GDPR Information Clause

Data Controller

Stowarzyszenie Niezależnych Inicjatyw Społecznych Błękit

Gruszowiec 56, 34-642 Gruszowiec

KRS: 0000328858 · NIP: 7372160844

Email: zrodelko@blekit.org

Purpose of processing

• Processing the enrolment application for the nursery or kindergarten
• Verifying eligibility for EU-funded projects (FERS/Maluch+)
• Communication with the parent/guardian regarding the enrolment process
• Fulfilment of legal obligations (accounting, reporting)

Legal basis

• Art. 6(1)(b) GDPR — processing necessary for the performance of a contract (enrolment)
• Art. 6(1)(c) GDPR — compliance with a legal obligation
• Art. 6(1)(a) GDPR — consent (e.g. photos, marketing)
• Art. 9(2)(a) GDPR — explicit consent for health data (if applicable)

Data retention

Data from enrolment forms is retained for 5 years from the date of enrolment or rejection. Data related to EU projects is retained for the period required by the programme (typically until 2035). Accounting data for 5 years.

Recipients of data

Data may be shared with: entities providing IT services (hosting, CMS), public authorities if required by law, EU project supervisory bodies (Ministry, ZUS).

Your rights

You have the right to:

• Access your data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase data — "right to be forgotten" (Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing (Art. 21)
• Withdraw consent at any time (without affecting prior processing)
• Lodge a complaint with the President of UODO (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl)

Is providing data obligatory?

Providing data required for the enrolment form is voluntary, but necessary to process your application. Without this data we cannot consider the application.