Privacy Policy for the akcjabach.org Website
This document is an English translation of the Polish-language Privacy Policy of the akcjabach.org website. It has been prepared for informational purposes. In the event of any discrepancy or difference in interpretation, the Polish-language version shall prevail.
1. Personal Data Controller
The controller of personal data is Baptystyczna Akcja Charytatywna, known in English as Polish Baptist Aid, with its registered office at ul. Waliców 25 in Warsaw, hereinafter referred to as “PBAid” or the “Controller.”
The Controller may be contacted:
-
by post at the address of PBAid’s registered office;
-
by email at: kontakt@akcjabach.org.
2. Data Protection Officer
Polish Baptist Aid is an organizational unit of the Baptist Union of Poland. Therefore, the duties of the Data Protection Officer in relation to the activities of PBAid are performed by the Data Protection Officer of the Baptist Union of Poland.
The Data Protection Officer may be contacted regarding any matters related to the processing of personal data and the exercise of rights connected with such processing by email at: ido@baptysci.pl.
3. Scope of this Privacy Policy
This Privacy Policy sets out the rules for the processing of personal data in connection with:
-
the use of the website www.akcjabach.org;
-
contacting PBAid through the contact form, by email, by telephone or by traditional correspondence;
-
subscribing to the PBAid newsletter;
-
making donations to PBAid;
-
using PBAid’s social media profiles;
-
the use of cookies and similar technologies.
In the case of applications for programs, projects, events or volunteering opportunities, PBAid may provide separate privacy notices adapted to the nature of the relevant activity.
4. Contacting PBAid
If you contact PBAid through the contact form, by email, by telephone or by traditional correspondence, the personal data you provide may be processed for the following purposes:
-
receiving your message and responding to it;
-
conducting further correspondence;
-
handling the matter to which your message relates;
-
archiving correspondence;
-
establishing, pursuing or defending against potential claims.
The legal basis for processing is the legitimate interest of PBAid in communicating with individuals and handling matters addressed to PBAid, pursuant to Article 6(1)(f) of the General Data Protection Regulation, hereinafter referred to as the “GDPR.”
Where the contact concerns entering into a contract or taking steps before entering into a contract, the legal basis for processing is also Article 6(1)(b) of the GDPR.
Providing personal data is voluntary; however, failure to provide such data may make it impossible to respond to your inquiry or handle the matter.
5. Newsletter
The personal data of persons subscribing to the newsletter are processed in order to send information about:
-
the activities of PBAid;
-
programs and projects carried out by PBAid;
-
events organized by PBAid;
-
fundraising campaigns and the needs of PBAid;
-
opportunities to support and become involved in the activities of PBAid.
The legal basis for processing is the consent of the person subscribing to the newsletter, pursuant to Article 6(1)(a) of the GDPR.
Consent may be withdrawn at any time, in particular by using the unsubscribe link included in each newsletter or by contacting PBAid.
Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
Detailed rules concerning the use of the newsletter are set out in the Newsletter Terms and Conditions available on the PBAid website.
6. Donations
Donors’ personal data may be processed for the following purposes:
-
receiving and processing a donation;
-
identifying a payment and assigning it to the purpose indicated by the donor;
-
maintaining accounting and tax records;
-
contacting the donor in matters related to the donation;
-
issuing confirmation of receipt of the donation;
-
sending a message of thanks for the support provided;
-
establishing, pursuing or defending against claims.
Depending on the purpose, the legal basis for processing is:
-
Article 6(1)(b) of the GDPR, to the extent necessary to receive and process the donation;
-
Article 6(1)(c) of the GDPR, to the extent necessary to comply with legal obligations, in particular accounting and tax obligations;
-
Article 6(1)(f) of the GDPR, in relation to the legitimate interests of PBAid, including contact connected with the donation and the establishment, pursuit or defense of claims.
Donations may be made in particular:
-
by bank transfer;
-
through online payment operators;
-
through external fundraising platforms.
Where an external payment operator or fundraising platform is used, the donor’s personal data may also be processed by that entity in accordance with its own terms and conditions and privacy policy.
Detailed rules concerning the making of donations are set out in the Donation Terms and Conditions available on the PBAid website.
7. Social Media
PBAid maintains profiles on social media platforms.
The personal data of persons who follow PBAid’s profiles, react to published content, post comments or contact PBAid through such platforms may be processed for the following purposes:
-
maintaining PBAid’s profiles;
-
communicating with users;
-
providing information about the activities of PBAid;
-
promoting programs, projects, events and fundraising campaigns;
-
compiling statistics concerning activity on the profiles;
-
establishing, pursuing or defending against claims.
The legal basis for processing is the legitimate interest of PBAid pursuant to Article 6(1)(f) of the GDPR.
Social media platform operators also process users’ personal data in accordance with their own privacy policies.
8. Technical Data Related to Website Use
When the website is used, certain technical information may be collected automatically, including:
-
the device’s IP address;
-
browser type and operating system;
-
the date and time of using the website;
-
information concerning the way in which the website is used;
-
information concerning errors and technical events.
Such data may be processed for the following purposes:
-
ensuring the proper functioning of the website;
-
protecting the website and IT systems;
-
detecting errors, misuse and threats;
-
compiling statistics;
-
establishing, pursuing or defending against claims.
The legal basis for processing is the legitimate interest of PBAid pursuant to Article 6(1)(f) of the GDPR.
9. Cookies
The PBAid website uses cookies and similar technologies.
Essential cookies may be used to ensure the proper and secure functioning of the website.
Other cookies, in particular analytical, functional or marketing cookies, are used after obtaining the user’s consent, where such consent is required by applicable law.
The user may:
-
accept all optional cookies;
-
reject optional cookies;
-
select individual categories of cookies;
-
change or withdraw consent already given.
Cookie consent may be managed through the cookie settings available on the website and through the user’s browser settings.
Detailed information about the cookies used, their providers, purposes and retention periods is available in the cookie settings on the website.
10. Recipients of Personal Data
Personal data may be disclosed to entities supporting PBAid in carrying out its activities, in particular:
-
providers of website platforms, hosting and IT services;
-
providers of email and communication tools;
-
the newsletter service provider;
-
banks and payment operators;
-
operators of fundraising platforms;
-
providers of accounting, legal, audit or advisory services;
-
providers of analytical tools;
-
public authorities and other entities entitled to receive personal data under applicable law.
Personal data are disclosed only to the extent necessary for the relevant purpose.
11. Transfer of Personal Data Outside the European Economic Area
Some service providers used by PBAid, in particular providers of internet, cloud, newsletter and payment services, as well as social media platform operators, may process personal data outside the European Economic Area.
In such cases, personal data are transferred using mechanisms provided for under applicable law, in particular on the basis of:
-
a European Commission adequacy decision;
-
standard contractual clauses;
-
other safeguards permitted under applicable law.
12. Retention Period
Personal data are retained for the period necessary to achieve the purpose for which they were collected and subsequently for the period required by law or necessary to protect against potential claims.
In particular:
-
personal data related to correspondence are retained until the matter has been concluded and subsequently for the period necessary to protect against potential claims;
-
personal data of newsletter subscribers are processed until consent is withdrawn or the person unsubscribes from the newsletter;
-
personal data related to donations and accounting records are retained for the period required under tax and accounting regulations;
-
personal data processed on the basis of consent are retained until the consent is withdrawn, unless further retention is justified by the need to demonstrate that consent was properly obtained or to protect against claims;
-
technical data and data stored in cookies are retained for the periods resulting from the settings of the relevant tools and cookies.
13. Rights of Data Subjects
To the extent provided for under applicable law, a data subject has the right to:
-
access their personal data and receive a copy of such data;
-
rectify their personal data;
-
request the erasure of their personal data;
-
request the restriction of processing;
-
data portability;
-
object to the processing of personal data based on the legitimate interests of PBAid;
-
withdraw consent at any time where processing is based on consent;
-
lodge a complaint with the competent supervisory authority.
To exercise these rights, the data subject may contact PBAid or the Data Protection Officer.
14. Right to Withdraw Consent
Where personal data are processed on the basis of consent, the data subject may withdraw consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
Consent may be withdrawn in the same manner in which it was given or by contacting PBAid.
15. Automated Decision-Making
PBAid does not make decisions concerning users which produce legal effects or similarly significantly affect them and which are based solely on automated processing, including profiling.
16. Data Security
PBAid applies appropriate technical and organizational measures to protect personal data against loss, destruction, alteration, unauthorized disclosure or unauthorized access.
Access to personal data is limited to persons and entities for whom such access is necessary to perform their assigned duties.
17. Amendments to the Privacy Policy
This Privacy Policy may be updated, in particular in the event of changes to:
-
applicable law;
-
the operation of the website;
-
the scope of PBAid’s activities;
-
the tools and online services used by PBAid.
The current version of this Privacy Policy is published on the website www.akcjabach.org.
Last updated: July 29, 2026.