1. Data controller
The controller of your personal data is the To Health To Nature Foundation (Fundacja Po Zdrowie Do Natury), seated at Kamianna 50, 33-336 Łabowa, Poland, registered in the National Court Register (KRS) under number 0000639637 (NIP 7343542922, REGON 365564211).
Contact for data protection matters: e-mail biuro@pozdrowiedonatury.pl, phone +48 537 236 572.
2. What data we process and why
Contact form
When you send a message through the Contact form, we process:
- your name,
- your e-mail address,
- your phone number (if you provide it),
- the content of your message.
The data is used only to answer your enquiry. The legal basis is your consent (Article 6(1)(a) GDPR), given by ticking the consent box before sending the form. Providing the data is voluntary, but without an e-mail address and a message we will not be able to reply.
Messages are stored in the website system and forwarded to the Foundation's office e-mail address.
Donations
The website does not collect personal data during the support process. Transfer details are displayed so you can copy them or scan the QR code in your banking app. The QR code is generated directly in your browser and no data is sent to the server. The transfer itself is made through your bank, which follows its own privacy policy.
Technical data and security
The web server automatically records basic technical data, such as IP address, time of visit and browser type. This data is necessary for the website to operate and to keep it secure. The legal basis is our legitimate interest (Article 6(1)(f) GDPR), namely ensuring the security and proper operation of the website.
Spam protection for the form (Cloudflare Turnstile)
The contact form is protected by Cloudflare Turnstile. When you send a message, the service processes your IP address and browser data to distinguish a human from an automated program. The legal basis is our legitimate interest (Article 6(1)(f) GDPR). More information: Cloudflare privacy policy.
Social media
The website contains links to the Foundation's Facebook and Instagram profiles. These are plain links. Your data is processed only when you go to those services yourself, under their privacy policies.
3. Cookies and browser storage
The website uses only cookies and browser storage mechanisms necessary for its operation:
- session – a technical identifier needed for the website to work properly,
- accessibility settings – remembering your choices in the WCAG panel (e.g. font size, contrast),
- cookie notice acknowledgement – remembering that you have seen the cookie information.
We do not use analytics, advertising or marketing cookies. Because these are necessary to provide the service, they do not require your consent. You can delete them in your browser settings, although this may affect some features of the website.
4. Data recipients
Your data may be shared with:
- the hosting provider on whose servers the website runs: ADMIN.NET.PL S.C. (mydevil.net), ul. Bitwy pod Monte Cassino 5/198, 33-100 Tarnów, Poland. The servers are located in Poland. The provider's information clause: mydevil.net – documents,
- Cloudflare, Inc. (Turnstile service),
- public authorities, where required by law.
Some of these entities are based outside the European Economic Area (in the USA). Data is transferred on the basis of standard contractual clauses approved by the European Commission or other mechanisms provided for in the GDPR.
We do not sell personal data or share it for marketing purposes.
5. How long we keep data
- Contact form messages – until the correspondence is concluded, and no longer than 12 months after the last message.
- Technical data in server logs – for the period necessary to keep the website secure, in line with the server settings.
6. Your rights
You have the right to:
- access your data and obtain a copy of it,
- rectify your data,
- erase your data where there is no longer a basis for processing it,
- restrict processing,
- data portability,
- object to processing based on our legitimate interest,
- withdraw your consent at any time. This does not affect the lawfulness of processing carried out before withdrawal.
To exercise these rights, write to biuro@pozdrowiedonatury.pl.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland.
7. Automated decision-making
We do not make decisions based solely on automated processing and do not profile website users.
8. Changes to this privacy policy
This policy may be updated, for example following changes in the law or in how the website works. The current version is always available on this page.