In view of the protection and security of your personal data, and in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), we hereby provide you with information regarding the processing of your personal data. Such data will be processed from the moment you provide them to us, for the purposes set out below.

1. Data Controller

The controller of your personal data is:
Fundacja im. Ojca Josepha Billa
ul. Bernardyńska 9/3, 31-069 Kraków, Poland
Email: fundacja@ojciecbill.pl

2. Purpose and Legal Basis for Processing

Your personal data will be processed for the purposes of:

• registering your participation in retreats and accommodation at the retreat house. In this respect, data may be shared with a third party, i.e. the retreat house indicated in the registration form,
• carrying out the mission of the Foundation, in particular communication regarding organised retreats and engagement in supporting missions in East Africa.

With your consent, data may also be used for correspondence and information regarding the Foundation’s activities. You have the right to withdraw your consent at any time.

3. Rights of the Data Subject

You have the right to:

• access your personal data,
• request rectification, erasure, or portability of your data,
• object to the processing of your data,
• request restriction of processing.

You also have the right to lodge a complaint with the supervisory authority, currently the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

Where processing is based on consent, you may withdraw that consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

4. Disclosure of Data to Third Parties and Third Countries

Your personal data will generally be processed only by the Foundation. However, they may be shared with third parties such as retreat houses or hotels requiring guest contact details for check-in. Such parties will not be authorised to use your data for their own purposes and may process them solely for the purposes determined by us and in accordance with applicable law.

Data may also be disclosed to public authorities if authorised under applicable legislation and subject to an appropriate request. Your data will not be transferred to third countries or international organisations.

5. Data Retention Period

Your data will be stored for the period necessary to perform the agreement and in accordance with applicable law. They will not be kept longer than required to pursue the legitimate interests of the Controller (the Foundation). Where consent has been granted, data will be stored until such consent is withdrawn.

6. Profiling

Your personal data will not be subject to automated decision-making, including profiling.