Privacy Policy

 

The Foundation Supporting #OMGKRK (hereinafter referred to as the Foundation) respects personal data of people using its website OMGKRK Krakow Startup Community, available at http://www.omgkrk.com (hereinafter referred to as the Website) and attending events organized by Foundation (hereinafter referred to as the User) and fulfills conditions deriving from the generally applicable law, especially from the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the General Data Protection Regulation).

 

Foundation ensures that its workers and subcontractors were given training in protection of personal data.

 

For what purpose does Foundation process personal data?

 

Personal data provided within the Website, during contacts with Foundation and in case of participation in the events organized by the Foundation are used only to provide services within the Website, to organize the events and to contact with the Foundation at the request of the User.

 

The mission of the Foundation is to allow the acquisition of contacts. Therefore, if the User agrees, his data will be made available to other Users.

 

For the marketing purposes, such as creating information materials and promoting events in social media and on the Website, the Foundation and its partners may use the photographs containing an image of the User, who decides to participate in the event organized by the Foundation.

 

Who has access to the personal data of the User?

 

The controller of personal data provided by the User is:

 

Foundation Supporting #OMGKRK

  1. Podole 60,

30-394 Kraków

KRS numer: 0000602259

NIP: 9442250193

 

The rights of the User

 

The User has the right to request from the controller access to personal data concerning him or her and to obtain information about the purposes of its processing, categories of data processed, recipients of data, storage period of data (if it is impossible to indicate the period, the User has the right to information about the criteria used to determine this period).

The user has also the right to rectify personal data if they are incorrect and the right to request supplementing incomplete personal data.

 

The User has the right to request the erasure of personal data without undue delay if:

1) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;

2) a consent to the processing of personal data has been effectively withdrawn;

3) the User objects to the processing of personal data for marketing purposes;

4) the User objects to the processing (also by profiling) of personal data, based on the legally legitimate interest pursued by the Foundation or by the third party, unless there are valid, legally justified grounds for processing of the User’s personal data that override the interests, rights and freedoms of the User, or there are grounds for establishing, investigating or defending claims.

 

The User has the right to request restriction of processing of personal data when:

1) the User contests the accuracy of the personal data – for a period enabling the controller to verify the accuracy of the personal data;

2) the processing is, according to the User, unlawful and the User opposes the erasure of the personal data and requests the restriction of their use instead;

3) the controller no longer needs the personal data for the purposes of the processing, but they are required by the User for the establishment, exercise or defence of legal claims;

4) the User has objected to processing (pursuant to Article 21 paragraph 1 of the General Data Protection Regulation) pending the verification whether the legitimate grounds of the controller override those of the User.

 

If the User requests restriction of processing of personal data, the Foundation will refrain from processing them without the consent of the User, except for storing them or processing them in order to establish, exercise or defend claims, protect the rights of another natural or legal person, or due to important reasons of public interest of the European Union or a Member State of the European Union. The User will be informed about this before the restriction of processing is lifted.

 

The User has the right to object in case of processing of the personal data for the purposes of direct marketing, including profiling, to the extent that it is related to such direct marketing. After submitting the objection, the Foundation will refrain from processing the personal data of the User for direct marketing purposes (including profiling). The User has the right to submit objections by automated means using technical specifications.

 

The User has the right to receive in a structured, commonly used and machine-readable format, the personal data that the User has provided to the Foundation, as well as the right to transfer his or her personal data to another controller without interference on the Foundation’s part, if:

1) processing takes place on the basis of the User’s consent or a contract, which performance needs processing of data; and

2) the processing is carried out by automated means.

the Foundation is obliged to send the User’s data directly to another controller (if it is technically possible) at the User’s request.

 

The user has the right to withdraw the consent to the processing of personal data at any time, but the withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

With regard to the processing of the personal data, the User has the right to lodge a complaint to the President of the Office for the protection of personal data.

 

What personal data does the Foundation collect?

 

In order to create and maintain an account of the User, the following data are collected:

  • name, surname;
  • e-mail address;
  • LinkedIn profile;
  • profession;
  • “community announcement” – information provided to be shared with other event guests and foundation followers.

 

For the marketing purposes (newsletter):

  • e-mail address.

 

For the marketing purposes (promoting events and creating information materials):

  • photographs containing image of the User.

 

Data provided by the User in order to participate in the event organized by the Foundation:

  • name, surname;
  • LinkedIn profile;
  • profession;
  • e-mail address;
  • “community announcement” – information provided to be shared with other event guests and foundation followers.

 

Data provided during contacts with the Foundation (most often first and last name, e-mail address, telephone number).

 

How long are the personal data stored?

 

The Foundation stores personal data from the moment when the User registers the account or when the User starts using other Services until he or she stops using them. After sending an e-mail requesting to delete an Account or to cease providing other Services, the permanent removal of data from servers belonging to the Foundation may last up to 7 business days.

 

Exceeding the time limit indicated in the previous sentence is permitted only for the purpose of the Foundation’s performance of obligations arising from the law, e.g. for accounting purposes in relation to Users who have used paid services and in order to defend the Foundation’s interests related to, for example, complaints.

 

The photographs containing the image of the User, who decides to participate in the events organized by the Foundation will be stored by the Foundation as long as such photographs are used for the above-mentioned marketing purposes.

 

Who does the Foundation transfer personal data to?

 

The Foundation transfers personal data of the Users only to the following companies:

 

  • Airtable (769 Dolores St San Francisco, CA 94110-2224, USA);
  • Asana (Asana, Inc. 1550 Bryant St., 8th floor, San Francisco, CA 94103, USA);
  • Freshmail (155c Aleja 29 Listopada Street , 31-406 Kraków);
  • Gmail (Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA);
  • Slack (500 Howard Street, San Francisco, CA 94105, USA);
  • WordPress (Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA).

 

The Foundation informs that the data provided by the User is transferred to a third country – the United States of America. This is caused by the fact that servers belonging to Asana, Gmail, Slack and WordPress are located in the United States of America.

 

The Foundation informs that the European Commission did not make a decision regarding adequate level of personal data protection standards represent by the United States of America. However the Foundation cooperates with companies who meet the requirements specified in the EU-US Privacy Shield Framework. Learn more about Privacy Shield Framework here: https://www.privacyshield.gov/Program-Overview.

 

Cookies and server logs

 

In order to facilitate the use of the Website and to monitor its use, the management mechanism uses a technology called Cookies – data saved by the Website’s server, a hosting operator – Zenbox sp. z o.o. (7 Dąbrowskiego Street, 42-200 Częstochowa) on the user’s computer or mobile device.

 

The Website uses three types of Cookies:

  • Session cookies – temporary files, saved on the User’s device until he or she signs out, leaves the website or shut downs the browser;
  • Permanent cookies – saved on the User’s device for the time specified in its parameters or until its deletion by the User;
  • Local storage– stored on the User’s device for a definite or indefinite period or until its deletion by the User.

 

The Cookies are not used to collect any personal data about the users visiting the Website.

 

The User may at any time disable the option of accepting cookies in the settings of his web browser, however, that might cause malfunctions in the functioning of the Website.

 

The links to guides concerning disabling the option of accepting cookies in the most popular browsers are presented below:

 

The cookies are used in order to:

  • create statistics helping to understand the use of the Website so as to improve its content;
  • maintain the User’s session, thanks to which signing in every time is not required;
  • personalize the commercials;
  • generate statistics that help in administering the Website and improve the quality of services offered. These summaries are consolidated and do not contain data identifying visitors of the Website. These data are not disclosed to other persons and entities.

 

Collected server logs, containing, among others the User’s IP address, time of arrival of the request, the first line of the http request, the http response code, number of bytes sent by the server, information about the user’s browser, information about errors that occurred during the HTTP transaction, information about the type of devices are stored indefinitely.