Privacy & Cookie Policy

1. Data Controller

The controller of your personal data is Fundacja BrainGreen, KRS: 0000964547, NIP: 5252903313, REGON: 521709494, with its registered office at Plac Konstytucji, 00-552 Warsaw, Poland. You can contact us at [email protected].

2. What Data We Collect

We may collect the following personal data:

  • Name and email address (when you fill out our contact form or sign up to volunteer)
  • IP address and browser information (collected automatically via analytics)
  • Cookies and usage data (see section 5)

3. How We Use Your Data

We use your data to:

  • Respond to your inquiries and messages
  • Process volunteer applications and donations
  • Improve the performance and content of our website
  • Comply with legal obligations

4. Legal Basis

We process your data based on your consent (Art. 6(1)(a) GDPR), the performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR), and our legitimate interests (Art. 6(1)(f) GDPR) such as website analytics and security.

5. Cookies

Our website uses cookies — small text files stored on your device. We use:

  • Essential cookies — necessary for the website to function correctly
  • Analytics cookies — we use Google Analytics (GA4) to understand how visitors use our site. These cookies collect anonymised data about pages visited and time spent on the site.

You can withdraw your consent at any time by clearing cookies in your browser settings or using our cookie banner.

6. Third Parties

We use Google Analytics (Google LLC, USA). Data may be transferred to the United States under Standard Contractual Clauses approved by the European Commission. We do not sell your personal data to any third party.

7. Your Rights

Under GDPR, you have the right to:

  • Access, correct or delete your personal data
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time
  • Lodge a complaint with the Polish Data Protection Authority (UODO)

To exercise your rights, contact us at [email protected].

8. Data Retention

We retain your personal data only as long as necessary for the purposes described above, or as required by law. Contact form data is deleted after 12 months if no further correspondence follows.

9. Changes to This Policy

We may update this policy from time to time. The current version is always available on this page. Last updated: April 2026.