GDPR Information

This notice is a short summary of personal data processing in the EltenLink portal. A more detailed description is available in the Privacy Policy.

The Polish version of this document is the binding version. This English version is provided for information.

Controller

The data controller is Fundacja Prowadnica, ul. Ignacego Krasickiego 5, 84-239 Bolszewo, Poland.

Registration details: KRS 0000893029, VAT/NIP PL 5882467405, REGON 388594504.

Foundation contact: fundacja@prowadnica.org.

Data Protection Officer contact: iod@prowadnica.org.

Operational EltenLink contact: support@elten.link.

Purposes of processing

Data is processed to:

• create and maintain accounts,
• provide EltenLink portal features,
• operate forums, blogs, messages, notes, polls, attachments and profiles,
• activate accounts, recover access and send administrative communication,
• maintain sessions, sign-in and account security,
• handle optional SMS two-factor authentication,
• moderate the portal and prevent spam, abuse and violations of the Terms and Conditions,
• diagnose issues and maintain infrastructure, logs and backups,
• comply with legal obligations and protect the rights of the Foundation, users and third parties.

Legal bases

The legal bases are:

• performance of a service or actions before starting the service,
• the controller's legitimate interest, in particular security, portal maintenance, moderation and abuse prevention,
• consent or the user's voluntary action for optional features,
• legal obligations imposed on the controller.

Categories of data

Processed data may include in particular: login, e-mail address, password during authentication, profile data, account settings, content published and sent in the portal, IP address, session and client identifiers, device and browser information, technical logs, security data and, optionally, a phone number for SMS 2FA.

Recipients of data

Data may be received by entities supporting the portal, in particular hosting, e-mail, SMS, security, backup and infrastructure maintenance providers. Data may be disclosed to public authorities where required by law.

We do not perform advertising profiling and we do not sell user data.

Transfers outside the EEA

Some technical services, such as global cloud, SMS or infrastructure providers, may involve transfers of data outside the European Economic Area. Where this happens, safeguards provided by law are used.

Retention and account archiving

Data is stored for the time needed to operate the account and portal, ensure security, moderation and accountability, comply with legal obligations and maintain continuity of public discussions.

Users may archive their account. Archiving disables the account and limits further use, but does not automatically delete data needed for portal operation, security, accountability, moderation, abuse handling, legal obligations or continuity of public content.

Rights of the data subject

Users have the right to request access to data, rectification, erasure, restriction of processing, data portability and objection, within the limits provided by law. Where processing is based on consent, consent may be withdrawn without affecting earlier processing.

Users have the right to lodge a complaint with the President of the Polish Personal Data Protection Office.

Providing data required at registration is necessary to create an account. Providing data for optional features is voluntary, but may be necessary to use a given feature.