PRIVACY POLICY TASK
Dear Visitors,
There is a saying, “clear arrangements make loyal friends.” The aim of the Privacy Policy of the Pallottine Mission Secretariat is to inform visitors to our website about our privacy principles, to help you feel safe, and to make our friendship last. Your donations support many important charitable and missionary works, so the security of your personal data is our priority. All regulations have been prepared following GDPR guidelines and the General Decree of the Polish Bishops’ Conference regarding the protection of natural persons in connection with personal data processing in the Catholic Church.
DEFINITIONS
- Administrator – the entity that processes personal data, i.e., the Pallottine Mission Secretariat and "POMOST" – Pallottine Relief for Catholics in the East of the Christ the King Province, based in Ząbki, at Wilcza 8, phone: +48/22 771 51 19, email: biuro@sekretariat-misyjny.pl, hereinafter referred to as the Administrator;
- Personal Data – all information about an identified or identifiable natural person through one or more specific factors defining physical, physiological, genetic, mental, economic, cultural, or social identity, including – if they allow identification of the User – device IP, location data, internet identifier, geolocation data, and information collected via cookies and other similar technologies. In other words, these are your data obtained when setting up a User Account or during payment for support projects published on our website or any other financial support that requires the provision of User data.
- Privacy Policy – the information obligations that lie with the Administrator of personal data, which is the owner of this website.
- GDPR – the European Parliament and Council (EU) Regulation 2016/679 of April 27, 2016, on the protection of natural persons regarding the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
- General Decree of the Polish Bishops' Conference – the general decree on the protection of natural persons regarding personal data processing in the Catholic Church, issued by the Polish Bishops' Conference on March 13, 2018.
- User – any person who joins the support projects through this online portal.
DATA PROCESSING PURPOSES
The processing of personal data is strictly related to the Mission Secretariat’s goals in providing assistance to missionary countries. These include:
- Administering „Heart Adoption” records, including guardians and adopted children’s data;
- Processing online payments and bank transfers to the Secretariat’s account;
- Recording mass intentions donations;
- Providing confirmation of payments made;
- Collecting statistical data.
The Administrator, to optimize the display of the website, may collect data necessary for providing the specific services offered, as well as information on the User’s activity on the Site, including device IP, device data, internet identifier, geolocation data, and information collected via cookies and other similar technologies.
BASIS FOR DATA PROCESSING
We process your data to provide access to our website through your wish to support aid projects, missionary facilities, and people in mission areas per Article 6(1)(b) of GDPR and Article 7, Chapter 2, Section 2 of the Decree;
With your consent when accepting the terms and conditions regarding the „Heart Adoption” project and missionary projects per Article 6(1)(a) of GDPR and Article 7, Chapter 2, Section 1 of the Decree;
Under our obligation to comply with legal provisions such as „keeping accounts,” Article 6(1)(c) of GDPR and Article 7, Chapter 2, Section 3 of the Decree;
Under our legitimate interest, such as pursuing or defending potential claims, sending our newsletter to inform about ongoing projects and fundraising, and for statistical and analytical purposes to optimize the activities of our website and donor satisfaction per Article 6(1)(f) of GDPR and Article 7, Chapter 2, Section 6 of the Decree;
DATA PROVISION REQUIREMENT
All required data is provided voluntarily and minimized to enable us to provide the proposed services. Processing data for other purposes, such as adjusting the Site’s content to your interests, statistical measurements, and improving services within the Site, is necessary to ensure high-quality services. Not collecting your personal data for these purposes may prevent the proper provision of services.
Cookies are small text files saved on the User’s telecommunication end device (computer, phone, tablet, etc.) while using the Site, allowing for saving and reading information that the Administrator and other entities providing services on its behalf (e.g., analytics and statistics) can use for various purposes. The Administrator uses cookies for the following purposes:
- User identification during a connection with the website;
- Authentication for the duration of the connection session with our website;
- Ensuring security during authentication;
- Assisting in opening multimedia files;
- Personalizing the User interface and monitoring movements on our website to optimize and tailor to User needs;
- Data analysis for statistical and marketing purposes.
At any time, the User can change cookie or similar technology settings by adjusting privacy settings in the browser, with the proviso that this change may prevent access to certain Site functions. The privacy settings can be changed by selecting the appropriate option in the browser settings. For the most popular internet browsers, Users can manage privacy settings themselves, including cookies, in particular by accepting cookies, changing cookie settings, and blocking or deleting cookies. The method and scope of changes to privacy settings depend on the type or version of the browser or application used by the User. Detailed information on changing privacy settings is available on the providers’ websites.
DATA PROTECTION MEASURES
To ensure the security of your personal data, we employ administrative, technical, and technological measures. Our employees undergo necessary training, and data processing compliance is monitored by the Data Protection Officer.
EXTERNAL DATA RECIPIENTS
In administering our website, we use external services with which we sign processing agreements. These include:
- Hosting providers;
- Payment providers;
- Accounting software providers;
- Relevant public authorities to the extent that the Administrator is obligated to disclose data.
DATA RECIPIENTS OUTSIDE THE EU
Data recipients outside the European Union are only offices involved in the Heart Adoption project in missionary countries and the parents of children covered by this project. In these cases, your data is minimized to contact information.
DATA RETENTION PERIOD
Your data will be processed for the period during which our services are provided, and sometimes after their completion, but only if it is permitted or required under applicable law, e.g., for statistical, accounting, or claims purposes. In such cases, data will be processed for the period necessary to achieve such purposes or until an objection is expressed or until you cease using our services. For data processed based on your consent, e.g., for sending requested publications and newsletters, data will be processed until consent is withdrawn.
USER RIGHTS
In connection with the processing of your personal data, you have the following rights:
- Data rectification – if there is an error during data collection or if data changes, it is possible to provide correct and up-to-date data, and the Administrator will correct or update it;
- Access to data – you can exercise this right to obtain information on what data is being processed;
- Data deletion, also known as the „right to be forgotten” – if data is no longer necessary for the purposes for which it was collected, you have the right to request its deletion. For data related to sacraments or otherwise concerning canonical status, the right to data deletion is not applicable under General Decree Article 14 Section 4;
- Restriction of data processing – if there are doubts about the Administrator’s correct processing of data, you have the right to submit a request to limit processing;
- Data portability – you can receive and transfer data from the Administrator to another entity, provided it is technically feasible;
- Objection to data processing – based on the Administrator’s legitimate interest or that of a third party, for reasons related to a specific situation, and the right to object to data processing for direct marketing purposes;
- Withdrawal of consent at any time – the right to withdraw given consent regarding data processing at any time and without reason; withdrawal of consent is not retroactive, i.e., processing that occurred up to the moment of consent withdrawal remains fully valid and lawful;
- Contacting the Data Protection Officer – if there is a reasonable belief that data is being processed unlawfully;
- Filing a complaint regarding personal data processing with the supervisory authority responsible for data protection for church entities, which is the Church Data Protection Officer, Cardinal Stefan Wyszyński Square 6, 01-015 Warsaw, email: kiod@episkopat.pl, phone: +48 22 530 48 87.
DATA PROTECTION OFFICER
To ensure that your data is used lawfully, data processing is supervised by the Data Protection Officer designated by the Mission Secretariat. The Data Protection Officer can be contacted regarding all matters related to personal data processing and exercising rights related to data processing. The detailed contact information of the Pallottine Mission Secretariat Data Protection Officer is available on the website https://sekretariat-misyjny.pl/ in the „Contact” section. To contact the Data Protection Officer, you may write to the Pallottine Mission Secretariat office with the note „Data Protection Officer,” or email: biuro@sekretariat-misyjny.pl
CONTACT DETAILS OF THE ADMINISTRATOR
Address: Pallottine Mission Secretariat, Skaryszewska 12, 03-802 Warsaw, Secretariat Administration Office: Wilcza 8, 05-091 Ząbki, phone: +48 22 771 51 19, email: biuro@sekretariat-misyj