Thank you for visiting our website.
Below, we present information regarding the processing of personal data when using the websites of the Climate&Strategy Foundation (hereinafter referred to as the “Service” or “Services”).
We would like to assure you that the processing of your personal data is carried out in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR), as well as with other generally applicable laws, including the Act of 18 July 2002 on the Provision of Electronic Services and the Act of 12 July 2024 – the Electronic Communications Law.
This Privacy Policy provides information on the processing of personal data by the Climate&Strategy Foundation (formerly: Climate Strategies Poland Foundation), with its registered office at ul. Jana Heweliusza 11/811, 80-890 Gdańsk (hereinafter: the “controller,” the “Foundation,” “we”), concerning current and prospective Clients and Contractors, including individuals visiting websites administered by our Foundation (hereinafter collectively: the “Users”), namely:
We respect the privacy of our Users, and therefore we provide this Privacy Policy so that every User knows to what extent, for what purposes, on what legal grounds, and by which entities their personal data is processed. This allows each User to independently, consciously, and freely decide whether to use our Services. The Privacy Policy also informs Users about the rights they are entitled to in connection with the processing of their personal data.
This Policy may be supplemented by specific information clauses provided to the User at the time of collecting their personal data, in particular when expressing the intention to use certain services (e.g., subscribing to a newsletter, using the carbon footprint calculator), as well as in the course of marketing activities, such as the organization of competitions, promotional campaigns, or events. The basis for all data subjects’ rights and the principles governing their processing is the General Data Protection Regulation referred to above.
The Data Protection Officer (DPO) at the Climate&Strategy Foundation is Mr. Paweł Modrzejewski. The Deputy Data Protection Officer is Ms. Izabela Walczak.
The designated Data Protection Officer can be contacted at: iod@climateandstrategy.com.
The Deputy Data Protection Officer can be contacted at: +48 791 543 400.
We highly value the trust placed in us by our Users; therefore, below we present the key principles we follow when processing personal data:
The Foundation ensures the exercise of Users’ rights related to the processing of their personal data. These rights derive in particular from Articles 15-22 of the GDPR.
In accordance with the GDPR, every User has the right to:
The exercise of the above rights must comply with applicable laws, the principles of social coexistence, and must not infringe upon the rights and freedoms, including the personal rights, of other individuals.
Any requests regarding the processing of personal data, including the exercise of rights, may be sent by email to: kontakt@climateandstrategy.com, or in writing to the Foundation’s registered office with the note “Personal Data.” For requests to withdraw consent, please refer to the section below: “Consent – Withdrawal of Consent.”
Each request will be handled without undue delay, but no later than within one month of receipt. This period may be extended by a further two months due to the complexity of the request or the number of requests, of which we will always inform you. Until the request is fulfilled, it may occur that the User/Client continues to receive communications from us that they had opted out of by withdrawing consent.
The Foundation implements technical and organizational measures to protect personal data against unlawful or unauthorized access or use, as well as against accidental destruction, loss, or compromise of integrity.
In ensuring the security of processed personal data, we commit to safeguarding:
a) Confidentiality of data – ensuring protection of processed data against accidental disclosure to third parties,
b) Integrity of data – ensuring protection of processed data against unauthorized modification,
c) Availability of data – ensuring that data can be accessed and used upon request, within a specified time, by an authorized entity.
Users’ personal data may be processed by third parties only where such an entity undertakes to provide appropriate technical and organizational measures that guarantee the security of processed personal data, as well as to maintain the confidentiality of such data. Every employee and contractor of the Foundation who has access to personal data is duly authorized to process it and is obliged to maintain confidentiality both during and after the expiration of such authorization.
The Foundation processes Users’ personal data solely for specified, explicit, and lawful purposes.
The Climate&Strategy Foundation primarily processes data for the following purposes and on the following legal bases:
Providing contact details in an email or other communication is voluntary; however, failure to provide them may prevent us from responding to the User’s inquiry.
Providing data is mandatory when processing is based on legal requirements or when it is a condition for entering into a contract. Failure to provide such data may result in the inability to conclude a contract or to fulfill the obligations imposed on the Foundation.
As a rule, Users’ personal data is obtained through our websites, which include dedicated contact forms, and, in exceptional circumstances, from social media platforms, including messaging applications. In addition, when a User accesses websites administered by the Foundation, we also collect data contained in system logs (more information on this is available in the “Cookies Policy” section below).
While using our Services, Users may provide the Foundation with personal data enabling their identification, in particular through:
What Data May We Process?
The personal data we process includes, in particular, identification data such as name, surname, position, contact details such as phone number, email address, business address, as well as other data resulting from the nature of the relationship between us. Each time, we will define and process only the necessary scope of data. When providing contact details, the User only needs to provide one of the two available options: either a phone number or an email address, in line with the principle of data minimization.
In our relationship with the User, including services offered via the website, the User may be asked to provide consent, including consent to electronic marketing, where such consent constitutes the appropriate legal basis for the processing of personal data. The obligation to obtain consent may also arise from laws other than the GDPR, such as the Electronic Communications Law.
The User has the right to withdraw consent at any time, either by contacting the Foundation directly at its office or via email at: kontakt@climateandstrategy.com.
Withdrawal of consent does not entail any negative consequences – however, it may result in the inability to use certain services, such as receiving newsletters, for which applicable laws require us to obtain such consent.
Withdrawal of consent does not affect the lawfulness of processing based on consent carried out prior to its withdrawal.
A request to withdraw consent will be processed without undue delay. Once the request has been implemented, we will cease processing personal data for marketing purposes, including the sending of commercial information electronically or by phone. Until the request is fully implemented, it may occur that the User continues to receive information they have opted out of by withdrawing consent.
If we process data for other purposes (e.g., contract performance, service delivery, evidentiary purposes, or pursuing claims), we may continue processing such data on another legal basis.
The Climate&Strategy Foundation retains personal data for the period necessary to achieve the purposes for which the User was informed at the time of data collection. The retention period for personal data is determined in strict compliance with applicable legal provisions, in particular the Accounting Act. The User has the right to obtain information from us regarding the likely period of storage of their personal data. Where data is processed on the basis of consent, it will be processed until such consent is withdrawn or until the purpose for which it was given ceases to exist.
We may transfer personal data to so-called data processors – companies providing services on our behalf that require the processing of personal data, in particular IT services, marketing services, and the organization and execution of events.
Please note that where data recipients process Users’ personal data independently and in their own name, for example by offering products and services through their own communication channels, they become separate data controllers. In such cases, they bear their own responsibility for the processing of such personal data, and our Policy does not apply. In these situations, the User should always receive separate information from those entities regarding the principles of data processing.
As a rule, we do not transfer data to third countries. However, we maintain profiles on social media platforms such as LinkedIn and YouTube. Data stored on the servers of the operators of these platforms is processed in third countries, including the United States, in accordance with the privacy policies of the respective services. More information, including links to the relevant privacy policies, can be found in the section “Social Media Profiles.” As a rule, transfers to the United States are based on the new Data Privacy Framework (DPF). For entities not included in the DPF, the legal basis for transfer is usually the entity’s commitment to comply with the provisions of the Standard Contractual Clauses issued under the Implementing Decision of the European Commission.
* On 10 July 2023, the European Commission issued a decision recognizing an adequate level of protection of personal data provided by the so-called “EU–US Data Privacy Framework”.
In connection with the use of our websites, the Foundation also collects data contained in system logs. These are primarily used for technical purposes related to the administration of our Services. In addition, the Foundation uses this information to collect statistical demographic data. The compiled statistics primarily allow us to analyze how the functionalities provided by the websites are used. System logs contain information about IP addresses (network interface numbers); however, this data does not enable us to unequivocally identify the User (i.e., a specific individual using a computer or other device connected to the Internet).
Websites administered by the Foundation use cookies to recognize Users’ personal preferences. In other words, cookies used by our websites allow us to recognize the User’s computer during subsequent visits and are intended solely to facilitate the use of the Service.
The websites do not automatically collect any information except for that contained in cookies. Cookies are IT data, in particular text files, that are stored on the User’s end device and are intended for the use of the Service’s websites. Cookies usually contain the name of the website from which they originate, the time they are stored on the end device, and a unique number.
The entity placing cookies on the User’s end device and accessing them is the operator of the Service – the Climate&Strategy Foundation, with its registered office at ul. Jana Heweliusza 11/811, 80-890 Gdańsk. Cookies are used for the following purposes:
The Service uses two main types of cookies: session cookies and persistent cookies. Session cookies are temporary files stored on the User’s end device until logging out, leaving the website, or closing the web browser. Persistent cookies are stored on the User’s end device for the time specified in the cookie parameters or until deleted by the User.
The following types of cookies are used within the Service:
In many cases, web browser software (internet browser) by default allows cookies to be stored on the User’s end device. Service Users may change cookie settings at any time. These settings may, in particular, be changed to block the automatic handling of cookies in the browser settings or to notify the User each time cookies are placed on their device. Detailed information on the possibilities and ways of handling cookies is available in the settings of the web browser software.
The Foundation informs that restricting the use of cookies may affect some functionalities available on the websites. Cookies may be placed on the User’s end device of a website administered by the Climate&Strategy Foundation and may also be used by our cooperating partners.
Detailed information on changing cookie settings and manually deleting cookies in the most popular web browsers can be found in the browser’s help section or at the following links (simply click on the relevant link):
Chrome
Firefox
Internet Explorer
Opera
Safari
Microsoft Edge
Each User can delete their data from our Analytics database at any time using the plugin: https://tools.google.com/dlpage/gaoptout
Each User can also change the settings in their Google account at any time to limit the ads displayed to them: https://myaccount.google.com/privacy#ads (Ad Settings section).
Our websites use Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses cookies stored on the User’s computer to facilitate the analysis of how the website is used. The information generated by the cookie regarding the use of the website is generally transmitted to and stored on Google servers in the United States. If IP anonymization is activated on the website, the User’s IP address will be shortened by Google within the member states of the European Union or in other countries that are parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the United States and shortened there. Google will use this information on our behalf, as the website operator, to evaluate the use of the website, compile reports on website activity, and provide additional services related to the website and internet usage for the website operator.
The IP address transmitted by the User’s browser within the framework of Google Analytics will not be combined with other data held by Google.
It is possible to prevent the storage of cookies by selecting the appropriate settings in the web browser; however, in such cases, not all functions of the website may be fully available. In addition, Users may prevent the transmission of data generated by the cookie relating to the use of the website (including IP address) to Google, and the processing of this data by Google, by downloading and installing the browser add-on made available by Google: https://tools.google.com/dlpage/gaoptout?hl=en
This website uses the “Demographics Features” of Google Analytics to generate reports containing information about the age, gender, and interests of visitors. These data originate from interest-based advertising provided by Google and from visitor data obtained from other providers, including Google accounts, Gmail, YouTube, and the Google Display Network. These data cannot be linked to a specific individual. This feature can be disabled at any time in the ad settings of the User’s Google account. Consent to the collection of User information by Google Analytics may also be withdrawn at any time, as described in this section.
We use Google Analytics to analyze how our website is used and to continuously improve it. The statistics obtained may be used to enhance our offering and make it more attractive to Users. In exceptional cases where personal data is transferred to the United States, Google has accepted the EU–U.S. Data Privacy Framework.
https://www.privacyshield.gov/EU-US-Framework
The legal basis for the use of Google Analytics is Article 6(1)(f) GDPR.
Information about the External Provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001 can be found at the following links:
Our websites may use remarketing features in Google Analytics in combination with Google AdWords and Google DoubleClick services operating across devices. The provider of these services is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
This feature makes it possible to link advertising target groups created through Google Analytics remarketing with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based and personalized advertising messages tailored to the User, based on their previous browsing behavior on one device (e.g., mobile phone), can also be displayed on other devices (e.g., tablet or computer). Upon consent, Google links the User’s web and app browsing history with their Google account. This enables the delivery of the same personalized advertising on any device on which the User is signed in with their Google account.
To enable this functionality, Google Analytics collects Google-authenticated User IDs, which are temporarily linked with our Google Analytics data in order to define and create target audiences for cross-device advertising.
Users may opt out of remarketing/cross-device targeting by disabling personalized ads in their Google account settings via the following link: https://www.google.com/settings/ads/onweb/
Additional information and Google’s data protection provisions can be found in Google’s Privacy Policy at: https://policies.google.com/technologies/ads
Our websites contain plugins to our social media profiles, which we maintain on LinkedIn and YouTube. In addition, the Foundation’s websites include links redirecting to the websites of our partners and to content related to the statutory activities of the Foundation, including podcasts and articles. A database of journalistic and popular science articles and materials can be found at:
https://klimatycznabazawiedzy.org/
On https://dziennikarzedlaplanety.pl/, plugins are available that link to the social media profiles of journalists specializing in climate-related topics. Please note that by clicking on such a plugin, the User’s data (such as IP address or browser identifier) may be transmitted to the data controller of the respective service (particularly if the User is logged in to that service), in accordance with its privacy policy. For detailed information, please refer to the relevant privacy policies, links to which are provided in the section above.
As part of our marketing activities, we maintain profiles on the following platforms:
LinkedIn is provided by LinkedIn Corporation, 1000 W Maude Avenue, Sunnyvale, CA 94085, USA, and is part of the Microsoft group. Information on how LinkedIn processes personal data can be found in its Privacy Policy.
YouTube is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, and within the EU by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Information on how YouTube processes personal data is available here:
https://www.youtube.com/intl/ALL_en/howyoutubeworks/user-settings/privacy/
To measure customer satisfaction, we use the Google My Business profile tool. This “Business Profile” is the Foundation’s company profile visible in Google search results. According to the provider’s rules, if a User wishes to share their opinion about our services, they must have a Google.com account to post a review. Leaving a review is entirely voluntary. It serves as a means of gauging customer satisfaction in order to better understand their level of satisfaction with the Foundation’s activities or services offered. Reviews can be edited or deleted at any time by clicking the menu and navigating to the Your Contributions section in Google Maps (subsection: Reviews).
We inform you that responsibility for managing the Foundation’s social media profiles rests with the data controller, which is the Climate&Strategy Foundation. As part of this activity, the controller collects and processes certain data shared by users of these platforms. We ensure that the operation of our profiles complies with the requirements set out in the regulations of these platforms. Please note that the policies of our profiles may differ in content from those of other entities’ pages within these services.
Through the functioning of our social media profiles, we collect and process the following personal data:
Personal data collected through communication with Users is processed solely for the purpose of responding, where necessary. User activity related to our profiles will not be archived outside these platforms, unless required for evidentiary purposes. The processing of personal data on our social media profiles is based on the following legal grounds:
Information we hold from User messages will be retained only as long as necessary to provide a response. Information contained in User comments will remain visible on our profiles until deleted by the author or the administrator. Personal data collected by the platforms themselves – such as post history, messenger activity, or LinkedIn/YouTube activity – is retained according to the terms set out in the platforms’ own policies.
In accordance with the GDPR, every User has the following rights with respect to their personal data:
For any requests concerning, for example, the publication of your image, please specify the exact photo in question.
Establishing any relationship between the controller and the User of the platform is entirely voluntary. The User may always withdraw consent to the processing of their personal data if the processing was based on previously granted consent.
We do not make decisions based solely on automated processing.
The Climate&Strategy Foundation reserves the right to amend this Policy as necessary, which may result from changes in applicable laws, evolving privacy standards, or the expansion of our services. Accordingly, the Foundation will inform Users of any such changes by posting an appropriate notice on its websites.
All rights to the websites administered by the Climate&Strategy Foundation, namely:
including all graphic elements published on the websites and all other components of the above-mentioned services, are reserved. These websites and all of their elements are protected by law, in particular by the provisions of the Act of 4 February 1994 on Copyright and Related Rights, the Act of 16 April 1993 on Combating Unfair Competition, and the Act of 27 July 2001 on the Protection of Databases.
Last updated: 29 May 2025