We respect the privacy of visitors to the website of the Mieczysław Wajnberg Institute Foundation. This Privacy Policy explains what personal data may be collected through www.instytutwajnberga.org, why we process it, and what rights you have in relation to your personal data.

1. Data Controller

The controller of your personal data is:

Fundacja Instytut Mieczysława Wajnberga
Al. Waszyngtona 26/21
03-912 Warsaw
Poland

KRS: 0000883055
NIP: 5272949749
REGON: 388189270

For matters concerning personal data, please contact us at:
instytut@instytutwajnberga.org

2. What data do we process and why?

Depending on how you use our website, we may process personal data that you provide directly to us as well as certain technical information collected when you use the website.

Contacting the Foundation

If you contact us by email or through a contact form, we may process information such as your name, email address and any other information included in your message.

We use this information to respond to your enquiry and conduct correspondence with you.

The legal basis for processing is our legitimate interest in communicating with people who contact the Foundation (Article 6(1)(f) GDPR). Where the communication concerns entering into or performing a contract, the legal basis may also be Article 6(1)(b) GDPR.

Newsletter

You can subscribe to the Mieczysław Wajnberg Institute Foundation newsletter through our website.

For this purpose, we process your email address and, where the subscription form allows you to provide additional information, any such information you choose to provide.

The legal basis for processing your data for the purpose of sending the newsletter is your consent (Article 6(1)(a) GDPR).

We use Mailchimp to manage and distribute our newsletter. In connection with this service, personal data may be processed outside the European Economic Area, in particular in the United States, subject to appropriate legal safeguards for international data transfers.

You may unsubscribe from the newsletter at any time by using the unsubscribe link included in every newsletter or by contacting us at instytut@instytutwajnberga.org.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Donations and online payments

Our website allows users to make donations and online payments using PayU.

When you make an online payment, information required to process the transaction may be transferred to the payment service provider to the extent necessary to process and settle the payment and ensure the security of the transaction.

The Foundation may process information relating to your payment, including identification details of the donor or payer, the amount and date of the payment and information necessary for accounting purposes.

Depending on the nature of the payment, the legal basis for processing is the performance of a contract or taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR), as well as compliance with legal obligations applicable to the Foundation, in particular accounting and tax obligations (Article 6(1)(c) GDPR).

Online payments are processed by PayU S.A., which processes payment-related personal data in accordance with its own privacy rules.

3. Website statistics

We use WP Statistics to obtain statistical information about visits to our website.

This allows us to understand basic information about how the website is used, such as the number of visits, pages viewed, referral sources and the types of devices or browsers used.

WP Statistics operates within our WordPress installation and statistical data is stored on the server on which our website operates. We do not use Google Analytics for this purpose.

WP Statistics anonymises visitors’ IP addresses. We use the information collected through this tool to analyse the use of our website, improve it and ensure that it functions correctly.

4. Cookies

Our website uses or may use cookies and similar technologies.

Cookies are small files stored on your device. Some cookies may be necessary for the website to function correctly, while others may be used, for example, to enable content provided by external services.

Where cookies or similar technologies are not necessary for the operation of the website, we use them after obtaining your consent where such consent is required.

You can manage your cookie preferences using the consent mechanism available on our website and through your browser settings.

5. Embedded content from other websites

Our website may include content embedded from external services, such as videos, audio recordings, music players, maps, images or other materials.

Such content may be provided by services including YouTube and Spotify.

Displaying or interacting with embedded content may result in certain technical information being transmitted to the external provider and may involve the use of cookies or similar technologies. These providers process personal data in accordance with their own privacy policies.

6. Who may receive your data?

Personal data may be shared with service providers that assist us in operating the Foundation and its website, but only to the extent necessary for the relevant purpose.

These may include:

• our hosting and technical service providers;
• Mailchimp, our newsletter service provider;
• PayU, our online payment provider;
• accounting service providers;
• IT service providers;
• providers of content embedded on our website.

Personal data may also be disclosed to competent public authorities where required by law.

7. How long do we retain your data?

We retain personal data only for as long as necessary for the purpose for which it was collected or for the period required by applicable law.

In particular:

• correspondence data is retained for the time necessary to handle the correspondence and, where appropriate, to establish, exercise or defend legal claims;
• newsletter data is retained until you withdraw your consent to receive the newsletter, while information necessary to demonstrate that consent was given and subsequently withdrawn may be retained where necessary;
• information relating to payments and donations is retained for the period required by accounting, tax and other applicable laws;
• technical and statistical information is retained for the period determined by the settings of the tools we use.

8. Your rights

Under the GDPR, and to the extent applicable in a particular situation, you have the right to:

• access your personal data;
• have inaccurate data corrected;
• request erasure of your data;
• request restriction of processing;
• data portability;
• object to processing based on legitimate interests;
• withdraw your consent at any time where processing is based on consent.

To exercise your rights or ask a question about the processing of your personal data, please contact us at instytut@instytutwajnberga.org.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) if you believe that your personal data is being processed unlawfully.

9. Data security

We use appropriate organisational and technical measures to protect personal data against unauthorised access, loss, alteration or disclosure.

10. Changes to this Privacy Policy

We may update this Privacy Policy, in particular where the operation of our website, the services we use or applicable legal requirements change.

The current version of the Privacy Policy will always be available at www.instytutwajnberga.org.

Last updated: 7 September 2026