Your personal data will be processed for purposes related to your use of the functionalities available on the Website, in particular:

in order to handle and respond to inquiries sent via the contact form available on the Website;
in order to register and maintain a user account on the Platform, including verifying the registration application against the list of invited persons maintained by the Controller and authenticating logins with a one-time code sent via SMS;
in order to handle participation in charity events and auctions, including providing auction catalogues, receiving and handling declarations (offers), handling telephone bidding (including recording calls, where provided for in the relevant auction regulations), receiving statements submitted on the Platform, and settling auction results and donations;
in order to fulfil legal obligations incumbent on the Controller, including accounting and tax obligations and the obligations of an obligated institution under the AML Act;
in order to invite users to participate in future events and to inform them about the Controller's statutory activities;
in order to send, to the provided e-mail address, information about the Controller's activities, the events it organises, charity auctions and fundraising campaigns – solely on the basis of separate, voluntary consent;
in order to collect analytical and statistical data related to measuring traffic on the Website and user behavior, which serves to improve the quality of services and optimize the Website.

Your personal data will be processed on the following legal bases:

Art. 6(1)(b) GDPR (Necessity for the performance of a contract): regarding the registration and maintenance of an account on the Platform and the handling of participation in events and auctions in accordance with the TOP CHARITY Platform Terms and Conditions and the relevant event regulations;
Art. 6(1)(c) GDPR (Legal obligation): regarding the fulfilment of accounting and tax obligations and obligations under the AML Act;
Art. 6(1)(f) GDPR (Legitimate interest of the Controller): regarding the handling of inquiries sent via the contact form. The legitimate interest of the Controller is the ability to respond to an inquiry directed by an interested person and to maintain communication with potential partners, donors, and other interested parties.
Art. 6(1)(f) GDPR (Legitimate interest of the Controller): regarding inviting previous participants and donors to take part in future events and informing them about statutory activities; the legitimate interest of the Controller is maintaining relationships with participants and donors and pursuing its statutory objectives;
Art. 6(1)(a) GDPR (Consent): regarding sending, to the provided e-mail address, information about the Controller's activities, events, charity auctions and fundraising campaigns; consent is voluntary and may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal;
Art. 6(1)(a) GDPR (Consent): regarding the collection of analytical data via cookies, based on the consent expressed by the User through the consent management mechanism (cookie banner).
Art. 6(1)(f) GDPR (Legitimate interest of the Controller): regarding ensuring the security and proper functioning of the Website, as well as pursuing and defending against potential claims.

One Corner

One Corner