If you are reading this document, you likely value your privacy. To make it easier for you to understand the rules regarding the processing of personal data related to the functioning of the www.netonwheels.org website, we have gathered all relevant information in one place.

DATA CONTROLLER AND CONTACT DETAILS
‍The controller of the personal data described in this document is the FOUNDATION "NET ON WHEELS" with its registered office in Krakow, at ul. Bohaterów Wietnamu 3 / 51, entered in the National Court Register maintained by the District Court for Krakow-Śródmieście in Krakow, 11th Commercial Division, under KRS number: 0001160735, NIP: 9452307658, REGON: 541152952. For matters related to personal data protection and privacy in general, please contact us via email at wojciech@netonwheels.org or by postal mail to the address above.

‍TYPES OF PERSONAL DATA WE PROCESS AND THEIR SOURCE
‍As part of the operations of the Community Center – an initiative of the "NET ON WHEELS" Foundation – we may process the following personal data:
First and last name
Email address
Phone number
Residential address
‍
Data included in correspondence sent to usIn most cases, you provide this data voluntarily in order to use the services offered by the Community Center.

This occurs, for example, when you fill out a form to:
Register for classes
Request support
Rent office space
Contact us for another reason

‍PURPOSES AND LEGAL BASIS FOR DATA PROCESSING
‍We process personal data for several purposes, each with its own legal basis. Retention periods vary depending on the specific purpose. The main purposes include:
Participating in Community Center classes – legal basis: Article 6(1)(b) GDPR
Requesting support from the Community Center – legal basis: Article 6(1)(f) GDPR
Renting office space – legal basis: Article 6(1)(b) GDPR
Maintaining contact and handling correspondence – legal basis: Article 6(1)(f) GDPR

‍CLASS REGISTRATION DETAILS
‍When registering yourself or your child for classes at the Community Center, you provide us with your name, phone number, residential address, and email. This data is necessary for registration. We use it solely for participant records and settlement. The legal basis is the contract formed by registering (Article 6(1)(b) GDPR). Even after withdrawing, your data may be retained for record-keeping and to defend against potential claims.

‍SUPPORT REQUEST DETAILS
‍When requesting support or benefits offered by the Community Center or its partners, you provide similar data. This data is required to access support. It is used only for tracking and settlement. The legal basis is our legitimate interest (Article 6(1)(f) GDPR). Your data may be retained even after the support ends for settlement and legal defense.

‍CORRESPONDENCE HANDLING DETAILS
‍When contacting us, you naturally provide personal data such as your name and email. This data is used for communication. The legal basis is our legitimate interest (Article 6(1)(f) GDPR), including archiving correspondence to establish facts. You may request access to or deletion of such records unless legitimate reasons justify retention.
‍
‍OFFICE SPACE RENTAL DETAILS
‍When renting office space, you provide personal data necessary for concluding the rental contract. This data is used solely for record-keeping and settlement. The legal basis is the performance of the rental agreement (Article 6(1)(b) GDPR). Your data may still be stored after the rental ends for record purposes and legal defense.

‍DATA RETENTION PERIODS
‍Your personal data will be processed:Until you withdraw consent, if processing is based on consent, or until the purpose of collection ceasesUntil you withdraw consent or object, if processing relates to marketing or fundraising purposes

‍DATA RECIPIENTS
‍We cooperate with third-party service providers, some of whom may process your personal data. These include IT providers, hosting services, CRM providers, accountants, legal advisors, and marketing agencies. Your data may also be shared with public institutions if legally required (e.g., police, tax authorities, courts).

‍INTERNATIONAL DATA TRANSFERS
‍Some data may be transferred to countries outside the European Economic Area, particularly due to tools that store data on servers in the USA. These providers ensure data protection through GDPR-compliant mechanisms like standard contractual clauses. See Google’s privacy policy at https://policies.google.com/privacy and Microsoft’s at https://privacy.microsoft.com/en-us/privacystatement.

‍AUTOMATED DECISIONS AND PROFILING
‍We do not make decisions based solely on automated processing, including profiling, that would legally or significantly affect you.

‍YOUR RIGHTS UNDER GDPR
You have the following rights:
Access to your data and a copy of it
Rectification of inaccurate data
Erasure of data in certain cases
Restriction of processing
Objection to processing based on legitimate interests
Data portability (structured, machine-readable format)
Withdrawal of consent at any time
Lodging a complaint with a supervisory authority (e.g., President of the Personal Data Protection Office in Poland)
These rights are explained in Articles 16 to 21 of the GDPR. They may not apply in all cases. You can contact us at any time at wojciech@netonwheels.org to learn more or exercise your rights. We have made every effort to present all key information clearly in this privacy policy, but feel free to reach out with any questions regarding your personal data.