PERSONAL DATA PROCESSING POLICY
OF THE AID FOUNDATION FUND - Nadační fond pomoci
Aid Foundation Fund, Tax Payer ID 243 03 437, with registered office at Zapova 1559/18, Smíchov, 150 00 Prague 5, registered in the Foundation Register maintained by the Municipal Court in Prague under file. N 915, (hereinafter referred to as the "Foundation Fund"), in pursuit of its purpose, i.e. to help the needy, processes your personal data within the framework of its project znesnáze21, in case that you are an applicant for the establishment of a collection for a needy, a donor for an established collection, or their legal representative, or a donor providing a financial contribution to the respective collection established for the needy - later donee. In this Policy, a person in need is defined as a natural person who is in a difficult life situation or for whom a public collection is organised for another charitable purpose, e.g., to help other individuals.
The purpose of this Personal Data Processing Policy of the Aid Foundation is to inform you what personal data the Aid Foundation Fund, as the administrator, processes about you, for what purposes this personal data is processed and for how long the Aid Foundation processes this personal data in accordance with applicable law, to whom and for what reason it is entitled to transfer it, and last but not least, the purpose of this Personal Data Processing Policy of the Aid Foundation Fund is to inform you of your rights as a data subject in relation to processing of your personal data.
This policy is issued in accordance with Regulation (EU) 2016/679 on the protection of natural persons regarding processing of personal data (hereinafter referred to as "GDPR") and in accordance with Act No. 110/2019 Coll., on processing of personal data, in order to ensure the information obligation of the Aid Foundation Fund as an administrator pursuant to Article 13 of the GDPR and is effective since 13 April 2021.
2. Personal data administrator
The administrator of your personal data is the Aid Foundation, taxpayer ID (IČO) 243 03 437, registered office Zapova 1559/18, Smíchov, 150 00 Prague 5, registered in the Foundation Register maintained by the Municipal Court in Prague under file. number N 915, e-mail: firstname.lastname@example.org, telephone number: +420 730 510 377, website: https://www.nfpomoci.cz/.
3. What personal data we process
We only process personal data that you yourself provide to us through the form used to apply for the establishment of a collection for a needy or through your signed consent to establish such a collection for you as a person in need, or that you provide to us or are otherwise provided to us with your consent. We process the following personal data:
- name and surname, or the name of the business firm of a natural person - entrepreneur,
- birth date,
- the number of your ID card or other identity card and its period of validity,
- permanent and temporary residence,
- billing and delivery address,
- tax payer ID (IČO) and tax registration number (DIČ),
- bank connection,
- telephone number and e-mail address.
In the case of a person in need under the age of 18 or in the case of a needy person with a guardian, we further process the personal data of their legal representative or guardian, in particular:
- name and surname,
- birth date,
- the address of permanent and temporary residence,
- bank connection,
- telephone number and e-mail address.
If you provide personal data of third parties, e.g. when applying the establishment of a collection for them, you also undertake to inform the person concerned of this fact and are obliged to inform them of this personal data processing policy and to get their written consent to the establishment of a fundraiser collection for them and to processing of their personal data by the Aid Foundation Fund.
When you visit our website, we may collect information about your visits, such as your IP address, the date and time of access, information about your operating system, web browser, and your behaviour on our site. If you visit our website from your mobile phone, tablet, etc., we may also process information about this device. In these cases, however, we try to anonymise the information as much as possible so that it cannot be attributed to a specific person.
We also process cookies when you visit our website. Cookies are short text files that record information about your visit to our website. These files enable us to distinguish individual visitors to our website.
4. For what purpose and for what reason we process your personal data
We process your personal data because it is necessary for the fulfilment of the concluded foundation contribution agreement, donation agreement or other obligations envisaged by our donation conditions and for the purposes of our legitimate interests.
If you are the person entitled - a beneficiary, we process your personal data for the following purposes:
- the conclusion and registration of contracts between us,
- auditing the use of the foundation endowment in question,
- records of endowment contributions made, in particular for the purpose of keeping proper accounting records and for the purpose of fulfilling other legal obligations under applicable law,
- publishing your story on our website.
If you are an applicant for a fundraiser collection, we process your personal data particularly for the following purposes:
- registration of applicants for the establishment of a collection,
- assessment of your application.
If you are a donor, we process your personal data particularly for the following purposes:
- records of donations made, in particular for the purpose of keeping proper accounting records and for the purpose of fulfilling other legal obligations under applicable law,
- concluding and registering donation contracts between us and issuing donation receipts.
Further reasons why we process your personal data are because it is necessary for the fulfilment of the legal obligations we have, in particular for inspections by public authorities or for the fulfilment of other obligations, e.g. for the fulfilment of the obligation to provide such data to law enforcement authorities, etc.
In all cases, we only process your personal data if and to the extent that it is strictly necessary.
5. Providing personal data to third parties
We transfer your personal data to our employees for the purpose of processing your request to start a collection for a person in need, for the purpose of transferring a donation from the respective public collection via a foundation contribution to a needy person, later on to a donor, or for making a donation. We transfer your personal data to our employees for the purpose of processing your request to start a collection for a needy person, for the purpose of transferring a donation from the respective public collection via a foundation contribution to a needy person, later on to a donor, or for making a donation.
Your personal data may be provided to the media (i.e. TV or radio broadcasters, online and print media) for the purpose of promoting the story of the needy, usually to increase donations within the public collection.
We do not share your personal data with other personal data administrators.
6. Method and duration of processing of personal data
We process your personal data mainly automatically, but also manually, and it is stored in paper and electronic form.
When processing your personal data, we take all necessary technical and organizational measures to ensure its protection.
We will process your personal data for the duration of the public collection or the contractual relationship between us and for a period of 5 years after the end of the public collection or the contractual relationship. We retain personal data that is necessary for the performance of our legal obligations under applicable law for as long as necessary to comply with those obligations.
If you are not a successful fundraising applicant, your personal data and personal data of a third party provided by you will only be processed between the moment you complete the public fundraising application form and the time you are informed that your proposed public fundraising will not take place.
7. Your rights concerning processing of personal data
According to the GDPR you have the following rights:
7.1. Right of access to personal data.
You have the right to access your personal data, which includes the right to obtain confirmation from us as to whether we process your personal data, as well as information on the purposes of the processing, the categories of personal data concerned, the recipients to whom the personal data have been or will be disclosed, the planned duration of the processing, the existence of the right to request from us the rectification or erasure of your personal data or the restriction of their processing or to object to such processing, and the right to lodge a complaint with a supervisory authority.
You can enforce your right to confirmation of personal data processing and to information in written or electronic form at our contacts below.
7.2. Right to rectification of inaccurate data.
You have the right to have inaccurate personal data we process about you corrected. On the other hand, however, you are obliged to notify us of any changes to your personal data and to provide evidence that such changes have occurred. You are also obliged to cooperate with us if we find that the personal data we process about you is not accurate. We will do the correction without undue delay, while always taking the technical possibilities into account.
7.3. Right to deletion.
You have the right to deletion of personal data relating to you unless we can demonstrate that there are legitimate grounds for processing that personal data.
7.4. Right to restriction of processing.
If you dispute the accuracy of the personal data, the reasons for their processing or if you object to their processing, you have the right to restrict the processing of personal data until your complaint is resolved.
7.5. Right to notification of rectification, deletion or restriction of processing.
In the event of correction, deletion or restriction of processing of your personal data, you have the right to have us notify you of such an action. If personal data is rectified or deleted, we will inform the individual recipients of your personal data of this fact, unless this proves impossible or requires an unreasonable effort. Upon your request, we can provide information about these recipients.
7.6. The right to personal data transferability.
You have the right to the transferability of personal data related to you that you have provided to us in a structured, commonly used and machine-readable format and the right to ask us to transfer that data to another administrator. You can also ask us to supply this information to you in this format.
7.7. The right to object to processing of personal data.
You have the right to object to processing of your personal data based on our legitimate interest. If we do not demonstrate to you that there is a serious legitimate reason for the processing which overrides your interests, rights and freedoms, we will terminate processing your personal data without undue delay.
7.8. Enforcing the above rights.
The Aid Foundation is not required to have a Data Protection Officer and does not have one. To enforce the above rights, you can contact us at the contact details above.
7.9. The right to appeal to the Office for Personal Data Protection.
We will be glad if you address any shortcomings related to processing of personal data with us in the first instance. We are committed to the maximum protection of your personal data and it is certainly not our aim to harm your rights in the least, which is why we will pay close attention to your complaints. If you still wish to contact a supervisory authority, you have the right to contact the Office for Personal Data Protection (www.uoou.cz) with complaints regarding the processing of your personal data.