Privacy policy

1. Controller

The controller of personal data is Diplomacy & Business Foundation, ul. Nowy Świat 54/56 lok. 30, 00-363 Warsaw, KRS 0001124038, NIP 5253025872. For data protection matters write to office@dbf-global.org.

2. Scope and purposes

• Data submitted through the contact form (name, e-mail address, organisation, message) is processed solely to answer the enquiry, on the basis of consent — Article 6(1)(a) GDPR.
• Event participants' data is processed to organise the event and to contact the participant — Article 6(1)(b) and (f) GDPR.
• Institutional partners' contact data is processed to carry out the cooperation — Article 6(1)(b) and (f) GDPR.

3. Retention

Correspondence is kept for as long as needed to answer it, and for no more than 24 months from the last contact, unless the law requires longer retention.

4. Recipients

Data may be entrusted to our hosting and e-mail provider acting on our instructions under a data processing agreement. We do not transfer data to third countries unless it is necessary to deliver an international event, in which case we inform participants separately.

5. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent at any time without affecting the lawfulness of processing carried out before withdrawal. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office.

6. Voluntary provision

Providing data is voluntary but necessary in order to answer an enquiry or to take part in an event.

This text requires review by counsel before publication, and completion with the hosting provider's details.