Privacy Policy

Last updated: 2024

This Privacy Policy explains how Xagaho ("we", "us", "our") processes personal data of visitors and participants of our Local Volunteering Program website. This Policy is issued in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the "GDPR") and the Polish Act of 10 May 2018 on the Protection of Personal Data (Ustawa o ochronie danych osobowych), which together govern the processing of personal data in Poland.

1. Data Controller

The controller of your personal data is:

2. What Personal Data We Collect and Why

Our website includes a contact and/or registration form used by individuals interested in our Local Volunteering Program. Through this form, we collect the following categories of personal data:

• Identification data – such as your first and last name, so we know who is contacting us.
• Contact data – such as your email address and telephone number, so we can respond to your inquiry or coordinate volunteering activities.
• Message content – any information you voluntarily provide in the free-text fields of the form, such as your availability, interests, or questions regarding volunteering opportunities.

We collect only the data necessary to respond to your inquiry, organize your participation in volunteering activities, and maintain a record of communication with you.

3. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6(1) of the GDPR:

• Article 6(1)(a) – consent: where you have voluntarily submitted the form and agreed to be contacted regarding volunteering opportunities.
• Article 6(1)(b) – performance of a contract or steps prior to entering into one: where processing is necessary to organize your participation as a volunteer.
• Article 6(1)(f) – legitimate interest: where we need to maintain records of correspondence for administrative and organizational purposes.

4. Cookies

Our website sets only one cookie: consent_state. This cookie stores your consent choice regarding optional processing activities on this site and is retained for a period of one year. We do not use any analytics, tracking, session, or CSRF cookies of any kind on this website.

5. Advertising Measurement

Advertising measurement technology is used exclusively on the confirmation page displayed after form submission, and only if you have given your prior consent via the consent_state cookie described above. If you do not consent, no such measurement takes place.

6. Data Retention

We retain the personal data submitted through our form for as long as necessary to fulfill the purposes described above, and in any case no longer than is required to respond to your inquiry, organize your volunteering activity, and comply with any applicable legal, accounting, or archival obligations. After this period, your data is securely deleted or anonymized.

7. Recipients of Your Data

We do not sell or rent your personal data. Your data may be shared with:

• Service providers who host our website and email infrastructure, acting as data processors under a data processing agreement;
• Advertising measurement providers, solely on the confirmation page and only after you have given consent, as described in Section 5;
• Public authorities, where disclosure is required by applicable Polish or EU law.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• The right to access your personal data;
• The right to rectify inaccurate or incomplete data;
• The right to erasure ("right to be forgotten");
• The right to restrict processing;
• The right to object to processing based on legitimate interest;
• The right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
• The right to data portability;
• The right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzedu Ochrony Danych Osobowych), the supervisory authority for data protection in Poland.

9. How to Exercise Your Rights

To exercise any of the rights listed above, or if you have any questions about how your personal data is processed, please contact us at:

Email: [email protected]
Phone: +48 32 291 52 95
Postal address: Xagaho, Pszczynska 114, 40-525 Katowice, Poland

We will respond to your request within one month of receipt, in accordance with the timeframes established by the GDPR.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any changes will be posted on this page with an updated revision date.