In accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/ EC (GDPR), we hereby inform you that:

The administrator of your personal data is:
Stowarzyszenie Wychowanków Gimnazjum i Liceum im. Stanisława Staszica w Lublinie
Address: Aleje Racławickie 26, 20-400 Lublin
E-mail: staszicaki.lublin@gmail.com

Your personal data is processed for the following purposes:
- to fulfill the statutory objectives of the Association,
- to conduct organizational, informational, and contact activities,
- to serve the members of the Association, donors, supporters, and persons contacting the Association,
- to fulfill the legal obligations incumbent on the Administrator (e.g., accounting, tax),

on the basis of:
- Article 6(1)(a) of the GDPR – consent of the data subject,
- Article 6(1)(b) of the GDPR – performance of a contract or taking steps prior to entering into a contract,
- Article 6(1)(c) of the GDPR – legal obligation of the Administrator,
- Article 6(1)(f) of the GDPR – legitimate interest of the Administrator.

Your personal data may be transferred to entities cooperating with the Association only to the extent necessary to achieve the above-mentioned purposes, in particular:
- entities providing accounting, IT, or legal services,
- public authorities authorized to obtain data on the basis of legal provisions.

Personal data will be stored for the period necessary to achieve the purposes for which it was collected, and after that time for the period required by law or until consent is withdrawn, if processing is based on consent.

Data subjects have the right to:
- access their personal data,
- rectify their personal data,
- erase their personal data (“right to be forgotten”),
- restrict processing,
- transfer their personal data,
- object to the processing of their personal data,
- withdraw their consent at any time (if processing is based on consent).

Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

The data subject has the right to lodge a complaint with the President of the Personal Data Protection Office if they believe that the processing of personal data violates the provisions of the GDPR.

Providing personal data is voluntary, but may be necessary to achieve specific purposes, in particular those related to the Association's statutory activities or responding to inquiries.

Your personal data is not processed in an automated manner, including profiling.