PRIVACY POLICY

In accordance with Article 13 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the “Regulation,” the Tolerado Association for LGBT+ Individuals informs:

1. The controller of your personal data is the Tolerado Association for LGBT+ Individuals, located in Gdańsk (80-239) at Miszewskiego 17/105, registered under the KRS number: 0000429382, hereinafter referred to as the “Association.”

2. Contact with the Data Protection Officer: tolerado@tolerado.org with the subject line “Data Protection Officer”.

3. The Association may process your personal data for the following purposes:

   • Execution of ordered or reported services resulting from the statutory activities of the Association in accordance with Article 6(1)(f) of the Regulation;
   • Administration and management of the Association’s activities, particularly for the purpose of managing ordinary, supporting, and honorary members, as well as for the purpose of meeting the requirements arising from the provisions of the Act on Associations of 7 April 1989, as amended (Journal of Laws of 1989, No. 20, item 104), in accordance with Article 6(1)(f) of the Regulation;
   • Statistical or analytical purposes, if this is based on a legitimate interest stemming from the statutory purposes of the activities or for the purpose of measuring traffic on the website and social media associated with the Association, in accordance with Article 6(1)(f) of the Regulation;
   • To conduct statutory informational activities and send free, ordered marketing materials (newsletter) in accordance with Article 6(1)(f) of the Regulation;
   • To carry out specific projects, where the legal basis for data processing arises from agreements with other entities, statutory obligations, or other documents, in accordance with Article 6(1)(f) of the Regulation;
   • Arising from concluded service provision agreements, volunteer agreements, mandate agreements, work contracts, or any other legally permissible form of contract, for the purpose of fulfilling that contract, based on Article 6(1)(b) of the Regulation;
   • Arising from the legal obligations of the Association based on accounting and tax regulations, under Article 6(1)(c) of the Regulation;
   • To assert or defend against legal claims, in accordance with Article 6(1)(f) of the Regulation;
   • Related to the management and administration of personnel or individuals carrying out tasks for the Association in an organized manner, in accordance with Article 6(1)(f) of the Regulation.

4. In connection with the purposes of processing indicated in point 3, your data may be made available to other entities, such as:

   • Entities authorized to receive data under the law (including the Social Insurance Institution, the Tax Office, judicial authorities, and other related entities);
   • Entities providing postal services;
   • Entities providing legal services;
   • Entities providing auditing services, or entities authorized based on separate agreements with the Association to control the Association’s activities, especially those performed by the Association’s public services financed from public funds, European Union funds, or funds from the European Economic Area, to the extent that providing data is necessary to carry out a correct control and such disclosure results from concluded agreements, applicable regulations, and is legally justified;
   • Entities processing data on behalf of the Association based on personal data processing agreements.

5. In connection with the processing of personal data, you have the following rights:

   • Under Article 15 of the Regulation – the right to access your data;
   • Under Article 16 of the Regulation – the right to rectify your data;
   • Under Article 17 of the Regulation – the right to erasure of data, provided that personal data are no longer necessary for the purposes for which they were collected and there is no legal basis for further processing of data;
   • Under Article 18 of the Regulation – the right to restriction of processing;
   • Under Article 21 of the Regulation – the right to object to the processing of data.

6. Personal data are generally processed within the European Economic Area, however, the Association may assign some activities to subcontractors outside the EEA. This applies in particular to subcontractors operating within the framework of teleinformatics services support and IT infrastructure. According to the decision of the European Commission, the condition for the provision of such services must be to ensure by the subcontractor a level of protection of personal data consistent with the requirements of the European Economic Area.