PRIVACY POLICY
Centaurus Foundation
Last updated: June 2025
1. General Information
This Privacy Policy explains how the Centaurus Foundation, hereinafter referred to as the “Foundation”, “we” or “us”, collects, uses, stores and protects personal data collected through the website centaurus.org.pl, hereinafter referred to as the “Website”. We are committed to protecting your privacy in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, the General Data Protection Regulation – GDPR, and in accordance with applicable Polish law, including the Act of 10 May 2018 on the Protection of Personal Data.
2. Data Controller
The controller of your personal data is:
Centaurus Foundation
Registered in Poland
E-mail: biuro@centaurus.org.pl
Website: centaurus.org.pl
In all matters related to the processing of personal data, you may contact us at the e-mail address indicated above.
3. Categories of Personal Data Collected
Depending on the type of your interaction with the Website, we may process the following categories of personal data:
3.1 Contact Form
First and last name
E-mail address
Message content and any other information voluntarily provided by you.
3.2 Newsletter
E-mail address
First name, if provided.
3.3 Donation Form
First and last name
E-mail address
Billing address, if required. Payment data processed by an external payment provider; the Foundation does not store card details.
3.4 Analytics and Behavioral Data
IP address
Browser type and version
Device type and operating system, pages visited and time spent on the Website.
Click and scroll behavior
Traffic source, namely referring URL.
Geographic location at country or region level
4. Purposes and Legal Bases of Processing
We process your personal data for the following purposes and on the following legal bases under Article 6 GDPR: Responding to inquiries submitted through the contact form – legal basis: Article 6(1)(f) GDPR, the Foundation’s legitimate interest in responding to correspondence, or Article 6(1)(b) GDPR, performance of a contract or taking steps prior to entering into a contract. Sending newsletter communications – legal basis: Article 6(1)(a) GDPR, your freely given, specific, informed and unambiguous consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal. Processing donations – legal basis: Article 6(1)(b) GDPR, performance of a contract, and Article 6(1)(c) GDPR, compliance with legal obligations, including tax and accounting requirements.
Website analytics and user behavior analysis – legal basis: Article
6(1)(a) GDPR, consent provided through the cookie consent mechanism, and/or Article 6(1)(f) GDPR, legitimate interest in improving Website performance and user experience. Ensuring Website security and preventing fraud – legal basis: Article 6(1)(f) GDPR, legitimate interest.
5. Analytics and Tracking Technologies
The Website uses the following third-party analytics and tracking tools. These tools use cookies and similar technologies to collect information about how users interact with the Website.
5.1 Google Analytics
Google Analytics is a web analytics service provided by Google Ireland Limited. It collects data about user behavior, such as pages visited, session duration and traffic source, using cookies. Data may be transferred to Google servers in the United States based on Standard Contractual Clauses approved by the European Commission. You may disable Google Analytics tracking by installing the
Google Analytics Opt-out Browser Add-on.
5.2 Meta Pixel, Facebook Pixel
Meta Pixel is a tracking tool provided by Meta Platforms Ireland Limited. It enables us to measure the effectiveness of our communications, create custom audiences and deliver targeted advertising on Facebook and Instagram. Data may be transferred to Meta servers in the United States based on Standard Contractual Clauses. You can manage your advertising preferences through Facebook Ad Settings.
5.3 Hotjar
Hotjar is a behavioral analytics service provided by Hotjar Ltd., Malta. It uses heatmaps, session recordings and surveys to help us understand user interactions with the Website. Hotjar may collect mouse movements, clicks, scrolls and form interactions.
Hotjar suppresses sensitive input fields by default. You may opt out of Hotjar data collection at https://www.hotjar.com/legal/compliance/. On your first visit to the Website, you will be shown a cookie consent banner. Analytics and tracking cookies are stored on your device only with your prior consent, except for strictly necessary cookies. You may change your cookie preferences at any time through the cookie settings available on the
Website.
6. Recipients and Data Transfers
Your personal data may be disclosed to the following categories of recipients: IT service providers – hosting, maintenance and technical support of the Website.
E-mail marketing platforms – for sending newsletters and
transactional e-mails. Payment providers – for processing donations. Analytics providers – Google, Meta and Hotjar, as described in Section 5. Accounting and legal advisors – where necessary to comply with our legal obligations. Public authorities – where required by applicable law. Transfers of personal data to third countries outside the European Economic Area may occur in connection with the analytics tools described in Section 5. Such transfers are protected by Standard Contractual Clauses adopted by the European Commission pursuant to Article 46(2)(c) GDPR or by other appropriate safeguards. Upon request, we will provide further information about the specific safeguards applied.
7. Data Retention Periods
We retain your personal data only for as long as necessary for the purposes for which it was collected: Contact form data: retained for the period necessary to respond to your inquiry and for up to 3 years thereafter for evidentiary purposes.
Newsletter data: retained until you withdraw your consent or unsubscribe. Donation data: retained for 5 years from the end of the financial year in which the donation was made, in accordance with Polish accounting law. Analytics data: retained in accordance with the data retention policies of the relevant analytics providers, typically 14 months for Google Analytics; session duration or up to 1 year for Hotjar.
8. Your Rights Under the GDPR
Under the GDPR, you have the following rights with regard to your personal data: Right of access, Article 15 GDPR: the right to obtain confirmation as to whether your data is being processed and to receive a copy of the data. Right to rectification, Article 16 GDPR: the right to have inaccurate or incomplete data corrected. Right to erasure, Article 17 GDPR: the right to request deletion of your data where there is no longer a legal basis for processing. Right to restriction of processing, Article 18 GDPR: the right to request restriction of processing in certain circumstances. Right to data portability, Article 20 GDPR: the right to receive your data in a structured, commonly used and machine-readable format where processing is based on consent or contract. Right to object, Article 21 GDPR: the right to object to processing based on legitimate interests, including processing for direct marketing purposes. Right to withdraw consent, Article 7(3) GDPR: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing. Right to lodge a complaint: you have the right to lodge a complaint with the Polish supervisory authority – the President of the Personal Data Protection Office, Prezes Urzędu Ochrony Danych Osobowych, UODO, ul. Stawki 2, 00-193 Warsaw, Poland; www.uodo.gov.pl. To exercise any of the above rights, please contact us at biuro@centaurus.org.pl. We will respond to your request in accordance with Article 12 GDPR within one month of receipt.
9. Cookies
The Website uses cookies – small text files stored on your device. We use the following categories of cookies: Strictly necessary cookies: required for the proper functioning of the Website. These do not require consent. Analytics cookies: used by Google Analytics and Hotjar to collect information about how visitors use the Website. These require your consent. Marketing and tracking cookies: used by Meta Pixel for advertising purposes. These require your consent.
You may manage your cookie preferences at any time through the cookie consent banner on the Website or through your browser settings. Please note that disabling certain cookies may affect the functionality of the Website. More information on controlling cookies is available at www.aboutcookies.org or www.allaboutcookies.org.
10. Data Security
We use appropriate technical and organizational measures to protect your personal data in accordance with Article 32 GDPR against unauthorized access, alteration, disclosure or destruction. These measures include, where appropriate: data encryption, access controls, regular security assessments and staff training. However, no data transmission over the Internet can be guaranteed to be completely secure.
11. Children’s Privacy
The Website is not directed to children under 16 years of age. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data without parental consent, please contact us so that we can take appropriate action.
12. Automated Decision-Making and Profiling
We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR. Analytics data collected by third-party tools may be used to create aggregated user profiles for the purpose of improving the Website; however, this does not result in individual automated decisions.
13. Links to External Websites
The Website may contain links to third-party websites. The Foundation is not responsible for the privacy practices or content of such external
websites. We encourage you to read the privacy policies of all third-party websites you visit.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in applicable law, our practices or the services we provide. Changes will be published on this page with an updated revision date. Where significant changes are made, we will provide a more prominent notice. We encourage you to review this Policy regularly.
15. Contact
If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your personal data, please contact us:
Centaurus Foundation
E-mail: biuro@centaurus.org.pl
Website: https://centaurus.org.pl
You also have the right to lodge a complaint with the President of the Personal Data Protection Office, UODO, ul. Stawki 2, 00-193 Warsaw, Poland, or via www.uodo.gov.pl.