Polish Early Buddhism Society
Privacy Policy
We care about the privacy of people who visit our website, contact us, subscribe to our newsletter, support the Association’s activities, or submit a membership application.
Below, we explain what personal data we process, for what purposes, and on what basis.
1. Data Controller
The controller of your personal data is:
Polish Early Buddhism Association
Registered office: ul. marsz. Józefa Piłsudskiego 74, unit 320, Wrocław, Poland
KRS: 0001257998
NIP: 8971977144
REGON: 545462419
For matters relating to personal data protection, please contact us at:
pebs.rada@gmail.com
2. What personal data do we process?
Depending on how you use our website and interact with the Association, we may process, in particular:
your first and last name;
your date of birth – in the case of a membership application;
your email address;
your telephone number, if provided;
information relating to your membership in the Association;
information provided through forms or correspondence;
information relating to membership fees, donations, and other payments;
information relating to event registrations;
technical data relating to the use of our website, including information collected through cookies and similar technologies.
The scope of the data we process depends on the purpose for which it was provided. We aim to collect only the data necessary for a given purpose.
3. Membership Applications and Membership
If you submit an electronic membership application through our website, we process the data you provide in order to:
receive and review your membership application;
contact you regarding your application;
enable the Management Board to make a decision regarding your membership;
once you have been admitted to the Association, maintain the membership register and administer the rights and obligations associated with membership.
The electronic membership application is one of the forms of submitting a membership application provided for in the Statute of the Polish Early Buddhism Association.
Depending on the specific circumstances, the legal basis for processing is taking steps at the request of the data subject prior to entering into a membership relationship and the performance of that relationship (Article 6(1)(b) GDPR), compliance with legal obligations to which the Association is subject (Article 6(1)(c) GDPR), or the Association’s legitimate interest in properly conducting its activities and maintaining its records (Article 6(1)(f) GDPR).
Providing the data marked as required in the form is necessary for the membership application to be considered. Providing any other data is voluntary.
4. Contacting the Association
If you contact us through the contact form, by email, or by other means, we process the information you provide in order to correspond with you and respond to your enquiry.
The legal basis for processing is our legitimate interest in communicating with you and responding to enquiries addressed to us (Article 6(1)(f) GDPR).
If your enquiry concerns entering into or performing a contract, the legal basis for processing may also be Article 6(1)(b) GDPR.
5. Newsletter
If you subscribe to our newsletter, we will process your email address and any other information you provide when subscribing in order to send you information about the activities of the Polish Early Buddhism Association, including events, meetings, talks, initiatives, and other news relating to our activities.
We use MailerLite to provide the technical infrastructure for our newsletter.
We send the newsletter to people who have consented to receiving such communications. Providing your data and giving your consent is voluntary.
You can unsubscribe from the newsletter at any time by using the unsubscribe link included in each email or by contacting us.
Withdrawing your consent does not affect the lawfulness of processing carried out before its withdrawal.
6. Membership Fees and Donations
If you make a payment through our website, in particular a membership fee or donation, we may process the data necessary to:
identify the payment;
correctly allocate the payment;
maintain financial and accounting records;
comply with obligations arising under applicable law.
Online payments are processed by Stripe. In connection with processing a payment, the necessary data may be transferred to Stripe and processed in accordance with the rules applicable to that payment provider.
The Polish Early Buddhism Association does not store full payment card details. Data necessary to authorise payments is processed by the payment provider.
Depending on the type of payment and the circumstances, the legal basis for processing by the Association is the performance of obligations relating to membership or a donation (Article 6(1)(b) GDPR), compliance with legal obligations, particularly those relating to financial and accounting records (Article 6(1)(c) GDPR), or the Association’s legitimate interests (Article 6(1)(f) GDPR).
7. Events, Meetings and Other Registrations
If you register through our website for an event, meeting, workshop, conference, or other initiative organised or co-organised by the Association, we may process the data necessary to handle your registration and organise the event.
The scope of the data processed and the applicable legal basis may depend on the nature of the particular event.
If data is collected for another purpose or its scope goes beyond what is necessary for standard registration processing, we may provide additional information regarding data processing alongside the relevant form.
8. Third-Party Service Providers
In connection with operating our website and conducting the Association’s activities, we use services provided by third parties. Personal data may be entrusted or disclosed to them only to the extent necessary to provide the relevant services.
In particular, we use:
Squarespace – for website hosting and operation, including forms available on the website;
Stripe – for processing online payments;
MailerLite – for newsletter and mailing list services;
Google – for registration forms;
and, where necessary, providers of email, IT, hosting, accounting and legal services, as well as other entities supporting the Association’s activities.
Personal data may also be disclosed to authorised public authorities where required by law.
9. Transfers of Personal Data Outside the European Economic Area
As a result of the Association’s use of technology service providers, some personal data may be processed outside the European Economic Area.
In such cases, personal data is transferred using mechanisms provided for under the GDPR and appropriate to the particular service provider and method of processing.
10. How Long Do We Keep Your Data?
We retain personal data for as long as necessary to fulfil the purpose for which it was collected and subsequently for any period required by law or necessary to establish, exercise, or defend potential legal claims.
In particular:
data relating to membership applicants – for the period necessary to review the application and, where justified, for the period necessary to document how it was handled;
members’ data – for the duration of membership and, after membership ends, for the period required by law or necessary to maintain the Association’s required records;
newsletter data – until consent is withdrawn, the person unsubscribes, or the purpose of processing ceases to exist;
data contained in correspondence – for the period necessary to handle and archive the relevant matter;
payment data – for the period required by financial, accounting and tax regulations;
event-related data – for the period necessary to organise and settle the event and subsequently for the period justified by legal obligations or the possibility of pursuing or defending claims.
11. Your Rights
In the circumstances provided for by the GDPR, you have the right to:
access your personal data;
obtain a copy of your data;
rectify inaccurate or outdated data;
request the deletion of your data;
request restriction of processing;
data portability;
object to processing based on legitimate interests;
withdraw your consent at any time where processing is based on consent.
The exercise of certain rights may be restricted in circumstances provided for by applicable law, for example where the Association is legally required to continue retaining certain data.
For matters concerning your personal data, you can contact us at: pebs.rada@gmail.com
If you believe that your personal data is being processed unlawfully, you also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).
12. Cookies
Our website uses cookies and similar technologies.
Essential cookies may be used to ensure the proper, secure, and technical operation of the website.
For cookies that are not essential to the functioning of the website, particularly analytics or marketing cookies, you may give or refuse your consent using the cookie management mechanism available on the website.
We use functionality provided by Squarespace to manage cookie consent.
You can change your cookie preferences at any time. Information about your choices may be stored in order to remember your preferences.
You can also manage cookies through your web browser settings.
13. Voluntary Provision of Data
Providing personal data is generally voluntary.
In certain cases, however, providing specific data is necessary in order to use a particular service or function, such as submitting a membership application, making a payment, receiving a response to a message, or registering for an event.
Required fields in forms are marked accordingly.
14. Data Security
We implement appropriate organisational and technical measures designed to protect personal data against unauthorised access, loss, alteration, destruction, or unauthorised disclosure.
Access to personal data should be limited to persons who require it in connection with their duties.
15. Changes to this Privacy Policy
This Privacy Policy may be updated, particularly in the event of changes to the operation of the website, the services we use, the Association’s activities, or applicable laws.
The current version of the Privacy Policy is published on the Association’s website.
Last updated: 20 August 2026
