Sancta Maria Magdalena Foundation
At the Sancta Maria Magdalena Foundation, which manages the website www.charityfund.pl (and is its administrator), we place particular importance on the protection of personal data.
Our Privacy Policy explains how we process your personal data, how we protect it, and what rights you have.
To make it easier to understand, the document is divided into two parts.
I. Basic Information
Your personal data is processed so that you can support charitable fundraising campaigns conducted on the website charityfund.pl. Payments can be made in various ways — depending on your preferences and the scope of data provided.
These payments and related data are stored in our IT systems and accounting documentation. We also process your data to respond to complaints, inquiries, and questions related to payments or use of the charityfund.pl portal.
We keep you informed about the fate of the fundraisers you supported and about other activities of the Foundation.
Purposes of processing personal data:
- receiving monetary donations and related actions,
- e-mail notifications about supported fundraisers,
- user account on charityfund.pl,
- allocating 1.5% of tax,
- reminders about the 1.5% tax donation,
- notifications about people in need of help,
- sending acknowledgements and information about the Foundation’s activities (including marketing),
- providing data to public authorities upon request,
- fulfilling legal obligations, including tax and accounting laws.
II. Detailed Information
Who is the administrator of your personal data?
The administrator is the Sancta Maria Magdalena Foundation with its registered office at: ul. Kłodzka 6/1, 50-536 Wrocław, NIP: 8992905426.
How to contact the administrator about personal data?
E-mail: iod@charityfund.pl
On what basis do we process personal data?
- Article 6(1)(a) of the GDPR – based on your consent,
- Article 6(1)(b) of the GDPR – for the performance of a contract (e.g., account registration),
- Article 6(1)(c) of the GDPR – to fulfill legal obligations (e.g., accounting),
- Article 6(1)(f) of the GDPR – based on the legitimate interests of the administrator (e.g., responding to inquiries, protection against claims).
What rights do you have?
- Right to access your data,
- Right to rectification (correction) of data,
- Right to erasure of data (in certain cases),
- Right to restriction of processing,
- Right to data portability (if processing is based on consent or contract),
- Right to object to data processing,
- Right to withdraw consent (if processing is based on consent),
- Right to lodge a complaint with a supervisory authority (in Poland – the President of the Personal Data Protection Office).
To whom do we transfer your data?
- Payment operators (e.g., PayU, Przelewy24, DotPay),
- IT service providers (e.g., hosting, newsletters),
- Accounting, legal, and auditing firms,
- Public authorities (if required by law),
- Other recipients – only in accordance with legal regulations.
How long is personal data stored?
- Until the purpose for which it was collected is fulfilled,
- Until consent is withdrawn (if data is processed based on consent),
- For the legally required retention period (e.g., accounting – minimum 5 years),
- Until the limitation period for claims expires.
Is data processed outside the EU?
We do not transfer your personal data outside the European Economic Area.
Do we use cookies?
Yes. Our website uses cookies. For more details, see our Cookie Policy.
How is data security ensured?
We apply appropriate technical and organizational measures in accordance with the level of risk, including:
- data transmission encryption (SSL),
- physical and logical server protection,
- limited access to data.
Contact
If you have any questions, feel free to contact us at: iod@charityfund.pl
Date of last policy update: 21.06.2025