Privacy Policy

Privacy policy of websites operated on the websites ladnehistorie.pl, placgrunwaldzki.com, laczanasgory.pl and turystykawytchnieniowa.pl, i.e. websites (hereinafter referred to as the "Websites") owned by the Ładne Historie Foundation, an entity with its registered office in Świdnica, at al. Niepodległości 12a/1 58-100, KRS number 0000640105, REGON 365551622, NIP 8842769171, hereinafter referred to as the "Foundation" or "Administrator".

Introductory information

  1. As of 25 May 2018, the legal basis for the introduction of this Privacy Policy is Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as "GDPR".
  2. The data published on the Websites are for information purposes only and do not constitute an offer within the meaning of the provisions of the Commercial Code, unless the specific terms and conditions for the provision of services expressly state otherwise.
  3. The Foundation has appropriate permissions to use the data, images, and information presented on the Websites. Any use of data from the Websites for commercial purposes requires the Foundation's consent.
  4. The Foundation does not expect users of the Websites to provide the Foundation with so-called "sensitive data" (i.e., data of a specific nature revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, or the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, or data concerning that person's health, sex life, or sexual orientation), nor does it expect them to consent to such processing. However, if a user decides to provide and/or publish such data, the user thereby consents to its processing to the extent and for the purpose for which they posted and published it on the Website (legal basis: Art. 9, sec. 2, item a) of the GDPR). The Foundation does not process such data for any other purpose or in any other manner, unless these matters are regulated by separate consent from the user providing or publishing the aforementioned data.
  5. The Foundation fully respects the right to privacy and personal data protection of Website users. The Foundation makes every effort to ensure that users' personal data is always:
    • obtained only for specific purposes and not further processed in a manner incompatible with the established purposes;
    • kept no longer than necessary;
    • processed in accordance with the rights of the data subjects, including the right to restrict access;
    • not transferred without appropriate protection.
  6. The Foundation informs Website users that, as part of the processing purpose, it may transfer personal data to entities cooperating with it in achieving this purpose. These entities will have the right to use the data to the full extent of the consent granted to their use for the Foundation. Such entities may include, in particular: entities providing services to the Foundation in the course of its ongoing operations (e.g., accounting and legal offices, entities maintaining the technical infrastructure used by the Foundation to conduct its operations, including the Websites), subcontractors of services provided by the Foundation, entities participating in advertising campaigns implemented by the Foundation, sponsors, business and content partners, and co-organizers of activities implemented by the Foundation.
  7. The Foundation informs users of the Websites that, under applicable law, it may be obliged to provide information, including in particular the computer's IP number, contained in access logs at the request of legally authorized state authorities for the purposes of proceedings conducted by them.
  8. All correspondence regarding the processing of personal data should be sent to the following address: Fundacja Ładne Historie, al. Niepodległości 12a/1 58-100 Świdnica, with the note "Personal Data" or to the following e-mail address: fundacja@ladnehistorie.pl, entering "Personal data" in the subject line. Current details of the Data Protection Inspector on the Foundation's website: Maria Zięba, e-mail: fundacja@ladnehistorie.pl.

Data processing

The data of users of the Websites are processed by the Foundation depending on the basis for their processing, for various purposes, in particular:

  1. In order for the Foundation to fulfill its legal obligations, arising from the provisions obliging the Foundation to maintain accounting and tax documentation and settlements of tax and public law liabilities, from the provisions regarding complaint procedures for users, or to ensure that users of the Services can use the Services safely and lawfully – for the time each time resulting from a specific legal provision – such as the mandatory period of storing documentation for tax purposes, the mandatory period of storing documentation related to the provision of services electronically.
  2. In order to conclude and perform a contract concluded by it with a user of the Website, including, for example, a contract for the provision of services consisting in the delivery of specific goods or content to the user, such as press materials, newsletter, a contract enabling users of the Websites to use the functionalities enabling the posting of users' own materials on the Websites, including in the performance of obligations arising from the course of competitions organized on the Websites - for the duration of the contract, and after that time only if it is justified by another purpose and legal basis for data processing, e.g. the need to pursue claims under the contract or to maintain financial and accounting documentation.
  3. In order to monitor the correctness and security of the operation of the Services, as well as to provide their users with technical and service support, including information on the scope of services provided to the user, failures and security threats – for the duration of the user’s use of the Services, and after that time only if it is justified by another purpose and legal basis for data processing, e.g. the need to keep documentation regarding monitoring compliance with the law on the Internet.
  4. In order to prevent abuse and violations of the law when using the Services – for the duration of the user’s use of the Services, and after that time only if it is justified by another purpose and legal basis for data processing, e.g. the need to keep records regarding monitoring compliance with the law on the Internet.
  5. For the purpose of establishing the defense and pursuing claims to which the Foundation is entitled – for the time necessary to establish and pursue these claims, as well as to enforce them, in particular those resulting from the provisions on their limitation period, and after that time only if it is justified by another purpose and legal basis for data processing, e.g. the need to maintain financial and accounting documentation.
  6. For the purpose of direct marketing of own products, as well as those carried out on behalf of others, for the duration of the contract or use of the services, and on the basis of separate consent – to the extent and for the period for which it was granted.
  7. For analytical, research and development purposes, preparing summaries, statistics, conducting research, comparative surveys, for the internal needs of the Foundation, e.g. in the scope of improving the Websites and the services provided via them, as well as on the basis of separate Regulations, competitions and plebiscites for the purpose of conducting research on a specific brand or product - for the duration of the contract or use of the Websites, and on the basis of separate consent - for the period for which it was granted, and in the case of anonymised data - for an unlimited period.

The Foundation processes the personal data of Website users when the data subject has consented to the processing of their personal data for one or more specific purposes (legal basis: Art. 6, Section 1, Item a) of the GDPR). In such a case, consent is always voluntary. The Foundation informs users each time whether consent is necessary to provide any services to the user, or whether the achievement of a specific purpose for which consent is being obtained depends on its granting. A Website user's consent to the use of the user's personal data is entirely voluntary, and such consent may be withdrawn by the user at any time. However, withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. In the event of withdrawal of consent to data processing, or after the period for which it was granted, the Foundation will have the right to process the personal data of the Website user only for the time and to the extent permitted by generally applicable law, including as part of the Foundation's performance of legal obligations or the Foundation's legitimate interest, which is in particular the legally required obligation to document the Foundation's activities or for the purpose of pursuing claims or protecting the Foundation against claims and other negative consequences, e.g. official penalties.

Website user rights related to data processing

  1. The Foundation ensures the implementation of the rights arising from Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), and in particular, each user of the Services has the right to control the processing of data concerning him, including those contained in data files, and in particular the right to:
    • obtain comprehensive information on whether data is being processed and to identify the Data Controller, its registered office address and full name;
    • obtaining information about the purpose, scope and method of data processing;
    • obtain information on when the data concerning him/her has been processed and provide the content of such data in a generally understandable form;
    • obtain information about the source of data concerning him/her;
    • obtain information on the method of sharing data, in particular information on the recipients or categories of recipients to whom the data is shared;
    • request the supplementation, updating, or correction of personal data, the temporary or permanent suspension of their processing or their deletion if they are incomplete, outdated, untrue or have been collected in violation of the Act or are no longer necessary to achieve the purpose for which they were collected;
    • submit a written, reasoned request to cease processing of his or her data due to his or her special situation, even if the processing is necessary to fulfill the justified purposes of the Data Controller and the processing of the data does not violate the rights and freedoms of the data subject;
    • object to the processing of his/her data in cases where the processing is necessary to fulfill the legitimate purposes of the Data Controller and the processing of data does not violate the rights and freedoms of the data subject, when the Data Controller intends to process them for marketing purposes or to transfer his/her personal data to another Data Controller;
    • submitting to the Data Controller a request for a new, individual review of a case resolved in violation of the prohibition of final resolution of an individual case, when the content was solely the result of operations on personal data conducted in the IT system;
    • the right to complain to the supervisory authority.
  2. In order to exercise the above-mentioned rights, the Foundation provides users of the Websites with the possibility of exercising the right to request immediate rectification of their personal data that is incorrect and to supplement incomplete personal data, including by submitting an additional declaration.
  3. In order to exercise the above-mentioned rights, the Foundation provides users of the Websites with the possibility of exercising the right to delete data ("the right to be forgotten") if one of the following circumstances occurs:
  • personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
  • the data subject has withdrawn the consent on which the processing is based and there is no other legal ground for the processing;
  • the data subject objects to the processing and there are no overriding legitimate grounds for the processing;
  • personal data were processed unlawfully;
  • personal data must be deleted in order to comply with the legal obligation provided for in the provisions of generally applicable law to which the Controller is subject;
  • personal data collected in connection with the provision of information society services to children under 16 years of age, unless processing is necessary:
  • to exercise the right to freedom of expression and information;
  • for compliance with a legal obligation requiring processing under Union law or the law of a Member State to which the Controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller;
  • for reasons of public interest in the field of public health;
  • for legitimate archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, insofar as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the purposes of such processing; or
  • to establish, pursue or defend claims.
  1. In order to exercise the above-mentioned rights, the Foundation provides users of the Websites with the possibility of exercising the right to limit processing in the following cases:
    • the data subject questions the accuracy of the personal data – for a period enabling the Foundation to check the accuracy of such data;
    • the processing is unlawful and the data subject opposes the erasure of personal data, requesting instead the restriction of their use;
    • The Foundation no longer needs the personal data for processing purposes, but the data subject needs them to establish, pursue or defend legal claims;
    • the data subject has objected to the processing – until it is determined whether the legitimate grounds on the part of the Foundation override the grounds for objection of the data subject.
  2. In order to exercise the above-mentioned rights, the Foundation provides users of the Websites with the possibility of exercising the right to data portability, which gives them the opportunity to receive personal data concerning them, which they have provided to the Foundation, in a structured, commonly used and machine-readable format, and has the right to request that these personal data be sent to another Controller without any hindrance from the Data Controller to whom these personal data were provided, if:
    • processing is based on the consent of the data subject or on a contract to which the data subject is a party;
    • processing is carried out by automated means. Provided that the exercise of the rights referred to above does not adversely affect the rights and freedoms of others.
  3. In order to exercise the aforementioned rights, the Foundation provides users of the Websites with the ability to exercise their right to object, such that each data subject has the right to object at any time – for reasons relating to their particular situation – to the processing of their personal data carried out for the performance of public tasks or the legitimate interests of the Foundation, including profiling. The Foundation is no longer permitted to process such personal data unless it demonstrates compelling legitimate grounds for processing that override the interests, rights, and freedoms of the data subject, or grounds for establishing, pursuing, or defending legal claims. If personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of their personal data for such marketing purposes, including profiling, to the extent that the processing is related to such direct marketing. Where personal data are processed for scientific or historical research purposes or for statistical purposes, the data subject has the right to object, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her, unless the processing is necessary for the performance of a task carried out in the public interest.
  4. In order to exercise the above-mentioned rights, the Foundation informs users of the Websites about the right to submit a complaint to the President of the Personal Data Protection Office regarding processing activities in the event that the processing violates the provisions of the law.

In order for the Foundation to ensure that the aforementioned rights are not exercised by a decision based solely on automated processing, including profiling, that produces legal effects for that person or significantly affects them in a similar manner, the Foundation informs users of the Services that when using the Services, small files (especially text files), so-called "cookies," are saved on the end device (computer, tablet, smartphone, etc.). These files do not contain data that can be used to identify a user. These files are not harmful to the device in any way and do not change its settings or the settings of any software installed on it. They can only be sent by the browser to the server that created them. The Foundation uses these files to tailor the content of the Services to user preferences and to optimize the use of the Services, for example, by enabling the storage of settings and preferences. Furthermore, they are used to create anonymous, aggregated statistics that help understand how users use the Services, which allows for the improvement of their structure and content, excluding personal identification of the user. In addition, the Foundation may place, or allow a third party to place, cookies on the user's device to ensure the proper functioning of the Services. This helps the Foundation monitor and verify the performance of the Services. These entities may include Google or PBI Gemius, which collect necessary data for the Foundation. Browser settings typically allow cookies to be saved by default. However, users of the Services can configure their browser to prevent cookies from being saved on their hard drive or to automatically delete them after a specified period. These settings can be changed to block the automatic handling of cookies in the web browser settings or to notify the user each time they are sent to the user's device. Users can also delete cookies from their device after each visit to the Services. Detailed information about the possibilities and methods of managing cookies is usually available in the settings or "Help" section of their web browser.

Changes to privacy policy

The Foundation reserves the right to change this Privacy Policy by publishing changes to the text or publishing a new one. Changes will become effective seven (7) days after they are posted.