Privacy Policy

Information clauses regarding the processing of personal data by Business for Climate

The Privacy Policy contains information required by the provisions of Regulation 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR). The Privacy Policy also sets out some of the terms and conditions for the use of websites and services available through them.

Information clauses concerning the processing of personal data have been grouped as follows: 

General clause
Recruitment
Information clause for employees
Visiting and browsing websites
Registration and participation in events
Newsletters and alerts  
Web form – service orders
Social Media
Information about your rights

General clause

Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR, the Controller informs that:

Personal Data Controller

The administrator of your personal data is Business for Climate, with its registered office at 163 Marynarki Polskiej Street, 80-868 Gdańsk.

Contact with the Controller

If you have any questions regarding the manner and scope of processing of your personal data within the scope of Business for Climate, as well as your rights, you can contact us using the following e-mail address: fundacja@biznesdlaklimatu.pl

Purpose and legal basis of processing

Personal data is processed in connection with the performance of sales or information processes, on the basis of Article 6(1)(c) of the Regulation and on the basis of applicable law, concluded contracts (Article 6(1)(b)) and on the basis of the consent granted, to the extent and for the purpose specified in the consent (Article 6(1)(a)).

Recipients of the data

In the course of dealing with your case, your personal data may be transferred to other entities. The recipients of the data may be entities authorized to receive personal data on the basis of relevant provisions of law and entities that process personal data on behalf of the Administrator, on the basis of an agreement concluded with the Administrator for entrusting the processing of personal data. The recipients of your personal data may be:

public authorities and entities performing public tasks or acting on behalf of public authorities, to the extent and for the purposes resulting from the provisions of generally applicable law;
other entities that process personal data on the basis of relevant agreements signed with the Company.

Information on the transfer of data to third countries

Personal data will not be transferred to third countries.

Purpose and duration of processing

The Administrator may process the personal data of the Clients for the purposes of performing statutory tasks specified in the provisions of applicable law. In other cases, personal data is processed only on the basis of a previously given consent to the extent and for the purpose specified in the consent.

Rights of data subjects

You have the right, with respect to your personal data, to:

access to personal data,
rectification of personal data, e.g. when they are outdated or untrue,
the right to erasure,
the right to restriction of processing,
the right to data portability,
the processing of the data is based on a contract concluded with the data subject or on the basis of the consent given by the data subject,
the processing is carried out by automated means,
the right to object to processing,
if you become aware of unlawful processing of your personal data, you have the right to lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office with its registered office in Warsaw.
in a situation where the processing of personal data takes place on the basis of the consent of the data subject, the provision of your personal data to the Administrator is voluntary. You have the right to withdraw your consent at any time. Any data processing activities carried out prior to the withdrawal remain lawful and do not affect the lawfulness of the processing based on consent before its withdrawal.

Profiling

In addition, we would like to inform you that we do not process personal data in an automated mode and that the data is not profiled.

Recruitment

In accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR, Business for the Climate., informs that:

Personal Data Controller

The administrator of your personal data is Business for Climate, with its registered office at 163 Marynarki Polskiej Street, 80-868 Gdańsk.

Contact with the Controller

Purpose and legal basis of processing

The Controller will process your personal data:

in order to carry out the recruitment process, on the basis of the employer’s right under Article 221 of the Labour Code and in the scope of: name and surname, parents’ names, date of birth, place of residence, correspondence address, education and employment history. The basis for the processing of the above-mentioned personal data is a legal obligation (Article 6(1)(c) of the GDPR),
in order to carry out the recruitment process, on the basis of your consent to the processing of your personal data, i.e. personal data other than those indicated in the point above, provided in the CV, form, cover letter and other documents. The basis for processing is the above-mentioned consent (Article 6(1)(a) of the GDPR),
in order to pursue the legitimate interest of the administrator in the scope of data obtained from you during the recruitment process in connection with the verification of your skills and abilities needed to work in the position specified in the advertisement.  The basis for the processing of this data is our legitimate interest (Article 6(1)(f) of the GDPR),
in order to pursue the legitimate interest of the controller in the event of a legal need to prove the facts, to demonstrate the fulfilment of obligations (the basis of Article 6(1)(f) of the GDPR),
in order to carry out future recruitment processes, on the basis of your consent to the processing of personal data provided in your CV, form, cover letter and other documents. The basis for the processing is this consent (Art. 6 (1) (a) GDPR).

Rights of data subjects

In accordance with the GDPR, you have the right to request access to your personal data and to receive a copy thereof, the right to request their rectification (correction), deletion or restriction of the processing of your personal data, as well as the right to transfer your personal data. At any time, you have the right to object to the processing of data processed on the basis of Article 6(1)(f) of the GDPR, indicated above in point 3.

The above requests can be sent to the addresses indicated in point I. In addition, in accordance with the GDPR, you have the right to lodge a complaint with the President of the Office for Personal Data Protection.

Retention period

to the extent indicated in points 3.1, 3.2 and 3.3, your data will be stored for the time necessary to carry out this recruitment,
to the extent indicated in section 3.4, your data will be stored for the period of limitation of claims resulting from the provisions of law, as well as for the time during which the regulations require us to store the data,
to the extent indicated in section 3.5, your personal data will be stored for a period of 12 months from the date of consent.

Recipients of the data

Your personal data may be transferred to authorized institutions specified by law and processors who provide services to the Data Administrator and to whom the data is entrusted.

Voluntariness of providing personal data

In terms of name and surname, date of birth, place of residence, education and the course of previous employment is a prerequisite for taking part in a given recruitment process. In the remaining scope, the provision of personal data is voluntary.

Profiling

Please be advised that we do not make decisions by automated means, including in the form of profiling.

Consent and information on the possibility of withdrawing consent

You have the right to withdraw your consent to the processing of your personal data at any time. Withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal. A statement of withdrawal of consent to the processing of personal data may be sent to the address indicated in point 1.

Employee clause

Personal Data Controller

The administrator of your personal data is Business for Climate, with its registered office at 163 Marynarki Polskiej Street, 80-868 Gdańsk.

Contact with the Controller

Legal Basis for Processing

The Personal Data Administrator processes your personal data on the basis of applicable law, concluded contracts and on the basis of your consent.

Purpose of processing

Your personal data is processed for the following purposes:

comply with legal obligations incumbent on the Administrator;
performance of contracts concluded with the Administrator’s contractors;
in other cases, your personal data is processed only on the basis of your previously granted consent to the extent and purpose specified in the consent.

Recipients of the data

In connection with the processing of data for the purposes referred to in point 4, the recipients of your personal data may be:

public authorities and entities performing public tasks or acting on behalf of public authorities, to the extent and for the purposes resulting from the provisions of generally applicable law;
other entities that process personal data on the basis of relevant agreements signed with the Administrator.

Retention period

Your personal data will be stored for the period necessary to achieve the purposes set out in point 4, and after this time for the period and to the extent required by the provisions of generally applicable law.

Rights of data subjects

In connection with the processing of your personal data, you have the following rights:

the right to access your personal data, including the right to obtain a copy of your personal data;
the right to request rectification (correction) of personal data – in the event that the data is incorrect or incomplete;
the right to request the deletion of personal data (the so-called right to be forgotten) if:
– the data is no longer necessary in relation to the purposes for which it was collected or otherwise processed,
– the data subject has objected to the processing of the personal data,
– the data subject has withdrawn his/her consent to the processing of personal data, which is the basis for the processing of data and has no other legal basis for the processing of data,
– the personal data is processed unlawfully,
– the personal data must be erased in order to comply with a legal obligation;
prawo do żądania ograniczenia przetwarzania danych osobowych – w przypadku, gdy:
– osoba, której dane dotyczą kwestionuje prawidłowość danych osobowych,
– przetwarzanie danych jest niezgodne z prawem, a osoba, której dane dotyczą, sprzeciwia się usunięciu danych, żądając w zamian ich ograniczenia,
– Administrator nie potrzebuje już danych dla swoich celów, ale osoba, której dane dotyczą, potrzebuje ich do ustalenia, obrony lub dochodzenia roszczeń,
– osoba, której dane dotyczą, wniosła sprzeciw wobec przetwarzania danych, do czasu ustalenia czy prawnie uzasadnione podstawy po stronie administratora są nadrzędne wobec podstawy sprzeciwu;
the right to request the restriction of the processing of personal data – if:
– the accuracy of the personal data is contested by the data subject,
– the processing of the data is unlawful and the data subject opposes the erasure of the data and requests the restriction of the data instead,
– The controller no longer needs the data for its purposes, but the data subject needs it to establish, defend or pursue claims,
– the data subject has objected to the processing of the data, until it is determined whether the legitimate grounds on the part of the controller override the grounds of objection;
the right to data portability – if all of the following conditions are met:
– the processing of the data is based on a contract concluded with the data subject or on the basis of the consent given by that person,
– the processing is carried out by automated means.
the right to object to the processing of data – if all of the following conditions are met:
– there are reasons related to your particular situation, in the case of data processing on the basis of a task carried out in the public interest or in the exercise of official authority by the Controller,
– processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party, except where these interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data, in particular where the data subject is a child.
if the processing of personal data is based on the consent of the person to the processing of personal data (Article 6(1)(a) of the GDPR), you have the right to withdraw this consent at any time. This withdrawal does not affect the compliance of the processing based on consent before its withdrawal with the applicable law.
if you become aware of unlawful processing of your personal data, you have the right to lodge a complaint with the supervisory authority competent for the protection of personal data.

Voluntariness of providing personal data

In a situation where the processing of personal data is based on the consent of the data subject, the provision of personal data by you to the Administrator is voluntary.
Providing your personal data is mandatory in a situation where the premise for the processing of personal data is a provision of law or a contract concluded between the parties.

Profiling

Your data will not be processed in an automated manner and will not be profiled

Visiting and browsing websites

Data processed in connection with visiting websites:

Data: IP addresses, cookies*, and similar data about your activity or devices.
The data controller is Business for Climate as the publisher of websites and the manager of IT systems used to maintain them and support other services provided by Business for Climate.
Contact details: Business for Climate., with its registered office at 163 Marynarki Polskiej Street, 80-868 Gdańsk, fundacja@biznesdlaklimatu.pl
We process data for the following purposes:
enable convenient use of services,
fraud monitoring;
inform you about content and services
keeping statistics, measuring quality and effectiveness;
handling complaints and securing claims.
The basis for data processing is the necessity to achieve the above-mentioned purposes, which result from the legitimate interests of the administrator or third parties.
Our legitimate interests lie in the continuous improvement of the quality, availability and number of visitors to the websites or the use of services available through the websites.
The Administrator may make the data available to other recipients only at the request of entities authorized to do so by law or when it is necessary to achieve the above-mentioned purposes, e.g. entities providing hosting, IT service or sales or support for the sale of advertising space on our websites.
The Controller stores the data only for the time necessary to achieve the above-mentioned purposes, no longer than until the moment of objection to the processing.

Data processed in connection with registration or participation in events

Data: name and surname, e-mail address, name of the company/institution/organization/editorial office/university, position/student, country, postal code, city, province, landline phone, mobile phone, login details (e-mail address and password). For some services, also photography.
The data controller is: Business for Climate.
The data will be processed for the following purposes:

registration for the event and setting up an individual account in the registration system, which will allow you to change the participant’s data and access other services provided to the Foundation
verification of identity when entering the premises where the event will take place, printing and issuing the appropriate ID, 
mediation in the reservation of accommodation and its settlement, 
marketing of services and communication by Business for the Climate with the participant, in the form of written correspondence, electronic correspondence or with the use of telecommunications devices (telephones, text messages), 
keeping statistics, measuring quality and effectiveness, 
handling complaints and securing claims.

The basis for data processing is the necessity to achieve the above-mentioned purposes, which result from the legitimate interests of the administrator or third parties, and the necessity to perform a contract or to take steps at the user’s request before concluding a contract
Legitimate interests consist in continuous improvement of the quality, increasing the availability of events and the number of event participants, information about Business for Climate services or partners and sponsors, increasing the attractiveness of advertising space for both advertisers and recipients of advertisements.
The Administrator may make the data available to other recipients only at the request of entities authorized to do so by law or when it is necessary to achieve the above-mentioned purposes, e.g. organizers, partners and sponsors of the event; Lists of such data recipients will be published and updated on an ongoing basis on the relevant event pages or in information materials.
The Controller stores the data only for the time necessary to achieve the above-mentioned purposes, no longer than until the moment of objection to the processing.

Data processed in connection with the subscription of newsletters and/or alerts

Data: In connection with the newsletter order, only the e-mail address may be processed (unless the user provides other data).  
The data administrator is: Business for Climate as a publisher of websites and a manager of IT systems used to maintain them and support other services. Contact details: Marynarki Polskiej 163, 80-868 Gdansk, fundacja@biznesdlaklimatu.pl
The data will be processed for the following purposes:

send the newsletter you have subscribed to
marketing services and communicating with newsletter users,  
tailor content and advertising to users’ interests, 
keeping statistics, measuring quality and effectiveness, 
handling complaints and securing claims.

The basis for data processing is the necessity for the performance of a contract or to take steps at the user’s request prior to concluding a contract (purpose from letter c(i) and (v)) and the necessity to achieve the above-mentioned purposes, which result from the legitimate interests of the controller or third parties.
Our legitimate interests lie in the continuous improvement of the quality, availability and attractiveness of newsletters and other information services, and the increase in the number of newsletters requested.
The Administrator may make the data available to other recipients only at the request of entities authorized to do so by law or when it is necessary to achieve the above-mentioned purposes, e.g. entities providing hosting, IT service or sales or support for the sale of advertising space on our websites.
The Controller stores the data only for the time necessary to achieve the above-mentioned purposes, no longer than until the moment of objection to the processing.

Data processed in connection with the contact via the contact form on the Business for Climate website:

Data: name, surname, e-mail address, telephone number or other voluntarily entered into the Contact Form
The data controller is Business for Climate. as a publisher of websites and a manager of IT systems used to maintain them and support other services provided
providedContact details: Marynarki Polskiej 163, 80-868 Gdańsk, fundacja@biznesdlaklimatu.pl
We process data for the following purposes:

enable contact for the purposes indicated by the addressee: inquiry, service, etc., 
enabling the provision of services, sending back an offer, etc.  
fraud monitoring, 
inform you about content and services,
keeping statistics, measuring quality and effectiveness, 
handling complaints and securing claims.

The basis for data processing is the necessity to achieve the above-mentioned purposes, which result from the legitimate interests of the administrator or third parties.
Our legitimate interests lie in the continuous improvement of the quality, availability and number of visitors to the websites or the use of services available through the websites.
The Administrator may make the data available to other recipients only at the request of entities authorized to do so by law or when it is necessary to achieve the above-mentioned purposes, e.g. entities providing hosting, IT service or sales or support for the sale of advertising space on our websites.

The Controller stores the data only for the time necessary to achieve the above-mentioned purposes, no longer than until the moment of objection to the processing. 

Social Media

The Controller processes personal data of persons who have liked our social media profiles on popular social networking sites. The data is processed in order to enable the management and ongoing management of our profiles, including for the purpose of communicating with the community and organizing events or competitions, on the terms specified in the functionality of individual social media and their regulations. The data of community members is also processed for statistical and analytical purposes and may be processed for the purpose of pursuing and defending against claims. The legal basis for the processing of your personal data is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR).

Information about your rights

In connection with the processing of personal data, you (data subject) have the following rights: 

the right to request access to data,
the right to request rectification;
the right to request the deletion of data,
the right to request data portability,
the right to request the restriction of data processing,
the right not to be subject to automated decision-making, including profiling;
the right to object to the processing of personal data,
the right to lodge a complaint regarding the processing of your personal data with the competent supervisory authority.

If you have any questions or comments related to the processing of personal data on the websites or in connection with the services available through them, you can contact the data controllers at fundacja@biznesdlaklimatu.pl. 