Legal document
Privacy Policy
Last updated: February 25, 2026
§ 1. Data controller
Your personal data controller is Słowem w Twarz Association, ul. Dworek 5/33, 44-200 Rybnik, KRS 0000699712, NIP 6423204888, REGON 368529913.
For data protection matters, contact us at: kontakt@slowemwtwarz.pl.
§ 2. What data we collect and why
We process personal data only to the extent necessary for the purposes below and based on Article 6 GDPR legal grounds.
Email contact / contact form
- Data
- Name, email address, message content
- Basis
- Legitimate interest of the controller – Article 6(1)(f) GDPR
- Retention
- Until the matter is resolved, no longer than 3 years
Registration for workshops, camps, and events
- Data
- Name, date of birth, email, contact phone, and for minors – legal guardian data
- Basis
- Contract performance (Article 6(1)(b) GDPR), and where applicable consent (Article 6(1)(a) GDPR)
- Retention
- 5 years after participation ends (accounting and archival requirements)
Volunteering and cooperation
- Data
- Name, national ID when legally required, email, phone
- Basis
- Legal obligation under Polish public benefit and volunteering law (Article 6(1)(c) GDPR)
- Retention
- 5 years after cooperation ends
Newsletter
- Data
- Email address
- Basis
- Data subject consent – Article 6(1)(a) GDPR
- Retention
- Until consent withdrawal
Association membership
- Data
- Name, residential address, date of birth, national ID
- Basis
- Legal obligation under the Polish Associations Act (Article 6(1)(c) GDPR)
- Retention
- Membership duration plus 10 years after termination (KRS and archival requirements)
§ 3. Data recipients
Data may be shared with processors under data processing agreements (Article 28 GDPR), in particular:
- hosting and IT infrastructure providers,
- email and newsletter service providers,
- accounting offices and legal advisers,
- public authorities when required by law.
We do not sell personal data or share it with third parties for independent marketing purposes.
§ 4. Transfers outside the EEA
As a rule, we do not transfer data outside the EEA. If cloud tools require transfers, we use appropriate safeguards (e.g. SCCs, EU-U.S. Data Privacy Framework).
§ 5. Your rights
You have rights of access, rectification, erasure, restriction, portability, objection, consent withdrawal, and the right to lodge a complaint with UODO.
To exercise your rights, contact: kontakt@slowemwtwarz.pl.
§ 6. Cookies
The website www.stowarzyszenieswt.pl may use cookies (small text files saved on the user device).
Necessary cookies
Required for proper operation and not subject to consent.
Analytics cookies
Version v1 is consent-ready; analytics run only after explicit consent.
You can manage cookies in browser settings. Disabling technical cookies may affect website functionality.
For full details, see: Cookie policy.
§ 7. Data security
We apply appropriate technical and organizational measures under Article 32 GDPR to protect data against unauthorized access, loss, or destruction.
§ 8. Privacy Policy changes
The controller may update this Privacy Policy. Material changes will be announced on the website before they take effect.