Privacy Policy
Last updated: 2026-04-02
1. Data Administrator
The controller of your personal data is Rotary Club LublinNIP 7122961968, REGON: 060049956, with its registered office in Lublin (hereinafter: "Controller" or "we").
For matters concerning personal data protection, you can contact us at:
- E-mail: lublincentrum@rotary.org.pl
- Correspondence address: ul. Wrońska 2, 20-327 Lublin, Polska / POLAND
2. Data We Collect and Why
a) Web Analytics (Google Analytics 4)
- What data: analytical cookies, anonymized IP address, session information (visited subpages, visit duration, device and browser type).
- Purpose: to understand how visitors use our website so we can improve it.
- Legal basis: your consent (Art. 6(1)(a) GDPR). Analytics cookies are only activated after you click "Accept" in the cookie banner.
- How Long: Google Analytics cookies expire after 2 years. Data in the Google Analytics dashboard is retained for 2 months.
- Recipients: Google LLC (USA). Google participates in the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023), which ensures an adequate level of data protection.
b) Contact form
- What data: name (or alias), email address, message content.
- Purpose: to respond to your inquiry.
- Legal basis: our legitimate interest in handling correspondence (Art. 6(1)(f) GDPR).
- How Long: until the correspondence is concluded, no longer than 12 months from the last message.
- Recipients: your data is not shared with third parties. Messages are delivered exclusively to our email inbox.
c) Technical cookies (essential)
- What data: cookies storing your cookie consent choice and your language preference.
- Purpose: to ensure the website functions correctly and to remember your settings.
- Legal basis: our legitimate interest (Art. 6(1)(f) GDPR). These cookies do not require consent as they are strictly necessary for the operation of the website.
- How Long: up to 365 days.
d) Booking System (register.peaceforukraine.pl)
- What data: name, surname, email address, phone, billing address, NIP (for invoices), order history, payment data (tokens).
- Purpose: order fulfillment, shipping, invoicing.
- Legal basis: performance of sales contract (Art. 6(1)(b) GDPR), legal obligation (accounting — Art. 6(1)(c) GDPR).
- How Long: 6 years from the end of the financial year (accounting), 10 years (civil claims).
- Recipients: Infinitum (hosting and booking handling — data processor), Stripe (payments), accounting office.
- Zgoda: required acceptance of Privacy Policy checkbox when placing an order.
Stripe Payments (Infinitum)
- What data: payment tokens, transaction amount, email for confirmations, name/surname.
- Purpose: online payment processing.
- Legal basis: performance of sales contract (Art. 6(1)(b) GDPR).
- How Long: as per Stripe policy (typically 7 years).
- Recipients: Infinitum Event Agency (data processor) → Stripe Inc. (USA). Stripe participates in EU-US Data Privacy Framework. Infinitum has a data processing agreement in place.
f) Hostingi (Rotary + Infinitum)
- What data: server logs (IP, User-Agent, HTTP requests).
- Purpose: service operation, security.
- Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- Recipients: hosting providers (main Rotary server, Infinitum for subdomain register.peaceforukraine.pl) as data processors.
3. Cookies — Details
| Cookie name | Provider | Purpose | Category | Storage Time |
|---|---|---|---|---|
_ga | Google Analytics | Differentiating users | Analitycs | 2 years |
_ga_* | Google Analytics | Maintaining session state | Analitycs | 2 years |
cmplz_* | Complianz | Recording your cookie choices | Neccessary | 365 days |
rotary_lang | Rotary Club Lublin | Memorizing the language | Neccessary | 365 days |
You can change cookie settings by clicking "Cookie Settings" in the footer.
4. Your Rights
In connection with the processing of your personal data, you have the following rights:
- Right of access - you can ask what data we process (Art. 15 GDPR).
- Right to rectification — you can request correction of incorrect data (Art. 16 GDPR).
- Right to erasure — you can request deletion of your data ("right to be forgotten" — Art. 17 GDPR).
- Right to restriction of processing — you can request suspension of processing (Art. 18 GDPR).
- Right to data portability — you can receive data in machine-readable format (Art. 20 GDPR).
- Right to object — object to processing based on interest (Art. 21 GDPR).
- Right to withdraw consent — withdraw consent at any time (Art. 7(3) GDPR).
Write: lublincentrum@rotary.org.pl
5. Right to Lodge a Complaint
President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl
6. Data Transfers Outside the EEA
- Google Analytics → Google LLC (USA, EU-US DPF, EC decision July 10, 2023).
- Stripe → Stripe Inc. (USA, EU-US DPF + Standard Contractual Clauses).
7. Do You Have to Provide Data?
No — contact form is voluntary. Shop data **required for order** (Art. 6(1)(b) GDPR).
8. Automated Decisions
We do not use profiling or automated decision-making.
9. Policy Changes
We will notify of significant changes on the site.
