofund@cofund.org.pl
As the data controller, Fundacja Fundusz Współpracy will make every effort to meet the requirements of the Regulation as fully as possible and thus to protect your personal data.
For what purpose and for how long will we process your personal data?
Fundacja Fundusz Współpracy guarantees that it will process your personal data solely for specific, explicit and legitimate purposes and will not process them further in a manner incompatible with those purposes. The purpose of data processing is the reason why your personal data are processed. If Fundacja Fundusz Współpracy intends to process your personal data for any purposes other than those indicated below, you will be informed separately about this new purpose. The list below presents the purposes of data processing and, for each of them, the relevant legal basis. Your personal data will be stored for a period adequate to achieve the indicated purposes, i.e. until 30 December 2025.
Purpose
Conclusion, proper performance and termination of contracts, or other actions necessary to conclude and perform a contract with you
Explanation
This covers all activities carried out in order to prepare for the conclusion of a contract, perform a contract, analyse and assess projects and ideas, handle complaints, terminate a contract, archive documentation and perform other legal acts related to the contract.
Legal basis
Regulation, Article 6(1)(a) and (b)
Duration of data processing
– Until the contract is terminated, and thereafter for other lawful purposes related to the contract, e.g. for the period of securing potential claims, i.e. 10 years. – In the absence of a contract being concluded – until your application is examined and for a further 6 years for the purpose of potential complaints and claims and for project evaluation purposes.
Purpose
Fulfilment of obligations arising from legal provisions or performance of tasks carried out in the public interest
Explanation
In this case, Fundacja Fundusz Współpracy processes personal data in order to fulfil obligations arising directly from legal provisions or to perform tasks carried out in the public interest. In particular, this includes the performance of the Foundation’s obligations related to its investment activities, performance of concluded contracts and archiving purposes.
Legal basis
Regulation, Article 6(1)(c)
Duration of data processing
– Until the contract is terminated, and thereafter for other lawful purposes related to the contract, e.g. for the period of securing potential claims, i.e. 10 years. – In the absence of a contract being concluded – until your application is examined and for a further 6 years for the purpose of potential complaints and claims and for project evaluation purposes. – In other cases – until Fundacja Fundusz Współpracy fulfils the obligations laid down in legal provisions.
Where do we obtain your personal data from?
Fundacja Fundusz Współpracy processes your personal data obtained directly from you (e.g. data provided in forms), as well as data obtained from other sources in accordance with the law and under agreements with partners. Such other sources may include, in particular, public sources such as the National Court Register (KRS) or the Central Register and Information on Economic Activity (CEIDG) and sources with restricted access such as BIK, BIG or business intelligence agencies. In each such case Fundacja Fundusz Współpracy carefully verifies whether it has a legal basis for processing the personal data.
Which categories of your personal data do we process?
Depending on your relationship with Fundacja Fundusz Współpracy, the Foundation may in particular process the following categories of personal data obtained from you or from third parties:
a) personal data (e.g. first name and surname),
b) contact details (e.g. telephone number, correspondence address),
c) identification data (e.g. identity card number, PESEL),
d) socio-demographic data (e.g. nationality, form of employment),
e) financial data (e.g. account balance, source of income),
g) contractual data (e.g. details of concluded contracts),
i) communication data (e.g. data related to communication with you),
k) data concerning family, legal and property ties,
l) data available publicly or obtained from third parties (e.g. data obtained from CEIDG, BIK, KRS).
To whom may your data be disclosed?
Access to your personal data within the organisational structure of Fundacja Fundusz Współpracy will be granted only to persons authorised by the Foundation and only to the extent necessary. In certain situations, your personal data may be disclosed by Fundacja Fundusz Współpracy to recipients outside its structure. In each such situation Fundacja Fundusz Współpracy carefully examines the legal basis for disclosing personal data.
It should be noted that a “recipient” of data within the meaning of the Regulation is both an entity that processes personal data on behalf of Fundacja Fundusz Współpracy and an entity to which data are made available for its own purposes (e.g. public authorities). Recipients of your personal data may include:
a) public authorities, institutions or third parties authorised to request access to, or receive, personal data under legal provisions,
b) entities to which Fundacja Fundusz Współpracy has entrusted the processing of personal data under concluded agreements, in particular persons engaged by the Foundation to manage the fund, as well as members of the Investment Committee and representatives of investors,
c) banks, financial or credit institutions or other entities which may receive personal data in connection with the economic relations between Fundacja Fundusz Współpracy and you (e.g. banks intermediating in the execution of foreign transfers) and under relevant legal provisions, e.g. BIK, Centrum Prawa Bankowego i Informacji sp. z o.o., economic information bureaus (KRD, ERIF, BIG),
g) entities providing advisory and audit services, e.g. audit or consulting firms,
h) entities processing data for the purpose of debt collection or legal representation, e.g. law firms,
j) entities to which you have given your consent to disclose and process your personal data,
k) entities operating within Fundacja Fundusz Współpracy or entities within the capital group responsible for the performance of contractual obligations and obligations arising from legal provisions.
Exercise of rights
Detailed information about your rights:
a) you have the right to access your personal data, including the right to obtain a copy of the data;
b) if you consider that your personal data processed by Fundacja Fundusz Współpracy are inaccurate, you have the right to have them rectified or completed,
c) you have the right to request the erasure of your personal data in the cases provided for by law,
d) you have the right to request restriction of the processing of your personal data,
e) you have the right to object to the processing of your personal data where they are processed for the purposes of the legitimate interests pursued by Fundacja Fundusz Współpracy,
f) you also have the right to receive your personal data from Fundacja Fundusz Współpracy in a structured format and to transmit those data to another controller,
h) in cases where the processing of your data is based on consent, you have the right to withdraw your consent for particular processing purposes at any time. You may withdraw your consent at the office of Fundacja Fundusz Współpracy or by e‑mail. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Where a contract or transaction is concluded, the provision of personal data is necessary for its performance. If you consider that the processing of your personal data by Fundacja Fundusz Współpracy infringes the provisions of the Regulation, you have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office.
____
In connection with the processing of personal data, we inform you that:
- The controller of your personal data is Fundacja „Fundusz Współpracy” (hereinafter: the “CONTROLLER”), with its registered office at ul. Górnośląska 4a, 00‑444 Warsaw. The Controller may be contacted in writing by traditional mail at ul. Górnośląska 4a, 00‑444 Warsaw or by e‑mail at: cofund@cofund.org.pl
- The Controller has appointed a Data Protection Officer:
Data Protection Officer:
Magdalena Szwech, iodo@cofund.org.pl - Your personal data are processed on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
- The processing is carried out for the following purposes: a. Exchange of personal data in the context of business contacts – Article 6(1)(f) GDPR. b. Taking the steps necessary prior to the conclusion of a contract under the project “Social Impact Vouchers” implemented by the Controller – Article 6(1)(b) GDPR.
- Personal data may originate from third parties.
- The Controller does not intend to transfer the data to a third country or an international organisation.
- The Controller will transfer personal data to other entities only on the basis of legal provisions and data processing agreements, including, among others, to providers of ICT services.
- Personal data will be processed by the Controller for the duration of the project and in accordance with applicable legal provisions.
- The data subject has the right to request from the Controller access to personal data, their rectification or restriction of processing, as well as the right to object to processing and the right to data portability.
- A complaint regarding the Controller’s actions may be lodged with the President of the Personal Data Protection Office.
- Providing personal data is necessary in order to establish cooperation.
- The Controller does not envisage automated decision‑making.
