Privacy Policy

This is an English translation of the Polish Privacy Policy. In case of discrepancy, the Polish version prevails.

Fundacja Via Sonoria, with its registered office in Katowice, ul. Gliwicka 228, 40-860 Katowice, Poland, entered in the register of entrepreneurs and the register of associations, other social and professional organisations, foundations and independent public healthcare institutions kept by the National Court Register under KRS number 0001126660, NIP (Tax ID): 5253017140, REGON (Statistical No.): 529654373 (the “Foundation”), respects the privacy of those who use our services and therefore presents this Privacy Policy.

This Privacy Policy provides general information on the processing of personal data by Fundacja Via Sonoria. We respect the privacy of those who use our services and present this Policy so that everyone can learn to what extent their personal data are processed and decide independently, knowingly and freely whether to use our services.

Data controller

The controller of personal data is Fundacja Via Sonoria, with its registered office in Katowice, ul. Gliwicka 228, 40-860 Katowice, Poland, KRS: 0001126660, NIP: 5253017140, REGON: 529654373.

The Controller can be contacted by email at kontakt@viasonoria.pl or in writing at the Foundation’s registered office: ul. Gliwicka 228, 40-860 Katowice, Poland.

The Foundation has not appointed a Data Protection Officer. In all matters relating to the processing of personal data, please contact the Controller directly using the contact details given above.

Purposes and legal bases of processing

The Foundation processes personal data for the following purposes:

1. On the basis of consent (Article 6(1)(a) GDPR) in order to:
   • Send information about the Foundation’s activities, including the newsletter
   • Respond to enquiries sent via contact forms
   • Cooperate with partners and volunteers
   • Conduct future recruitment for positions at the Foundation
2. For the performance of a contract (Article 6(1)(b) GDPR) in connection with:
   • Performing agreements with donors, beneficiaries, volunteers and partners
   • Providing services by electronic means
   • Organising events, workshops and training
3. For compliance with a legal obligation (Article 6(1)(c) GDPR) with regard to:
   • Keeping accounting and tax records
   • Meeting reporting obligations
   • Archiving documents in accordance with the law
4. For the purposes of the Foundation’s legitimate interests (Article 6(1)(f) GDPR) such as:
   • Establishing, exercising or defending legal claims
   • Keeping statistics and carrying out analyses
   • Direct marketing of the Foundation’s services
   • Ensuring information and network security

Scope of data processed

The scope of personal data processed depends on the purpose of processing and may include:

• First name and surname
• Email address
• Telephone number
• Residential or correspondence address
• Data necessary for tax settlements
• Image (likeness), where consent has been given
• Other data provided voluntarily by persons contacting the Foundation

Providing personal data is voluntary, but in some cases may be necessary to achieve specific purposes (e.g. concluding a contract or providing support).

Data retention period

Personal data will be stored for as long as necessary to achieve the purposes for which they are processed, in particular:

• Where processing is based on consent – until consent is withdrawn
• Where processing is for the performance of a contract – for the duration of the contract and until any claims become time-barred
• Where processing is for compliance with legal obligations – for the period required by law (e.g. 5 years for tax records)
• Where processing is based on legitimate interests – until an effective objection is raised or those interests cease

Recipients of data

Personal data may be disclosed to the following categories of recipients:

• Entities providing services to the Foundation (e.g. IT, accounting and legal services)
• Entities entitled to receive data under the law
• The Foundation’s partners, to the extent necessary to carry out joint projects (after obtaining the appropriate consent)

Personal data are not transferred to third countries, i.e. outside the European Economic Area, or to international organisations.

Rights of data subjects

Persons whose data are processed by the Foundation have the following rights:

• The right of access to their data and to obtain a copy
• The right to rectification (correction) of their data
• The right to erasure of data
• The right to restriction of processing
• The right to object to processing
• The right to data portability
• The right to withdraw consent at any time (without affecting the lawfulness of processing carried out before its withdrawal)
• The right to lodge a complaint with the President of the Personal Data Protection Office (UODO, Poland’s supervisory authority)

Automated decision-making and profiling

Personal data are not used for automated decision-making, including profiling, that would produce legal effects concerning the data subject or similarly significantly affect them.

Data security

The Foundation applies appropriate technical and organisational measures to ensure the security of the personal data processed, in particular to prevent access by unauthorised persons or processing in breach of the law.

Cookies and other technologies

The Foundation’s website uses cookies that are necessary for it to function properly, including to ensure security and maintain user sessions. The use of these cookies does not require the user’s consent.

The Foundation does not currently use analytics or marketing cookies. If such tools are introduced in the future, the user’s consent will be obtained before they are used, and this Policy will be updated accordingly.

Users may change their browser’s cookie settings at any time, including disabling cookies, although this may make the website more difficult to use.

Changes to the Privacy Policy

The Foundation reserves the right to amend this Privacy Policy. Users will be informed of any changes via the Foundation’s website.

Contact

In all matters relating to the processing of personal data and the exercise of related rights, you can contact the Foundation by email at kontakt@viasonoria.pl or in writing at the Foundation’s registered office: ul. Gliwicka 228, 40-860 Katowice, Poland.

Last updated: 26 July 2026.