In order to pursue its statutory objectives, the Buy Responsibly Foundation collects personal data and the data concerning your visits to our website as well as actions and campaigns you are involved in.

 

Protecting privacy is important to us, so we attach key significance to respecting your privacy, whether you are involved in our actions, support us financially, buy things from our online shop, or just visit our websites.

 

 

The Buy Responsibly Foundation, based in Krakow, ul. Sławkowska 12, is the personal data controller under the General Data Protection Regulation (hereinafter referred to as GDPR). We collect and process data that are necessary to pursue the Foundations’s statutory objectives, following your consent or, when fulfilling your order, in connection with the transaction being performed.

 

 

You have access to your data, you can demand them to be corrected or removed, and their processing to be ceased or limited. You have the right to withdraw your consent to process your data. You have the right to move your data to another controller. In case you believe we process your data in an inappropriate manner, you have the right to file a complaint with the supervisory authority: President of the Personal Data Protection Office.

 

Below you can find a detailed explanation of what data are collected, how they are processed and whom they are available to:

 

 

The Buy Responsibly Foundation operates the following websites:

The data collected and processed by the above websites in both domains is manager solely by the Buy Responsibly Foundation team. The websites are on a secure server located in Poland and the server space provider ensures the processing compliance with UE requirements, with the data being sent over an SSL encrypted connection.

 

When users visit our websites, the following data are collected automatically: IP address (anonymized), browser type, operational system type and the name of the domain which the user enters our sites from. We use these data to generate visitor statistics (using Google Analytics tool) to help us administer websites efficiently and ensure a high quality of their content.

 

The collected data are not associated with specific people browsing our websites. Users may use them anonymously, we do not seek to identify them nor do we require them to register.

 

We do not send any of the collected data to other entities, we do not make the data available to anyone, unless such a demand is made by authorized institutions on the basis of adequate laws and regulations (e.g. in connection with a suspicion of an offence having been committed).

 

Our website uses text files known as cookies. Cookie files are not used by us to obtain any data identifying our users or to follow their navigation. Remember you can block or restrict cookies with the setting of your browser or with one of many available (free of charge) solutions (e.g. Ghostery).

 

 

Sometimes, when we see that such actions can bring about a welcome change, we organize or take part in collecting signatures on petitions and appeals. These usually are appeals or petitions directed to companies and sometimes also to politicians. We collect signatures via our website www.ekonsument.pl. When you sign, we ask you to submit your name, surname, e-mail address and, optionally, your phone number. If you give us your phone number, in some situations we can contact you by phone or text message for further support of a given campaign. However, giving this information is voluntary. We do not collect any other data without your knowledge, such as your gender (though we may infer what it is based on your first name, for analytical purposes), occupation, location or more precise contact details. If you express consent, your data will be recorded in the CiviCRM subscribers database so that we can inform you about our further actions and campaigns, and about opportunities for offering us financial support.

 

The Buy Responsibly Foundation does not make the data collected during petitions and appeals to anyone, unless it is required by the nature of actions taken by you during a campaign. When collecting signatures on a petition, we provide its addressee with a list of names, surnames and places of residence of the signees. If you take part in an action consisting in sending e-mails to someone (an appeal), e.g. a specific company, they will receive a message with your name, surname and e-mail address.

 

 

The Buy Responsibly Foundation runs two websites, The Sustainable Consumption Where-To-Go Guide, where users can enter data about places friendly for conscious consumers and Good Shopping Guide, where users can enter data about socially and environmentally sustainable brands/companies. The data, concerning specific companies, are submitted via online forms you can find at the www.ekonsument.pl website. When you enter a given place into the online form at the Where-To-Go Guide website, you have to give your name, surname, e-mail address and phone number. In this way, we can verify the given place, contacting you by e-mail or phone (to see if it really is sustainable consumption friendly) and, if needed, explain and correct any possible mistakes or inaccuracies. In case of the Good Shopping website we collect such data as the brand name, the name of the company owning the brand, company’s address, its representative’s contact details (name, surname, phone number, e-mail address). Submitting these data is not obligatory.

 

If you express your consent, your data submitted when filling in both forms (i.e. name, surname, e-mail address, phone number) will be recorded in the CiviCRM subscribers database so that we can inform you about our further actions and campaigns, and about opportunities for offering us financial support.

 

 

Newsletters and mailings sent by us using the CiviCRM system – an internal database of the Buy Responsibly Foundation for managing contact details and collecting information, placed on a secure server located in Poland, whose provider ensures processing compliance with UE requirements, and the data is sent via an encrypted connection.

 

We use a mechanism that allows us to check if you have opened an e-mail we sent to you. For this purpose, there is a transparent pixel placed in our mailing – when in your email reader you click on a consent to display pictures, this pixel is also displayed, letting us know that you opened the mailing. In this way we know more or less the percentage of our subscribers interested in the information we send and participating in our campaigns,

 

The contact details submitted by subscribers: name, surname, e-mail address, phone number (optional) are processed by the Buy Responsibly Foundation solely for the purpose of sending information about our actions and campaigns and about the opportunity to offer us financial support. The e-mail address you submit is associated in the CRM system with other data, resulting from your interactions with the Buy Responsibly Foundation. Depending on the history of these interactions, the scope of the data may include: name, surname, function performed and the name of the institution represented, as well as other data voluntarily submitted to the Buy Responsibly Foundation. The data processed in the CRM system are used by us to manage external relations, plan our actions and campaigns carried out to fulfil our statutory objectives.

 

Subscribers to our mailings have the right to access their data and to correct it. Submitting your personal data is voluntary. Personal data of the subscribers are not made available to any data recipients under Article 7 item 6 of the Personal Data Protection Act.

 

The Buy Responsibly Foundation makes it possible for subscribers to remove their data from our data base at any time, without giving reasons. To remove your data from the contact database, just click the unsubscribe link at the bottom of any e-mail we send or write to us at info@ekonsument.pl (please write “Personal Data” in the subject line).

 

 

You can support the Buy Responsibly Foundation financially, with donations via bank transfer to our account or by making an online payment with the Dotpay system. In case of a donation transferred to our bank account, we process the donor’s name, surname and address, and the donated amount – all this information is visible in the transfer’s description – as well as the e-mail address, if it is provided in the transfer’s title. In case of a donation made with the Dotpay system, we ask for the donated amount, and Dotpay requires an e-mail address which is needed for the processing of the payment. Submitting these data is necessary for making a donation via Dotpay.

 

Donors’ data are processed in the CiviCRM system and in financial documents. The donors have the right to access their data and to correct them. The data is not made available to any data recipients under Article 7 item 6 of the Personal Data Protection Act. However, the Buy Responsibly Foundation is obliged to apply financial security means in compliance with the Anti-Money Laundering and Counter-Terrorism Financing Act. In practice this means we have an obligation to inform the General Inspector of Financial Information about any transactions that should be considered suspicious according to the guidelines included in this Act.

 

Once or twice a year we send thank you notes and copies of our educational materials and other publications to the addresses given in bank transfers and through the Dotpay system. We also use the submitted e-mail address to send our thanks. If anyone does not want to be contacted by us in such a way, they can write “No address” in the bank transfer’s title or send their protest to: info@ekonsument.pl.

 

 

Revenue Office sends us data of the people who donated 1% of their income tax to us and ticked the box on their PIT form consenting to submit their data to us. We process the name, surname and address of the tax payer and his/her spouse (in case of joint taxation), the donated amount and possibly additional information submitted by taxpayers in the space on the PIT form concerning the 1% donation. We send thank you notes and copies of our educational materials and other publications to the addresses given to us by the Revenue Offices.

 

Data of the 1% income tax donors are processed in the CiviCRM system. They are not made available to any data recipients under Article 7 item 6 of the Data Protection Act. Those who donated 1% of their income tax to us have the right to access their data and to correct them. They can also object to the further processing of their data, ask us not to contact them by mail or present a different address for correspondence, writing at info@ekonsument.pl.

 

 

In order to diversify our sourced of fundraising and, at the same time, to pursue our mission (promoting responsible consumption and production), we offer our supporters an opportunity to do sustainable and responsible shopping at our online shop at www.sklep.ekonsument.pl. The shop is operated with free PrestaShop software and is placed on a secure server located in Poland, whose provider ensures processing compliance with EU requirements and the data are sent over an encrypted connection.

 

To order at our online shop, you have to register and submit such data as: your name, surname, e-mail address, phone number (optional). Registering at the shop’s website you can agree to record your data in the CiviCRM subscribers database of the Buy Responsibly Foundation so that we can inform you about our actions and campaigns and about the opportunities to support us financially.

 

For your order to be fulfilled, you have to give us your address, so that we can send you the ordered products, and your phone number in case you choose courier delivery.

 

The data of the customers who registered and made purchases at our shop are processed in the CiviCRM system. They are not made available to any data recipients under Article 7 item 6 of the Personal Data Protection Act. Those who registered and made purchases and our shop have the right to access their data and to correct them. They can also object to the further processing of their data, ask us not to contact them by mail or present a different address for correspondence, writing at info@ekonsument.pl or sklep@ekonsument.pl.

 

The Buy Responsibly Foundation’s Privacy Policy takes effect on 25 May 2018.