The text below is the authoritative English reference copy held by the secretariat. Polish and Turkish editions are published on turkpol.org.pl and linked below.
Data protection contact: ul. Marcina Kasprzaka 146/10, 01-237 Warsaw — info@turkpol.org.pl
Respecting the right to privacy of persons who have entrusted the TURKPOL Culture and Co-operation Association (registered office: ul. Marcina Kasprzaka 146/10, Warsaw) with their personal data — including persons using our services, our contractors and their employees — we declare that we process the collected data in accordance with national and European laws and regulations and in conditions guaranteeing their security.
To ensure the transparency of the processing carried out, we present the data-protection principles applicable to the TURKPOL Association, established on the basis of Regulation (EU) 2016/679 (the General Data Protection Regulation, hereinafter "GDPR").
Data administrator
The administrator of your personal data — the entity that decides on the purposes and means of processing — is the Association of Polish-Turkey Culture and Cooperation TURKPOL with its registered office in Warsaw, ul. Marcina Kasprzaka 146/10. In matters related to the processing of your personal data, you can contact us at the e-mail address provided by the secretariat.
Acquisition of data and purpose of processing
Your personal data may be processed for the following purposes:
- to be accepted as a member of TURKPOL and to perform the related activities
- implementation of agreements on participation in courses, trainings, seminars and similar programmes
- other activities aimed at promoting the work of the TURKPOL Association
Activities of the association
TURKPOL builds and deepens friendly Polish-Turkish relations based on openness, tolerance and cooperation; it raises awareness of both societies about Poland, Türkiye, and Polish–Turkish relations; supports and promotes the Polish cultural heritage in Türkiye and the Turkish cultural heritage in Poland; integrates and supports the Polish community in Türkiye and the Turkish community in Poland; promotes intercultural and interfaith dialogue; raises awareness of cultural and multicultural differences; promotes attitudes of tolerance and understanding; combats discrimination on grounds of race, nationality or religion; encourages closer business engagement between Türkiye and Poland; upholds and popularises national tradition; carries out activities for national and ethnic minorities and the regional language; supports the integration of foreigners of Turkish nationality, including their integration with Polish citizens; and jointly develops and carries out projects in this field in cooperation with other countries of the European Union.
Processing purposes and legal bases
Activities aimed at concluding and executing membership agreements and agreements with clients or contractors, including conducting training courses, organising conferences, workshops, webinars and other events — Article 6(1)(b) GDPR for clients and Article 6(1)(f) GDPR for persons cooperating on behalf of clients/contractors. Retained for the duration of the contract or until the warranty expires or the claim is settled.
Dealing with complaints, requests and claims — Article 6(1)(b), (c) and (f) GDPR. Retained for the duration of the contract or until the warranty expires or the claim is settled.
Establishment, investigation and defence of claims — Article 6(1)(f) GDPR. Retained until the limitation periods for contractual claims expire under applicable law.
Accounting, bookkeeping and financial reporting — Article 6(1)(c) GDPR. Retained for as long as legal retention obligations apply (as a general rule, five years after the year in which the obliging legal event occurred).
Keeping statistics — Article 6(1)(f) GDPR. Retained for the duration of any other processing operation indicated above; we do not store personal data exclusively for statistical purposes.
Conducting marketing activities (including by electronic communication) — Article 6(1)(f) GDPR. Where marketing is carried out using a telephone number or email address, the administrator will obtain your consent for the communication channel in accordance with the Electronic Services Act or the Telecommunications Act. Retained until you object or until the limitation period for claims has expired.
Data processing as part of TURKPOL's profile on social networks — Article 6(1)(f) GDPR. Data is co-administered by TURKPOL and the relevant social networks and is processed until you object.
Processing of cookies — Article 6(1)(f) GDPR. The administrator uses necessary cookies to enable the basic functions of the website; for statistical, marketing or preference cookies the administrator obtains consent. Data is processed for the periods indicated in the Cookies Policy or until you object. Objections can be made through the cookies-consent control.
Data recipients
In connection with its activities, TURKPOL may disclose your personal data to:
- business partners cooperating with TURKPOL in consulting and training services, conference and workshop delivery
- state authorities or other entities authorised by law
- ICT and operations providers, including Microsoft, auditors, accounting firms and marketing partners — under contract and only on documented instructions
- payment service providers (within the meaning of the Polish Payment Services Act of 19 August 2011) and banks where settlement is required
- online recruitment portals where applicable to job applicants
Your rights and the voluntariness of providing data
Any person whose data is processed by TURKPOL has the right to:
- access their data and receive a copy
- rectify (amend) their data
- have their data deleted
- restrict the processing of their data
- data portability where the legal basis is consent (Article 6(1)(a) or 9(2)(a) GDPR) or contract (Article 6(1)(b) GDPR)
- object to processing where the legal basis is legitimate interest (Article 6(1)(f) GDPR)
- withdraw consent at any time without affecting the lawfulness of processing carried out before its withdrawal
Supervisory authority
Persons whose data are processed by TURKPOL also have the right to lodge a complaint with the supervisory authority — the President of the Authority for Personal Data Protection (UODO). For more information: https://uodo.gov.pl/pl/p/skargi.
Do you have to provide your personal data?
Provision of data is necessary for the conclusion of contracts and the settlement of activities, and for TURKPOL to comply with legal requirements: if you wish to participate in TURKPOL's activities you must provide your personal data.
If your employer or another entity has nominated you as a contact person in connection with the conclusion or execution of a contract with TURKPOL, your data will be processed to the extent disclosed by that entity (typically name, surname, position, e-mail address and telephone number).
For the remainder (in particular processing for marketing purposes), the provision of data is voluntary.
Transfers of data to third countries
As a general rule, personal data are not transferred outside the European Economic Area (EEA). However, where our subcontractors providing ICT support and IT infrastructure operate outside the EEA, TURKPOL may outsource certain activities to recognised subcontractors operating outside the EEA, which can result in your data being transferred outside the EEA.
According to European Commission decisions, recipient countries outside the EEA shall ensure an adequate level of protection of personal data in accordance with EEA standards. The Commission's adequacy decision concerning the United States covers companies participating in the Data Privacy Framework programme — TURKPOL only cooperates with companies participating in this programme. Further information: https://www.dataprivacyframework.gov/s/.
Safeguards applied by TURKPOL comply with the principles set out in Chapter V of the GDPR. You may request further information about the safeguards applied, obtain a copy of those safeguards, and learn where they are made available.
Automated processing of personal data
Your personal data are not used for automated decision-making (including profiling) in such a way that automated processing could result in decisions producing legal effects on you or similarly significantly affecting clients, contractors, their employees or associates, employees or associates of the controller, or job applicants.
