Privacy notice
What this site collects and what happens to it
This site uses no cookies, no analytics and no third-party scripts. Fonts load from our own server. We only collect the data you enter in a form yourself.
Controller
The Altruiq Foundation has not yet been registered in the Polish National Court Register (KRS). Until it is, the data controller is the founder, Aleksander Królasik, Łódź, Poland. For anything related to your data, write to aleksander@altruiq.org. Once the Foundation is registered, it will become the controller — we will update this page when that happens.
What we collect, why, and on what basis
| Data | Purpose | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Support form: name or organisation, email, type of requester, case description, attachment file names | Replying to your request and finding someone to help | Art. 6(1)(f) — legitimate interest: handling the request you send | Until the case is closed, then at most 12 months |
| Attachments to a request: photos and screenshots | Understanding your case better | Art. 6(1)(f) — legitimate interest: handling the request you send | Not stored on the server — they travel only in the email with your request and are deleted with it, at most 12 months after the case is closed. We strip metadata such as location before sending. |
| Newsletter: email, language, subscription and confirmation dates | Sending updates on Altruiq initiatives | Art. 6(1)(a) — consent | Until you unsubscribe; unconfirmed sign-ups — 7 days |
| Hash of your IP address (the address itself is not stored) | Protecting the forms from abuse | Art. 6(1)(f) — legitimate interest: site security | 24 hours |
Providing data is voluntary, but without an email address we cannot reply or send updates. We do no profiling and make no automated decisions.
Who else has access
The site and the emails sent from its forms are handled by Prociv sp. z o.o., Wrocław, Poland (VH.pl hosting). Requests and correspondence arrive in our Google Workspace mailbox (Google Cloud EMEA Limited, Ireland). Both process data only on our instructions. Google may also process data outside the European Economic Area, under standard contractual clauses approved by the European Commission. The web server also keeps standard technical logs. We never sell data. A volunteer working on your request only receives the details they need to help.
Your rights
- Access and copy — ask what we hold about you.
- Rectification and erasure — we correct or delete your data.
- Restriction and portability — where the GDPR provides for them.
- Objection — to processing based on legitimate interest.
- Withdrawing consent — every email has an unsubscribe link; withdrawal does not affect earlier sending.
- Complaint — to the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.