Controller
Who is responsible for data processing
Controller
Zycie, Razem Foundation, seat in Krakow, Poland.
General contact: info@zycie-razem.org.pl
The Foundation's public registration process is still pending. When full registry details are available, this notice should be supplemented with the registered postal address and any other public registration identifiers then in use.
Privacy contact
Privacy and data-rights requests may be sent to info@zycie-razem.org.pl.
If a separate Data Protection Officer is appointed in future, this page will be updated with the relevant contact details.
Main rule
The Foundation tries to collect only the data it actually needs for contact, administration, and basic website operation.
Processing Summary
What data the website may process
- Data you choose to submit through the embedded contact form
- Basic technical data generated when external scripts or embedded tools load
- Theme preference data stored in your browser using localStorage
- Ordinary email correspondence if you contact the Foundation directly by email
Please do not send special-category or otherwise sensitive personal data unless it is strictly necessary and there is a clear lawful basis to do so.
Source And Requirement
Where the data comes from and whether you must provide it
Source of personal data
In most cases, the personal data processed through this website comes directly from you: for example when you submit a contact form or send an email. Some technical data is generated by your browser or device when the website or an embedded tool loads.
Whether providing data is required
Providing personal data through the contact form or by email is voluntary, but if you do not provide enough information for contact and routing, the Foundation may be unable to assess or answer the inquiry.
If you prefer not to use the embedded form, you can contact the Foundation directly by email instead.
Purposes And Bases
Why data is processed and on what legal basis
Contact form and direct inquiries
Purpose: to receive, assess, route, and respond to inquiries.
Data: name, email address, message content, and any other data you voluntarily include.
Legal basis: Article 6(1)(f) GDPR, legitimate interest in handling correspondence and protecting the website against misuse; in some cases Article 6(1)(b) GDPR where the inquiry is a step requested by the data subject before entering into a relationship.
Legitimate interest: communication, administration, record-keeping, and basic legal defense.
Practical note: when you use the embedded form on the contact page, your submission is transmitted through Tally as the Foundation's form-service provider.
Browser-side preferences
Purpose: to remember theme preference in the browser.
Data: theme preference only.
Legal basis: Article 6(1)(f) GDPR for strictly functional storage used by the site interface, together with rules on cookies and similar technologies for information stored on terminal equipment.
Important: the reviewed public site code uses localStorage for the light/dark theme preference.
Recipients
Who may receive or process the data
Internal access
Data is intended to be accessed only by people acting for the Foundation who need it for communication, administration, or website support.
External processors and service providers
- Tally for the embedded contact form on the contact page
- Hosting, email, and technical support providers as needed to operate the website and correspondence
Where a third-party tool processes data on the Foundation's behalf, the Foundation expects that provider to act under an appropriate processing arrangement. Users should also be aware that those providers may process technical metadata according to their own service documentation.
According to Tally's GDPR documentation, the form creator is the controller of respondent data and Tally acts as processor for submitted form responses.
International Transfers
Transfers outside the EEA
Tally
The contact form is embedded through Tally. Tally states that it is based in Belgium and stores form data in Europe, while some optional subprocessors may operate outside the EEA depending on configuration and services used.
Tally GDPR information →
What this means for users
If you use a form or embedded service provided through a third party, your data or related technical data may be processed outside Poland or outside the EEA, subject to the provider's transfer mechanism and service configuration.
Retention
How long data is kept
Contact messages
Kept for as long as reasonably necessary to answer the inquiry, maintain a basic correspondence record, and protect against claims or misuse. If the exchange leads to continuing cooperation, relevant records may be retained longer as required for administration or legal compliance.
Where the Foundation deletes form responses from Tally, Tally states that deleted form data is permanently deleted from its backups within 90 days unless removed earlier through account tools.
Local browser storage
Theme preference remains in the user's browser until removed by the user, overwritten, or cleared through browser settings. The Foundation does not control how long data remains on a user's own device once stored locally by the browser.
Rights
Your rights under the GDPR
Right of access to your data
Right to rectification of inaccurate data
Right to erasure where the law allows it
Right to restriction of processing
Right to data portability where the legal conditions are met
Right to object to processing based on legitimate interests
Right to withdraw consent at any time where processing is based on consent
Right to lodge a complaint with the President of the Personal Data Protection Office (Prezes UODO)
Requests concerning your rights may be sent to info@zycie-razem.org.pl.
Complaint authority in Poland: President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warszawa, Poland. Current authority contact information is published by UODO at uodo.gov.pl.
Cookies And Similar Technologies
Cookies, embeds, and localStorage
- The website uses localStorage to remember the selected light/dark theme.
- The contact page loads a third-party Tally embed script, which may set cookies or process technical data according to Tally's service design.
- No separate analytics platform is disclosed in the current public site code reviewed for this update.
If non-essential analytics, marketing cookies, or additional embeds are added later, this notice and any required consent flow should be updated before or at the time those tools go live.
Automated Decisions
Automated decision-making
Based on the site code reviewed for this update, the Foundation does not describe any automated decision-making or profiling that produces legal effects or similarly significant effects on users through this website.