This Policy governs the basic rules of privacy and personal data protection for Users, as well as the method and rules for using cookies on the www.topcharity.eu website (hereinafter: the Website).

The introduction of the privacy policy results from the direct requirements of analytical service providers and information requirements arising from legal provisions regarding the implementation of the principles of using cookies. The Privacy Policy is a summary (extract) of the processes and information obligations performed by the personal data administrator.

The Privacy Policy implements the method of fulfilling requirements resulting from:

• The Google Analytics Terms of Service (https://www.google.com/analytics/terms/us.html),
• Provisions of the Act of 12 July 2024,
• Provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

The administrator of your personal data is Omenaa Foundation with its registered office in Warsaw, at ul. Heleny Kozłowskiej 1 lok. 43, 00-710 Warsaw, entered into the register of associations, other social and professional organizations, foundations, and independent public healthcare institutions by the District Court for the capital city of Warsaw in Warsaw, XIII Commercial Division of the National Court Register, KRS3 number: 0000509539, REGON: 147357946, NIP: 5272719133.

Contact with the Administrator is possible by sending an e-mail to kontakt@omenaafoundation.com or by post to the correspondence address indicated above.

Your personal data will be processed for purposes related to your use of the functionalities available on the website, including the registration of a profile on the Website and the implementation of the provisions of the Website Regulations.

Your personal data will be processed on the basis of:

• provisions of the Website Regulations (pursuant to Art. 6 para. 1 lit. b GDPR);
• a legal obligation incumbent on the administrator regarding tax and accounting obligations (pursuant to Art. 6 para. 1 lit. c GDPR);
• legitimate interests pursued by the Administrator or by a third party, except where such interests are overridden by the interests or fundamental rights and4 freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (pursuant to Art.5 6 para. 1 lit. f. GDPR). This applies to situations such as processing data to pursue and defend possible claims, ensure the security of the Website, collect analytical data in connection with expressed consent to improve the quality of services, User traffic forecasts and their preferences in the area of ​​offered content and services, and guarantee the operation of necessary services and solutions on the Website.

The data administrator anticipates processing personal data, including: in the form of name, surname, e-mail address, telephone number, name and surname of the referring person, IP addresses, and analytical and statistical data in connection with the measurement of network traffic and User behavior on the website.

Providing personal data by the User is voluntary, however, the consequence of not providing personal data will be the inability to conclude or perform the contract for the use of the Account, as well as the inability to use some Services.

Personal data is stored only for the period necessary to achieve the specific purpose for which it was collected, including the performance of the contract, and after its expiry for the period necessary to secure or pursue any claims or fulfill the legal obligation of the administrator. Personal data regarding the fulfillment of a legal obligation is stored for the duration of this obligation.

Recipients of information may be Sellers and entities providing auxiliary services, which include, among others:

• IT support,
• accounting,
• hosting, maintenance and updating of the Website,
• e-mail hosting.

Processed information or personal data may in certain situations be transferred to third countries in connection with the use of Google Analytics services. The basis for transferring personal data to service providers providing these services is the EU-US Data Privacy Framework program or an adequate mechanism for transferring personal data.

• Everyone has the right to request from the Administrator access to personal data concerning the data subject, their rectification, erasure or restriction of processing, or the right to object to processing, as well as the right to data portability.
• Everyone can lodge a complaint with a supervisory authority.
• Providing personal data within the framework of the Website's activity is voluntary, but it may be necessary in some cases to conduct communication.
• The data administrator will not take actions consisting of automated decision-making.
• Profiling may be carried out through advertising or analytical services in accordance with the consents expressed by the User for service providers.

Cookies are information saved in text form and then stored in your computer's memory (in the web browser's memory). The web browser user can independently allow or block the storage of Cookies by enabling the appropriate settings in the browser settings. Detailed information on cookie configuration can be found in the technical documentation of your web browser.

The data administrator will store cookies for purposes that include:

• collecting analytical data in connection with improving the quality of services, User traffic forecasts and their preferences in the area of ​​offered content and services,
• guaranteeing the operation of necessary services and solutions on the Website.

Cookies are collected on the basis of the User's consent resulting from their actions or browser configuration.

The implementation of the information obligation in the area of ​​collecting cookies results from legal requirements (Art. 399 of the Act of 12 July 2024 - Electronic Communications Law (Journal of Laws item 1221)) or contractual requirements with advertising or analytical service providers (e.g. Google Analytics).

The data administrator uses the following services:

• Google Analytics (https://www.google.com/analytics/terms/pl.html),

Instructions for deleting cookies are available on the websites of your web browser provider.