PRIVACY POLICY

With a view to ensuring security and respecting and upholding the rights of individuals, with particular regard to the right to privacy, the Campus Bemke Foundation presents this policy to explain the rules governing the use, collection and processing of personal data.

When processing personal data, the Campus Bemke Foundation follows the guidelines below, ensuring fairness and transparency of processing as well as efficient exercise of the rights of data subjects.

1. Principles relating to the processing of personal data:

• “processed lawfully, fairly and in a transparent manner”
• “collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes”,
• “adequate, relevant and limited to what is necessary in relation to the purposes — data minimisation”,
• “accurate and, where necessary, kept up to date”,
• “kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed”,
• “processed in a manner that ensures appropriate security of personal data: protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical and organisational measures”.

2. Lawfulness of processing:

• the data subject has given consent to the processing of their personal data for one or more specific purposes;
• processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
• processing is necessary for compliance with a legal obligation to which the controller is subject;
• processing is necessary in order to protect the vital interests of the data subject or of another natural person;
• processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
• processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where those interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

What data we collect about you

• Data collected during recruitment.
• Data of contractors and contractors’ employees collected during contract negotiations and performance.
• Data of people using services provided by Campus Bemke.
• Data of people participating in social projects and public-benefit activities carried out by our Foundation.
• Contact details enabling us to respond to enquiries and correspondence.
• Data of donors, stakeholders and people involved in building the Campus Bemke project.
• Data necessary for volunteering activities.
• Data of people using Campus premises in order to ensure physical and organisational security.
• Images of people who have consented to their publication.

If you are under 16 years of age, we will ask your legal guardian for consent.

Data Controller
The controller of your personal data is the Campus Bemke Foundation, with its registered office in Klecza Dolna at ul. Krakowska 4, 34–124 Klecza Górna, entered in the National Court Register of Associations, Other Social and Professional Organisations, Foundations and Public Healthcare Institutions under KRS number 0000960145, NIP 5512653624, REGON 521472833.

Contact point
You can contact us by e-mail at kontakt@bemke.pl or in writing by sending correspondence to the registered office of the Campus Bemke Foundation.

Purpose of data processing
Your personal data obtained in connection with your participation in the projects we offer will be processed for the following purposes:

• recruitment and cooperation,
• performance of concluded contracts,
• direct marketing,
• responding to enquiries and correspondence,
• implementation of social projects and public-benefit activities,
• building relationships with stakeholders, collaborators and people supporting the Campus Bemke Foundation,
• volunteering activities,
• fulfilment of statutory objectives,
• ensuring physical and organisational security,
• responding to letters and applications,
• archiving,
• fulfilling legal obligations incumbent on us,
• managing social media.

Legal basis for data processing

• the data subject has given consent to the processing of their personal data for one or more specific purposes;
• processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
• processing is necessary for compliance with a legal obligation to which the controller is subject;
• processing is necessary in order to protect the vital interests of the data subject or of another natural person;
• processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
• processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where those interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Automated decision-making
Your personal data will not be processed by automated means, including profiling.

Retention period for your personal data
The period for which your personal data is processed depends on the purpose of the processing. The period for which your personal data will be stored is calculated based on the following criteria:

• legal provisions that may require the Campus Bemke Foundation to process data for a specified period,
• the period necessary to protect the interests of the data controller,
• the period necessary to perform contracts and provide services by the Campus Bemke Foundation, and to provide the necessary support to Project Participants and people using Campus premises,
• limitation periods for claims,
• the period for which consent has been granted.

Recipients of your data
Your data may be disclosed to:

• entities providing IT services,
• Polish Post and courier companies,
• delivery companies,
• security companies,
• entities authorised to receive Personal Data under applicable law,
• advisory firms, including law firms,
• Founders of the Campus Bemke Foundation.

Transfer of data outside the European Economic Area
Your personal data will not be transferred to a third country or an international organisation.

Your rights in connection with data processing
You have the right to:

• access your personal data,
• have it rectified (corrected or supplemented),
• restrict its processing or have it erased,
• data portability in relation to personal data you have provided to us, i.e. the right to receive that personal data in a structured, commonly used and machine-readable format and the right to transmit that data to another controller; where technically feasible, you have the right to request that we transmit your personal data directly to another controller,
• the right to object to further processing of your personal data.

You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing of your data based on consent before its withdrawal.
If you have any doubts as to whether your personal data is being processed correctly by the Campus Bemke Foundation, you have the right to lodge a complaint with the President of the Personal Data Protection Office.

Privacy notice for contact purposes
We hereby inform you that:

1. The controller of your personal data is the Campus Bemke Foundation, with its registered office in Klecza Dolna at ul. Krakowska 4, 34–124 Klecza Górna, entered in the National Court Register of Associations, Other Social and Professional Organisations, Foundations and Public Healthcare Institutions under KRS number 0000960145, NIP 5512653624, REGON 521472833.
2. If you have any questions, please contact us by e-mail at kontakt@bemke.pl or in writing at the address of our registered office.
3. Your personal data will be processed for the purpose of handling correspondence on the basis of Article 6(1)(f) of Regulation (EU) 2016/679 of the European Parliament and of the Council.
4. Your personal data will not be processed by automated means, including profiling.
5. Your personal data included in a form or letter will be stored for the period necessary to carry out the tasks arising from the content of the correspondence, while personal data required for correspondence records will be stored for 5 years from the end of the calendar year in which the correspondence was received and entered in the correspondence register.
6. Recipients of the data may include companies providing IT services, advisers and the Founders.
7. You have the right to request access to your personal data, rectification, erasure or restriction of processing, the right to object to processing, as well as the right to data portability.
8. Providing the data is voluntary but necessary in order to handle the correspondence received.
9. You have the right to lodge a complaint with the supervisory authority, namely the President of the Personal Data Protection Office.

Privacy notice for participants in projects organised by Bemke
We hereby inform you that:

1. The controller of the personal data of the participant and their parent/legal guardian is the Campus Bemke Foundation, with its registered office in Klecza Dolna at ul. Krakowska 4, 34–124 Klecza Górna, entered in the National Court Register of Associations, Other Social and Professional Organisations, Foundations and Public Healthcare Institutions under KRS number 0000960145, NIP 5512653624, REGON 521472833.
2. Depending on the project, the personal data of the participant and their parents/legal guardians will be processed: for the performance of a contract concluded in accordance with the Regulations (Article 6(1)(b) of Regulation (EU) 2016/67 of the European Parliament and of the Council), in accordance with education regulations (Article 6(1)(c) of Regulation (EU) 2016/67 of the European Parliament and of the Council), or on the basis of consent (Article 6(1)(a) of Regulation (EU) 2016/67 of the European Parliament and of the Council).
3. Personal data will not be processed by automated means, including profiling.
4. Personal data will be stored for the period necessary to fulfil the legal obligations imposed on the Foundation and for the period required to establish, pursue or defend claims.
5. Consent to the processing of personal data may be withdrawn at any time electronically at kontakt@bemke.pl. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
6. Recipients of the data may include companies providing IT services, entities cooperating with the Controller in organising leisure activities, and other entities authorised under separate provisions of law.
7. You have the right to request access to your own and your child’s personal data, rectification, erasure or restriction of processing, the right to object to processing, as well as the right to data portability.
8. Providing personal data within the scope resulting from Article 92k of the Education System Act (organisation of leisure activities, including day camps) is necessary in order to participate in the organised leisure activities. Providing other personal data is voluntary, but necessary to conclude a contract for the organisation of leisure activities.
9. You have the right to lodge a complaint with the supervisory authority, namely the President of the Personal Data Protection Office.

Privacy notice for collaborators, contractors and contractors’ employees.
We hereby inform you that:

1. The Controller is the Campus Bemke Foundation, with its registered office in Klecza Dolna at ul. Krakowska 4, 34–124 Klecza Górna, entered in the National Court Register of Associations, Other Social and Professional Organisations, Foundations and Public Healthcare Institutions under KRS number 0000960145, NIP 5512653624, REGON 521472833.
2. If you have any questions, please contact us by e-mail at kontakt@bemke.pl or in writing at the address of our registered office.
3. Your personal data will be processed in order to take steps at the request of the data subject prior to entering into a contract and, if your offer is selected, for the purpose of signing and performing the contract on the basis of Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council; in the case of contractors’ employees, it will be processed for the purposes of the Controller’s legitimate interest, specifically performance of the contract, on the basis of Article 6(1)(f) of Regulation (EU) 2016/679 of the European Parliament and of the Council.
4. Your personal data will not be processed by automated means, including profiling.
5. You have the right to request access to your personal data, rectification, erasure or restriction of processing, the right to object to processing, as well as the right to data portability.
6. The personal data in question will be stored for the duration of the contract and after its termination for the period required to establish, pursue or defend claims, for a maximum of 6 years after termination of the contract.
7. Selected data may be disclosed to the following entities: law firms, bailiffs, insurance companies, software providers, technical support providers and the Founders.
8. Providing the data is voluntary, but necessary to participate in the procurement process and/or to conclude and perform a contract or order.
9. You have the right to lodge a complaint with the supervisory authority, namely the President of the Personal Data Protection Office.

Privacy notice for volunteers
We hereby inform you that:

1. The Controller is the Campus Bemke Foundation, with its registered office in Klecza Dolna at ul. Krakowska 4, 34–124 Klecza Górna, entered in the National Court Register of Associations, Other Social and Professional Organisations, Foundations and Public Healthcare Institutions under KRS number 0000960145, NIP 5512653624, REGON 521472833.
2. If you have any questions, please contact us by e-mail at kontakt@bemke.pl or in writing at the address of our registered office.
3. Your personal data will be processed for the purpose of performing the volunteer agreement on the basis of Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council, and Article 6(1)(c) of Regulation (EU) 2016/679 of the European Parliament and of the Council — a legal obligation arising from the Act on Public Benefit Activity and Volunteer Work.
4. Your personal data will not be processed by automated means, including profiling.
5. You have the right to request access to your personal data, rectification, erasure or restriction of processing, the right to object to processing, as well as the right to data portability.
6. The personal data in question will be stored for the duration of the contract and after its termination for the period required to establish, pursue or defend claims, for a maximum of 6 years after termination of the contract.
7. Selected data may be disclosed to the following entities: law firms, bailiffs, insurance companies, software providers, technical support providers, entities cooperating in the implementation of public-benefit tasks and the Founders.
8. Providing the data is voluntary, but necessary to participate in the procurement process and/or to conclude and perform a contract or order.
9. You have the right to lodge a complaint with the supervisory authority, namely the President of the Personal Data Protection Office.

Privacy notice for job applicants, collaborators, interns and trainees

1. The Controller is the Campus Bemke Foundation, with its registered office in Klecza Dolna at ul. Krakowska 4, 34–124 Klecza Górna, entered in the National Court Register of Associations, Other Social and Professional Organisations, Foundations and Public Healthcare Institutions under KRS number 0000960145, NIP 5512653624, REGON 521472833.
2. If you have any questions, please contact us by e-mail at kontakt@bemke.pl or in writing at the address of our registered office.
3. Your personal data will be processed for the purpose of carrying out the recruitment process.
4. If an employment relationship is established, the legal basis for processing your data is the legal obligation incumbent on the controller — Article 6(1)(c) of Regulation (EU) 2016/679 of the European Parliament and of the Council and the Labour Code — as well as consent (where more data is provided than required by law) — Article 6(1)(a) of Regulation (EU) 2016/679 of the European Parliament and of the Council. In the case of collaborators, trainees and interns, the legal basis for processing is Article 6(1)(6) of Regulation (EU) 2016/679 of the European Parliament and of the Council — contract.
5. Your personal data will not be processed by automated means, including profiling.
6. Your personal data will be stored until the recruitment process is completed and, if you consent to participation in future recruitment processes, until that consent is withdrawn.
7. Consent to the processing of personal data may be withdrawn at any time electronically at kontakt@bemke.pl. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
8. You have the right to request access to your personal data, rectification, erasure or restriction of processing and, where personal data is processed on the basis of consent, the right to data portability.
9. Providing personal data within the scope resulting from Article 22¹ of the Labour Code is necessary in order to participate in the recruitment process. Providing other data is voluntary.
10. You have the right to lodge a complaint with the supervisory authority, namely the President of the Personal Data Protection Office.

 

Privacy notice for participants in extracurricular activities organised by the Campus Bemke Foundation

We hereby inform you that:

1. The controller of the personal data of the extracurricular activity participant and their parent/legal guardian is the Campus Bemke Foundation, with its registered office in Klecza Dolna at ul. Krakowska 4 (34-124 Klecza Górna), entered in the National Court Register under KRS number 0000960145, NIP 5512653624, REGON 521472833.
2. The personal data of the activity participant and their parent or legal guardian will be processed:
   • for the purpose of concluding and performing a contract concerning participation in extracurricular activities organised by the Foundation (Article 6(1)(b) GDPR);
   • for compliance with legal obligations incumbent on the Controller, in particular those arising from tax and accounting regulations (Article 6(1)(c) GDPR);
   • for the purpose of organising, ensuring the safety and proper conduct of extracurricular activities, communicating with parents/legal guardians, establishing, pursuing or defending claims, and maintaining documentation related to the Foundation’s activities, which constitutes the Controller’s legitimate interest (Article 6(1)(f) GDPR);
   • on the basis of consent granted, in particular with regard to publishing the participant’s image or providing information about the Foundation’s activities (Article 6(1)(a) GDPR);
   • where information is provided about the participant’s health, allergies or other special needs relevant to safe participation in the activities, such data will be processed on the basis of the explicit consent of an authorised person or to the extent necessary to protect the participant’s vital interests (Article 9(2)(a) or (c) GDPR).
3. Personal data will not be processed by automated means, including profiling.
4. Personal data will be stored for the period necessary to achieve the purposes for which it was collected and, after that period, for the period required by law or necessary to establish, pursue or defend claims.
5. Where data is processed on the basis of consent, consent may be withdrawn at any time by contacting the Controller at kontakt@campusbemke.pl. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
6. Recipients of personal data may include:
   • entities providing IT, accounting, legal, organisational or administrative services to the Controller;
   • people conducting extracurricular activities or co-organising events carried out by the Foundation;
   • entities providing transport, insurance or catering services where necessary for the delivery of a given activity;
   • entities authorised to receive data under applicable law.
7. The data subject has the right to: access personal data; rectify data; erase data in cases provided for by law; restrict processing; object to processing carried out on the basis of the Controller’s legitimate interest; data portability in the cases specified in the GDPR; and withdraw consent at any time where processing is based on consent.
8. Providing the personal data of the participant and their parent/legal guardian is voluntary, but necessary for registration and participation in extracurricular activities organised by the Foundation. Failure to provide the data will make participation impossible.
9. As a rule, personal data will not be transferred to third countries or international organisations. Where the Controller uses services of providers whose infrastructure is located outside the European Economic Area, data will be transferred in compliance with the requirements of the GDPR.
10. The data subject has the right to lodge a complaint with the President of the Personal Data Protection Office if they believe that the processing of personal data infringes the GDPR.

1.   

Privacy notice for donors to the Campus Bemke Foundation

1. The controller of a donor’s personal data is the Campus Bemke Foundation, with its registered office in Klecza Dolna at ul. Krakowska 4 (34-124 Klecza Górna), entered in the National Court Register under KRS number 0000960145, NIP 5512653624, REGON 521472833, e-mail: kontakt@bemke.pl.
2. The donor’s personal data will be processed:
   • for the purpose of accepting and administering the donation and contacting the donor on matters related to the donation (Article 6(1)(b) and (f) GDPR);
   • for compliance with obligations arising from law, in particular tax and accounting regulations and regulations governing foundations (Article 6(1)(c) GDPR);
   • for the purpose of establishing, pursuing or defending claims, which constitutes the Controller’s legitimate interest (Article 6(1)(f) GDPR);
   • for the purpose of providing information about the Foundation’s activities, projects, use of funds and opportunities to continue supporting the Foundation’s statutory activities (Article 6(1)(f) GDPR or Article 6(1)(a) GDPR);
   • on the basis of the donor’s consent, where consent has been given to publish information about support provided to the Foundation or to receive specified information electronically (Article 6(1)(a) GDPR).
3. Personal data will not be processed by automated means, including profiling.
4. Personal data will be stored for the period necessary to achieve the purposes for which it was collected and subsequently for the period required by applicable law, in particular tax and accounting regulations, as well as for the period necessary to establish, pursue or defend claims.
5. Consent to the processing of personal data may be withdrawn at any time electronically at kontakt@bemke.pl. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
6. Recipients of personal data may include entities providing IT, accounting, legal, banking, postal or courier services to the Controller, entities supporting the Foundation in fulfilling its statutory objectives, and other entities authorised under separate provisions of law.
7. You have the right to request access to your personal data, rectification, erasure or restriction of processing, the right to object to processing, as well as the right to data portability in the cases provided for by the GDPR.
8. Providing personal data is voluntary, but may be necessary to accept a donation, issue relevant documents, claim tax relief or maintain contact with the donor. Failure to provide the data may make it impossible to achieve these purposes.
9. As a rule, personal data will not be transferred to third countries or international organisations. If such a transfer becomes necessary in connection with the Foundation’s use of technology providers, it will be carried out in accordance with GDPR requirements and with appropriate safeguards in place.
10. You have the right to lodge a complaint with the supervisory authority, namely the President of the Personal Data Protection Office.

1. 1.