GDPR AT THE FOUNDATION FOR THE DEVELOPMENT OF ENTREPRENEURSHIP "TWÓJ STARTUP"
INTRODUCTION

1 WHO IS THE DATA ADMINISTRATOR? 1 WHAT DATA DO WE COLLECT? 1
1. WE PROCESS YOUR DATA FOR THE FOLLOWING PURPOSES 1
2. WHAT DATA SHOULD BE PROVIDED TO US? 2
3. WHO CAN WE SHARE YOUR PERSONAL DATA WITH 3
4. FOR WHAT TIME WE WILL KEEP YOUR PERSONAL DATA 3 TRANSFER OF DATA TO THIRD COUNTRIES 3 RIGHT TO ACCESS AND CORRECT DATA 4
1. YOU HAVE THE FOLLOWING RIGHTS: 4
2. RIGHT TO OBJECT 5 INFORMATION ABOUT THE VOLUNTARY PROVISION OF DATA 5 INFORMATION ON CHANGING THE PURPOSES OF DATA PROCESSING BY THE ADMINISTRATOR 5 CONSENT 5 RIGHT TO COMPLAINT 6
INTRODUCTION
From May 25, 2018, the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on physical protection with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (General Data Protection Regulation) (hereinafter: "the Regulation").
This Regulation introduces a number of changes regarding the obligations of entities processing personal data. Its aim is to extend and unify the rights to the protection of personal data of citizens of the European Union.
WHO IS THE DATA ADMINISTRATOR?
1. The administrator of your personal data is the FOUNDATION FOR THE DEVELOPMENT OF ENTREPRENEURSHIP "TWÓJ STARTUP" with its seat in Warsaw (address: ul. Żurawia 6/12, office 766, 00-503 Warsaw), entered into the Register of Entrepreneurs of the National Court Register by the Court District Court for the Capital City of Warszawy in Warsaw, XII Commercial Division of the National Court Register under the number 0000442857; NIP: 5213641211; REGON: 146433467, contact details: phone number 606 138 139/784 194 080, e-mail address: uarówka@umiar.pl in connection with the organized part of the enterprise called UMIAR implemented by Malwina Wysińska / Magdalena Brzozowska (hereinafter: the "Foundation")
WHAT DATA DO WE COLLECT?

1.WE PROCESS YOUR DATA FOR THE FOLLOWING PURPOSES:

a. take any action at your request to conclude a contract and perform the contract (Article 6 (1) (b) of the Regulation), b. marketing and promotion of products offered by the Foundation for Enterprise Development "Twój StartUp" based in Warsaw, which are our legal legitimate interest (Article 6 (1) (f) of the Regulation), (if you do not send commercial information, please delete this point) c. fulfill all legal obligations incumbent on us in connection with the cooperation undertaken (Article 6 (1) letter c of the Regulation), this purpose is related to the legal obligations to store specific documents for the period specified in the provisions of law, for example:  Art. 74 sec. 2 points 1-8 of the Accounting Act of September 29, 1994 (Journal of Laws of 2017, item 1858);  Art. 34 sec. 1 in conjunction joke. 49 of the Act of 1 March 2018 on counteracting money laundering and terrorist financing (Journal of Laws 2018 item 723);  Art. 86 §1 and 2 of the Act of August 29, 1997 - Tax Ordinance (Journal of Laws of 1997, No. 137, item 926). d. for archival (evidence) purposes to secure information in the event of a legal need to prove facts, which is our legitimate interest (the basis of Article 6 (1) (f) of the Regulation); e. in order to possibly establish, investigate or defend against claims, which is our legitimate interest (the basis of Article 6 (1) (f) of the Regulation); f. for a specific purpose on the basis of your consent to the processing of your personal data for one or more purposes (the basis of Article 6 (1) (a) of the Regulation) - if you consent to the use of your data , the content of this consent will define the specific purpose for which we will process this data.
Please be advised that for the above-mentioned purposes we will not perform profiling, i.e. automated analysis of your data and developing predictions about preferences or future behaviors (profiling means, e.g. in the case of marketing profiling, determining which offer you may be most interested in). and based on your previous choices). If you change the decision regarding profiling, you will be informed of the above by supplementing this information and sending it to the e-mail address provided by you.

2. WHAT DATA SHOULD BE PROVIDED TO US ?:
To conclude a contract, we require the data provided on the contract / order form (if you do not provide them, we will not conclude the contract / we will not perform the order). In addition, we may ask for optional data that do not affect the conclusion of the contract (if we do not receive them, we will not be able to, e.g. call the contact number).
During the term of the contract, while providing services, we come into possession of your other data. The appearance of your personal data with us is a consequence of the operation of our services, which you use.
When concluding a contract or during the term of the contract, you can additionally, for example, order services not covered by the contract so far. If it will require the use of your data in a different way than described in this document, we will complete the missing information and provide it, if possible, before obtaining the data. In the remaining scope, the information on data processing contained in this document will remain valid

3. WHO WE MAY SHARE YOUR PERSONAL DATA with:

a. Public authorities, to the extent that they do not receive data as part of a specific legal procedure (depending on the basis of competence); b. Entities that process your personal data on behalf of the Foundation on the basis of an agreement concluded with the Foundation for entrusting the processing of personal data (the so-called processors). These will be, among others: beneficiaries of the Foundation, IT specialists, archiving companies, entities providing banking and payment services, hosting companies. c. External data administrators (the so-called Parallel Administrator to whom the data is made available, e.g. legal advisers and attorneys, entities operating courier or postal services, entities purchasing receivables - if you fail to pay our invoices on time),

4. HOW WILL WE KEEP YOUR PERSONAL DATA FOR?

Your personal data will be processed for the period necessary to achieve the processing purposes indicated in point 1, i.e .:

a) in terms of the implementation of the contract concluded by you with the Foundation in connection with the activities of ZCP called UMIAR for the period until its completion, and after that time:  for the period required by law, e.g. for storing specific accounting documentation and specific data in accordance with tax regulations; For the period resulting from the legitimate interests of the Foundation (i.e. the limitation period to secure any claims), b) in the scope of fulfilling the legal obligations incumbent on the Foundation in connection with the conduct of legal activity and implementation of concluded contracts, for the period prescribed by law until the fulfillment of these obligations by the Foundation; c) for internal administrative purposes, for the period until fulfillment of the legitimate interests of the Foundation constituting the basis for this processing or until you object to such processing; d) in the field of marketing and promotion of services offered by the Administrator - for the period of objection to data processing; e) within the scope of expressed consent - until its withdrawal.

TRANSFER OF DATA TO THIRD COUNTRIES
1. We do not transfer your data outside of Poland, the European Union and the European Economic Area (including the European Union, Norway, Liechtenstein and Iceland). But it may turn out that during the term of the contract we will decide to transfer data outside the EEA - only to the extent permitted by law. Such transfer will only take place when the third country ensures adequate protection of your personal data. You will be informed about such a situation by e-mail or telephone. 2.If your personal data is transferred to a third country that has not been recognized by the European Commission as a country ensuring an adequate level of protection, we will ask you for your express consent to such transfer, informing you of the prior risk associated with with such a transfer pursuant to Art. 40 sec. 1 lit. a) Regulations.


RIGHT TO ACCESS AND CORRECT DATA
1. YOU HAVE THE FOLLOWING RIGHTS:
a. the right to access the personal data processed by us (Article 15 of the Regulation), b. the right to rectify the entrusted personal data, including correcting it (Article 16 of the Regulation), c. the right to delete personal data from our systems, the so-called "Right to be forgotten" - if in your opinion there are no grounds for us to process your data, you may request that we delete them (Article 17 of the Regulation), d. The right to limit the processing of personal data - you may request that we limit the processing of your personal data only to their storage or performance of actions agreed with you, if in your opinion we have incorrect data about you or we process it unreasonably; or you do not want us to remove them because you need them to establish, assert or defend claims; or for the duration of your objection to data processing (Article 18 of the Regulation), e. The right to transfer data - you have the right to receive from us in a structured, commonly used machine-readable format (e.g. .csv ") your personal data, which we have on the basis of a contract or your consent. You will be entitled to this right when we have your data in electronic format - if we only have your data in paper form, you will not be able to exercise this right. You can commission us to send this data directly to another entity (Article 20 of the Regulation), f. The right to withdraw consent to the processing of personal data (at any time you have the right to withdraw consent to the processing of personal data that we process on the basis of Your consent) - Art. 7 sec. 3 of the Regulation. Withdrawal of your consent will not affect the lawfulness of the processing which was carried out on the basis of your consent before its
withdrawal. The consent may be withdrawn by sending an e-mail to the following address: uarówka@umiar.pl

In order to exercise the above-mentioned rights, please send the appropriate application to the Foundation's address or submit it in person at the seat of the Foundation for Enterprise Development "Twój StartUp" (ul. Żurawia 6/12 room 766, 00-503 Warsaw).
2. RIGHT TO OBJECT
Regardless of the rights listed above, you may at any time object to the processing of your data (including profiling, if it is done) for the purposes of direct marketing - art. 21 of the Regulation. After accepting the request in this matter, we are obliged to stop processing data for this purpose.
In special situations, you may at any time object to the processing of your personal data (including profiling, if performed) by us, if the basis for the use of data is our legitimate interest or public interest - art. 21 of the Regulation. In such a situation, after considering your request, we will no longer be able to process the personal data covered by the objection on this basis, unless we prove that there are:
 valid legitimate grounds for data processing, which are considered by law to override your interests, rights and freedoms, or  grounds for establishing, investigating or defending claims.
More information can be found in Art. 21 of the Regulation.
INFORMATION ON THE VOLUNTARY PROVISION OF DATA
To the extent that the processing of your data takes place in order to conclude and perform a contract with the Foundation, providing your data is a condition for concluding this contract. Providing data is voluntary, but the consequence of not providing this data will be the inability to conclude and implement this contract.
INFORMATION ON CHANGING THE PURPOSES OF DATA PROCESSING BY THE ADMINISTRATOR
If the Foundation decides to process your personal data for a purpose other than the purpose for which the personal data was collected, we will inform you of that other purpose and provide you with any other relevant information before such further processing.
AGREEMENT
If our use of your data is not necessary to perform the contract, fulfill a legal obligation or does not constitute our legitimate interest, we may ask for your consent for specific purposes of using your data. Such consent may allow, for example, to share data with other entities for the purposes of their promotional campaigns or
automatic decision making based on your data and at your request, or contact by phone / e-mail with you in order to provide information about the progress of the contract. You may withdraw your consent at any time (this will not affect the lawfulness of the use of your data prior to the withdrawal of such consent). Withdrawal of consent takes place through appropriate information, in accordance with point (a). g point 1 of the chapter "Right to access and correct data" of this document.
If you consent to the use of your data, the content of this consent will define the purpose for which we will process this data. The consent for the processing of your data will be used only for the purposes for which other processing conditions indicated in point (a) will not apply. a) -e) above.
RIGHT TO A COMPLAINT
If, in your opinion, the processing of personal data by the Foundation for Enterprise Development "Twój StartUp" based in Warsaw violates the provisions of the Regulation, you have the right to lodge a complaint with the supervisory body, ie the President of the Office for Personal Data Protection.
If you have any questions, please contact us at rodo@twojstartup.pl.