1. CHANGES IN LAW

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (commonly referred to as “GDPR”, “General Data Protection Regulation”), we hereby inform you about the processing of your personal data and the principles under which this occurs.

2. PRIVACY POLICY: WHAT IS IT?

The Privacy and Data Protection Policy aims to explain who we are and what we do with your personal data.

The purpose of this Policy is to:

    • Ensure that you understand what personal data we collect with your consent, the reasons why we collect and use it, and to whom it may be disclosed.
    • Explain how we use the personal data you provide so that you can benefit from our support and services.
    • Explain your rights and preferences regarding the personal data we collect and how we protect your privacy.

 

We may improve the services you use or will use. The introduction of new or additional services may result in changes in how we collect or process your personal data. Should our Privacy Policy be updated or modified, you will find all related information on our website: https://ponseti.eu and on our Facebook page: https://www.facebook.com/ponsetipoland

We encourage you to regularly visit these pages to stay informed about any changes. Unless otherwise specified, any new or additional services introduced will be subject to the provisions of this Policy.

3. WHO COLLECTS YOUR DATA?

The data controller is The Ignacio Ponseti Foundation, located at Grodkowska 8/30, 01-461 Warsaw, Poland, email: fundacja@ponseti.pl, phone: +48 578 604 077, entered into the National Court Register of Associations, Other Social and Professional Organizations, Foundations and Independent Public Healthcare Institutions, maintained by the District Court for the Capital City of Warsaw, 13th Commercial Division of the National Court Register, under number KRS: 0000795834, VAT: 522-31-64-474, REGON: 383933522 (“Foundation”).

For matters concerning personal data processing, the fastest way to contact the Data Controller is by email at: pp@ponseti.pl.

4. LEGAL BASIS FOR COLLECTING AND PROCESSING PERSONAL DATA

We collect and process your personal data (including that of your child if the inquiry concerns a minor, or that of third parties if you are authorized to act on their behalf) only when received directly from you and with your consent, or when you have explicit consent to act on someone’s behalf.

Your consent to data collection and processing is confirmed by the relevant consent clause and this Privacy Policy. Any contact with us is deemed as consent to collect and process your data and confirmation that you have read and accepted this Policy.

5. HOW CAN YOU CONTACT US AND HOW DO WE RECEIVE DATA?

You can contact us through:

    • The contact form on our website: https://www.ponseti.eu
    • The email addresses provided in this Policy
    • Telephone
    • Social media
    • Individual meetings

 

6. WHAT DATA DO WE COLLECT?

We collect the following data:

    • Your first and last name
    • Your child’s first and last name (if applicable)
    • Third-party names (if applicable)
    • Email address
    • Phone number
    • Your or others’ image (photos you voluntarily provide)
    • Artistic or intellectual work submitted to us (e.g., contest entries)

 

Additionally, when using our website, we may collect:

    • IP address of your device
    • Browser type and version
    • Time zone settings
    • Types and versions of browser plug-ins
    • Operating system and platform
    • URL clickstream data (including date and time of visits)
    • Content viewed or searched for
    • Page response times and errors
    • Duration of visits and on-page interactions (scrolling, clicks, cursor movements)

 

We do not automatically collect data from cookies — please see our COOKIES POLICY.

We do not profile data, but our website may contain embedded content (e.g., videos, images, articles) from external websites, which may collect your data in accordance with their own privacy policies.

7. WHY DO WE COLLECT AND PROCESS YOUR DATA?

We collect and process personal data to:

    • Respond to your inquiries and requests
    • Conduct contests or surveys
    • Send you marketing or informational materials via electronic or verbal communication
    • Manage our website and social media accounts, troubleshoot, analyze data, test, and improve functionality
    • Ensure the security and resilience of our website

 

Providing personal data is voluntary but necessary for proper communication and for some services to function.

8. WHO RECEIVES YOUR PERSONAL DATA?

The recipients of personal data are:

    • The Ignacio Ponseti Foundation
    • Authorized persons employed or contracted by the Foundation

 

We may also share some data with analytics or search service providers (including A/B testing tools) and, where necessary, postal, courier, or public authorities.

Your data is processed within the European Union and not transferred outside the EEA.

We take all reasonable measures to protect your data but cannot guarantee the full security of data you share publicly, particularly on social media.

9. HOW LONG DO WE RETAIN YOUR DATA?

We process your personal data only as long as necessary to fulfill the purposes for which it was collected, after which it is deleted.
Please note that deletion applies to our systems only — we cannot delete data stored by social media platforms.

10. YOUR RIGHTS AND OUR OBLIGATIONS

Under the GDPR, you have the following rights:

    • Right of access – to know what data we hold about you.
    • Right to rectification – to request correction of inaccurate or incomplete data.
    • Right to erasure (“right to be forgotten”).
    • Right to restriction of processing.
    • Right to object – to processing based on legitimate interest.
    • Right to data portability – to receive your data in a structured, machine-readable format.

 

If your data is processed based on consent, you may withdraw your consent at any time by emailing pp@ponseti.pl.

11. OUR RIGHTS AND YOUR OBLIGATIONS

We may be required to disclose your personal data to:

    • Fulfill legal obligations (e.g., criminal investigations)
    • Pursue legal claims or defend our rights
    • Protect our property, intellectual rights, or the interests of third parties

 

12. TECHNICAL ASPECTS

We implement appropriate technical and organizational measures to protect personal data (e.g., encryption, pseudonymization, access controls). However, no system is completely secure.

13. 72 HOURS

In the event of a personal data breach, we will notify the supervisory authority and affected individuals within 72 hours of becoming aware of the incident.

You also have the right to file a complaint with the President of the Personal Data Protection Office (UODO).

14. CHANGES TO OUR PRIVACY POLICY

Any updates to this Privacy Policy will be published on our website: https://ponseti.eu and Facebook page: https://www.facebook.com/ponsetipoland
Please visit these pages regularly to stay informed about changes.

Last updated: October 06, 2025