RODO information clause

Translation. The Polish text of this clause is binding.

In line with art. 13 of the General Data Protection Regulation (EU) 2016/679 (GDPR, in Polish RODO), we inform you that:

The controller of your personal data is Stowarzyszenie Bengalczyków w Polsce (TABP, The Association of Bengalis in Poland), with its seat in Warsaw. You can contact us using the email address given at the bottom of the website.

handling your declaration, admission and membership, keeping the list of members, collecting fees and sending notices required by the Statute: art. 6(1)(b) GDPR (membership under the Statute) and art. 6(1)(c) GDPR (legal obligations, including the Associations Act and accounting rules);
running your account in the members’ area, confirming your email and phone with one-time codes, and giving access to the services directory: art. 6(1)(b) GDPR;
sending the TABP newsletter, which is part of membership: art. 6(1)(b) GDPR;
the chat with TABP in the members’ area (your messages and our answers, which are also sent to you by email): art. 6(1)(b) GDPR; the conversation is kept while you are a member and deleted together with your account;
security of the website and establishing or defending claims: art. 6(1)(f) GDPR (our legitimate interest);
making sure that the free trial access is used only once per person: we keep your email address, phone number and a coded form (hash) of the IP address from which you registered, and we do not allow another account with the same phone number or from the same IP address: art. 6(1)(f) GDPR (our legitimate interest in preventing abuse);
where you give separate consent, for the purpose described in it: art. 6(1)(a) GDPR.

Fundacja Międzykulturowej Mobilności, Edukacji i Integracji (Fundacja MMEI), Warsaw, which receives membership fees on its bank account and keeps the related accounting records;
our web hosting provider, email delivery service and, if SMS codes are used, the SMS service operator, who process data on our behalf;
accounting and legal advisers, and public authorities where the law requires it.

We do not transfer your data outside the European Economic Area. If an SMS service based outside the EEA is used, the transfer takes place on the basis of the European Commission’s standard contractual clauses.

for as long as you are a member;
when you leave through the website, your account is deleted immediately; accounts that are never confirmed are deleted after 2 days;
the coded phone number and IP address of an account that has used the free trial are kept for 12 months, also after the account is deleted, so that the trial cannot be used again;
records of membership and fees are kept for as long as the law requires (accounting documents usually for 5 years from the end of the year) or until any claims expire.

You have the right to access your data, to correct it, to have it deleted, to restrict its processing, to data portability and to object to processing based on our legitimate interest.
Where processing is based on consent, you may withdraw it at any time; this does not affect processing before the withdrawal.
You have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa.

Giving your data is voluntary, but necessary to become a member and to use the members’ area.
We do not make decisions about you by automated means, including profiling. Demo and member access starts and ends automatically by the rules, but decisions on admission are made by people.