Privacy and Cookies Policy

The Strumienie Foundation cares about your privacy. In this document, you can find the principles of personal data processing and the use of cookies in connection with the use of our website https://piesniopisarze.pl/, as well as participation in the projects of the Study of the New Psalm (hereinafter: SNP) or Hymn Writers. If you have any doubts related to this Privacy Policy, you can contact us at the email address: kontakt@piesniopisarze.pl.

I. Data of the Personal Data Administrator

We would like to inform you that the Administrator of your personal data is: STRUMIENIE Foundation with its registered office in Grębocin (87-162) at ul. Szkolna 59, entered in the register of associations of the National Court Register under number 0001073543, REGON 527159557, NIP 8792753126, hereinafter referred to as "PDA", with which contact is possible at the email address: kontakt@piesniopisarze.pl or studiumnowegopsalmu@gmail.com, or by phone number: +48 691 319 149.

II. Purposes and legal bases for processing personal data

In order to provide services in accordance with the scope of our activities as PDA, we process your personal data — for various purposes, but always in accordance with the law. Below you can find the specified purposes of personal data processing along with legal bases.

Correspondence and forms

Your personal data will be processed in order to respond to your correspondence, as well as to archive correspondence. When contacting the PDA, in the case of a form, you provide your name and email address, and in the case of writing directly an email message – your email address, and in the message (also through the form) there may be other personal data of yours – all this data you provide voluntarily, in order to contact the PDA.

The basis for processing personal data in these cases is Article 6 paragraph 1 letter a of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) [hereinafter GDPR] – i.e. your consent, by writing to us and voluntarily providing data, you thereby express consent to their processing, as well as Article 6 paragraph 1 letter f GDPR, i.e. a legitimate purpose, which is the archiving of correspondence for the purpose of demonstrating its course in the future.

Performance of the concluded contract

If you have concluded a contract with us, e.g. for participation in the SNP course, we process personal data, which you provide to us in the contract, as well as during the performance of the contract. The legal basis for data processing is Article 6 paragraph 1 letter b GDPR, which authorizes the processing of personal data if it is necessary to perform the contract or to take steps at the request of the data subject prior to entering into a contract.

Obtaining financial resources online (donations)

Your personal data will be processed for purposes related to donations (including fundraising campaigns). When making a donation, we inform you that the legal basis for processing your personal data in connection with the donation made is: the necessity of data processing to perform the contract/request regarding the transfer of the donation (Article 6 paragraph 1 letter b GDPR); the necessity to fulfill the legal obligation incumbent on the PDA (Article 6 paragraph 1 letter c GDPR); the legitimate interest pursued by the PDA in connection with its statutory activities (Article 6 paragraph 1 letter f GDPR).

Personal data may also be used to thank you for the payment, to contact you in case of problems with processing the donation or to confirm the payment. More information on the collection and processing of personal data within the framework of donations can be found in the donation regulations:

Tax obligations

The personal data you provide will be processed for the purpose of issuing an invoice, an account with a tax identification number (NIP) and fulfilling other obligations arising from tax law provisions in the event of concluding a contract with you for participation in the SNP course. The legal basis is Article 6 paragraph 1 letter c GDPR, i.e. an obligation arising from legal provisions.

Contact with PDA

When you contact the PDA by phone, you provide your phone number, and by email – your email address, and the message may contain other personal data of yours – all this data you provide voluntarily, in order to contact the PDA. The basis for processing in this case is Article 6 paragraph 1 letter a GDPR (your consent). The legal basis for processing your personal data after the end of contact is Article 6 paragraph 1 letter f GDPR, i.e. a legitimate purpose, which is the archiving of correspondence for the purpose of demonstrating its course in the future.

III. Cookies

1. The PDA on its website, like other entities, uses so-called cookies (short text information), saved on the computer, phone, tablet or other user device. They can be read by our system, as well as by systems belonging to other entities, whose services we use (e.g. Google).
2. On the website we use the following types of cookies:
   1. session — in cookie files, information is repeatedly saved about how visitors use the website, e.g. which subpages they view most often. They also enable the identification of errors displayed on certain subpages. Cookie files used to save the so-called "session state" therefore help to improve services and increase the comfort of browsing pages and are automatically deleted after closing the web browser;
   2. persistent — stored on the device you are using, for a specified time, and their storage does not depend on closing the browser;
   3. own — these are files set by our website;
   4. third party — i.e. files set by other entities, i.e. Meta (Facebook), Instagram, YouTube, Spotify, Patronite, which is discussed in more detail below.
3. It is important that many cookie files are anonymized for us — without additional information, based on them we are not able to identify your identity.
4. Your web browser allows the use of cookies on your device by default, therefore, during your first visit, we ask for consent to use cookies. However, if you do not want cookies to be used when browsing the website, you can change the settings in your web browser — completely block automatic cookie handling or request notification each time cookies are placed on the device. Settings can be changed at any time.
5. Cookie files function for a period of 24 months, unless you clear them before this period expires.
6. Bearing in mind your autonomy in using websites, we must warn you that disabling or limiting cookie handling may cause quite serious difficulties in using the website, e.g. a longer page loading time or limitations in using functionality.
7. We also inform you that on our website plugins, buttons and other social tools are used, hereinafter collectively referred to as "plugins", provided by social networks and internet platforms: Meta (Facebook), YouTube, Instagram, Patronite and Spotify. When displaying our website containing a plugin of a given social network, your browser sends information about the visit to the administrator of that social network. Because the plugin is a fragment of the social network embedded in our page, the browser sends a request to download the content of a given social network to our page. Plugins collect certain information about you, such as user ID, visited website, date and time and other information about the web browser.
8. The administrators of social networks use some of this information to personalize the conditions for viewing our page. For example, when they visit your page with a "Like" button, the administrator of the social network needs identity information to show which of your friends also like our page.
9. Information collected by plugins may also be used by administrators of social networks for their own purposes, such as improving their own products, creating user profiles, analyzing and optimizing their own activities, targeting ads. We have no real influence on how information collected by plugins is subsequently used by administrators of social networks. You can look for details in this regard in the terms and privacy policies of individual social networks.
10. Social network plugins collect and transmit information to the administrators of these services even when you browse our site without being logged into your social network account. However, the browser then sends a more limited set of information. If you are logged into one of the social networks, the administrator of the service will be able to directly assign your visit to our page to your profile on a given social network. If you do not want social networks to assign data collected during visits to our website directly to your profile on a given service, you must log out of this service before visiting our page. You can also completely prevent plugins from loading on the page using appropriate extensions for your browser, e.g. script blocking.
11. As for the details related to the processing by the administrators of social networks of information collected by plugins, in particular the purpose and scope of data collection and their further processing and use by administrators, as well as the possibility of contact and your rights in this regard and the possibility of making settings ensuring the protection of your privacy, everything can be found in the privacy policies of individual service providers:
    1. Meta (Facebook and Instagram): https://www.facebook.com/policy.php
    2. YouTube: https://policies.google.com/privacy?hl=pl
    3. Spotify: https://www.spotify.com/pl/legal/privacy-policy/
    4. Patronite: https://patronite.pl/polityka-prywatnosci

IV. Server Logs

1. Your use of our website involves sending queries to the server, where our page is stored. Each query directed to the server is recorded in server logs. Logs include, among others, IP address, date and time of the server, information about the web browser, and the operating system used by the User.
2. Logs are saved and stored on the server.
3. Server logs only help in administering the page, and their content is not disclosed to anyone except persons and entities authorized to administer the server.
4. The PDA will not use server logs to identify you.

V. Right to withdraw consent

1. If the processing of personal data takes place on the basis of consent, you can withdraw this consent at any time.
2. If you would like to withdraw your consent to the processing of your personal data, you should send an email to the PDA at the email address: kontakt@piesniopisarze.pl.
3. If the processing of your personal data took place on the basis of consent, its withdrawal does not affect the legality of processing that took place before the withdrawal of consent.

VI. Automated decision-making and profiling

We do not carry out automated decision-making, including based on profiling. Thus, the tools we use, which, although they can take certain actions depending on information collected within tracking mechanisms, do not differentiate your situation as a user of our services nor do they affect the conditions of the contract, which you can conclude with us. These tools also do not cause us to have access to information, that would allow your identification. Consequently, information such as: your web browser used, pages viewed, time spent on the page, transitions between individual subpages, the source from which you go to our page, the age range in which you are, your approximate location limited to the locality or your interests determined on the basis of activity on the network, are not compared with your personal data, which are in our databases. Thus, the information mentioned above is anonymous and does not allow us to identify you.

However, we inform you that due to the fact that the Foundation conducts extensive activities on the internet, especially on social media and other internet portals, it may be necessary to grant us consent to record and distribute your image in order to promote and disseminate knowledge about the Foundation's activities, including on the Foundation's social media (primarily: Facebook, Instagram, TikTok, Twitter) and on the YouTube platform, in order to promote the Foundation's activities (including evangelization on the internet). These portals and social networks process data in an automated way, and also carry out data profiling.

VII. Recipients of personal data

1. If necessary, we transfer your personal data to companies handling fast payments, companies providing training services on behalf of and for the benefit of the PDA on the basis of a concluded contract, law firm, accounting firm, hosting company, company providing the email system, courier company, invoicing system provider and insurance company (if an insured event occurs).
2. It may happen that, e.g. on the basis of the relevant legal provision or decision of the relevant authority we will have to transfer your personal data also to other entities, whether public or private. In such a case, we will inform you about such action.

VIII. Transfer of personal data to third countries

1. If necessary, we transfer your personal data to companies handling fast payments, companies providing training services on behalf of and for the benefit of the PDA on the basis of a concluded contract, law firm, accounting firm, hosting company, company providing the email system, courier company, invoicing system provider and insurance company (if an insured event occurs).
2. It may happen that, e.g. on the basis of the relevant legal provision or decision of the relevant authority we will have to transfer your personal data also to other entities, whether public or private. In such a case, we will inform you about such action.
3. The User's personal data will be processed by suppliers whose headquarters and/or servers are located in a third country, i.e. in the territory of the United States of America (USA). The transfer of data to the USA is based on the European Commission decision of July 10, 2023 stating an adequate level of protection of personal data provided by the so-called "EU-US Data Privacy Framework" in relation to suppliers entered on the list of the US Department of Commerce, such as:
   1. Google services – in the scope of all data that is processed within Google services (e.g. docs.google forms), including also those data that are contained in files subject to synchronization with Google Drive - conducted by Google LLC. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA;
   2. Whatsapp messenger services, conducted by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Contents of European users are stored by default in European data centers, metadata (technical data) as well as user data (unified address book) may be sent to the USA,
   3. YouTube platform services conducted by Google LLC, D/B/A YouTube, 901 Cherry Ave, San Bruno, CA 94066 USA,
   4. Facebook service conducted by Meta Platforms Inc., 1601 Willow Road Menlo Park, CA 94025, USA,
   5. Instagram service conducted by Meta Platforms Inc., 1601 Willow Road Menlo Park, CA 94025, USA,
4. In case of doubt, we provide you with additional information regarding the transfer of personal data.
5. At any time you have the right to receive a copy of personal data, that have been transferred to a third country.

IX. Period of personal data processing

1. Your personal data are processed for the time necessary to achieve the set goal. After this period, your personal data will be irreversibly deleted or destroyed.
2. Data about orders will be processed for the time necessary to fulfill the order, and then until the expiry of the limitation period for claims arising from the concluded contract. Moreover, after this period, data may still be processed for statistical purposes. It should also be remembered that we are obliged to store invoices with your personal data for a period of 5 years from the end of the tax year in which the tax obligation arose.
3. Depending on the type of personal data, we process them for a period of:
   • duration of correspondence — in the case of personal data provided as part of correspondence;
   • processing of the donation - in the case of personal data processed to carry out the donation
   • 5 years — in the case of personal data related to the fulfillment of obligations from tax law;
   • until the withdrawal of consent or achievement of the processing purpose, but not longer than 5 years — in the case of personal data processed on the basis of consent;
   • until the effective objection or achievement of the processing purpose, but not longer than 5 years — in the case of personal data processed on the basis of the legitimate interest of the PDA;
   • until it becomes outdated or loses usefulness, however not longer than 3 years — in the case of personal data processed mainly for analytical purposes, use of cookies and website administration.
4. Periods in years are counted from the end of the year in which we started processing personal data, to streamline the process of deleting or destroying personal data.

X. Rights of data subjects

1. We inform you that you have the right to:
   • access your personal data;
   • rectification of personal data;
   • erasure of personal data;
   • restriction of personal data processing;
   • object to the processing of personal data;
   • data portability;
2. However, the above-mentioned rights are not absolute. This means that in some situations we have the right to refuse to fulfill them. However, we note that if we refuse to comply with the request, it happens after careful analysis and only in a situation, when refusal to comply with the request is necessary.
3. At any time you have the right to object to the processing of personal data, which takes place on the basis of the legitimate interest of the PDA (they are listed in point II) due to your particular situation. However, it should be remembered, that in accordance with the regulations, we may refuse to comply with the objection if we demonstrate that:
   • there are legally justified grounds for processing that are overriding in relation to your interests, rights and freedoms or
   • there are grounds for the establishment, exercise or defense of claims.
4. You can exercise your rights by sending an email to kontakt@piesniopisarze.pl or sending information to the address of the PDA headquarters, indicated in point I.

XI. Right to lodge a complaint

If you find that personal data is processed contrary to applicable law, you have the right to lodge a complaint with the President of the Personal Data Protection Office.

XII. Final provisions

1. In the scope not regulated by this Privacy Policy, the provisions on personal data protection shall apply.
2. We reserve the right to change the Privacy Policy by publishing a new version of the Privacy Policy on the PDA website.