§ 1. Personal Data Controller
The controller of the personal data of Users and Donors using the websites tempel.pl, beitkrakow.org, and beitkrakow.tempel.pl is the Progressive Judaism Centre Foundation (Fundacja Centrum Judaizmu Postępowego) registered in Kraków – „Synagoga Beit Kraków” branch, ul. Miodowa 22/11, 31-055 Kraków, entered into the register under KRS (National Court Register Number): 0000685168, NIP (Tax Identification Number): 6762533206, REGON: 367808930 (hereinafter: the „Controller”).
You can contact the Controller regarding personal data protection matters via e-mail at: office@tempel.pl or by post to the registered office address.
§ 2. Purposes and Legal Basis for Data Processing The personal data of Donors (first name, last name, e-mail address) provided in the payment form are processed for the following purposes:
Processing the donation and handling online payments – the legal basis is the necessity of processing for the performance of the donation agreement (Article 6(1)(b) of the GDPR).
Fulfilling legal obligations incumbent on the Controller, in particular accounting and tax obligations – the legal basis is Article 6(1)(c) of the GDPR.
Handling potential complaints or defending against claims – the legal basis is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR).

§ 3. Recipients of Personal Data
Donors’ personal data are shared with entities supporting the Controller in providing services, in particular:
PayU S.A. based in Poznań – as an independent data controller to process the payment transaction.
Entities providing accounting services for the Foundation.
IT and hosting service providers.
The Controller does not transfer personal data outside the European Economic Area.
§ 4. Data Retention Period Donors’ personal data will be kept for the period necessary to process the donation, and thereafter for the period required by generally applicable law (primarily tax and accounting regulations, typically for 5 years from the end of the calendar year in which the donation was made).

§ 5. Rights of Data Subjects In accordance with the provisions of the GDPR, every Donor has the right to:
Access their data and request a copy thereof.
Rectify (correct) their data.
Erase their data, provided there are no grounds for further processing.
Restrict the processing of data.
Object to the processing.
Lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (PUODO) in Warsaw, Poland, if they consider that the processing violates the provisions of the GDPR.

§ 6. Requirement to Provide Data Providing personal data (first name, last name, e-mail address) in the payment form is voluntary, however, it is a necessary requirement to process the online payment and transfer the donation.