Your data and privacy

Privacy Policy

Last updated: 23 June 2026

We want you to understand what data we collect, why we collect it and what rights you have. We explain this below in plain language, avoiding legal terminology where it is not necessary. If anything is unclear, please contact us and we will be happy to explain.

Who is responsible for your data

Data controller

The controller of your personal data is the Federation of Forest Education Organisations, a federation of associations with its registered office in Kielce, Poland.

Name: Federation of Forest Education Organisations
Legal form: federation of associations
Registered office: 52 Wojska Polskiego Street, 25-389 Kielce, Świętokrzyskie Voivodeship, Poland
KRS: 0001231229
NIP: 6573006144
REGON: 544334613
E-mail: kontakt@federacjalesna.pl

The Federation has not appointed a Data Protection Officer. [To be confirmed by the Federation.] For all matters concerning personal data, you may contact the controller directly at kontakt@federacjalesna.pl.

What we process and why

What data we process and for what purposes

We collect only the data needed to operate the website and communicate with you. The details below are organised by the circumstances in which we receive your data.

Newsletter subscription

Data processed: Email address.
Purpose: To send the Federation’s newsletter, including information about our work, events and educational resources.
Legal basis: Your consent under Article 6(1)(a) GDPR. You may withdraw consent at any time by using the unsubscribe link in any email or by contacting us.
Processor: MailerLite processes newsletter subscriptions on our behalf (MailerLite Limited, Ireland), so your email address is entered into that provider’s system. Data may also be processed outside the European Economic Area (EEA); where this occurs, transfers rely on safeguards required by the GDPR, including Standard Contractual Clauses where applicable.

Contact form and Join Us form

Data processed: The information you provide in the form, usually your name, email address and message; for membership enquiries, this also includes details of your organisation.
Purpose: To respond to your message and handle your enquiry, including contacting you about joining the Federation.
Legal basis: Your consent, given when you submit the form (Article 6(1)(a) GDPR), and our legitimate interest in managing correspondence and enquiries (Article 6(1)(f) GDPR).
Processor: We use Web3Forms to deliver form submissions to our inbox. Form data passes through this provider’s system on its way to us.

Who processes data on our behalf

Recipients of personal data

We do not sell your data or share it with other companies for their marketing purposes. We use trusted service providers that process data on our behalf and in accordance with our instructions:

MailerLite — Newsletter subscriptions and delivery (MailerLite Limited, Ireland).
Web3Forms — Delivery of messages submitted through our contact and membership enquiry forms.
Cloudflare — Website hosting and delivery. Cloudflare may process technical data required to provide the website securely.

Some providers may process data outside the EEA. In such cases, transfers rely on safeguards required by the GDPR, in particular Standard Contractual Clauses approved by the European Commission.

How long we retain data

Retention periods

We retain data only for as long as necessary for the purposes for which it was collected:

Newsletter data: Until you withdraw consent by unsubscribing. We remove your address from the mailing list after you unsubscribe.
Contact and membership enquiry form data: For the time needed to handle the matter and for any period during which claims may be established, pursued or defended, usually no longer than the applicable limitation period. [To be confirmed by the Federation.]
Federation member data: For the duration of membership and, after it ends, for the period required by law, for example for accounting and organisational records. [To be confirmed by the Federation.]

Your options

Your rights

In relation to the processing of your personal data, you have the following rights:

Right of access — You may ask whether we process your data, what data we process, and request a copy.
Right to rectification — You may have inaccurate or incomplete data corrected.
Right to erasure — You may request deletion where there is no legal basis for further processing.
Right to restriction — You may ask us to restrict processing temporarily.
Right to object — You may object to processing based on our legitimate interests.
Right to data portability — You may receive your data in a structured format and transmit it to another controller.
Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, email kontakt@federacjalesna.pl. We will respond without undue delay.

If you believe that we process your data unlawfully, you may lodge a complaint with the supervisory authority:

President of the Personal Data Protection Office (PUODO)

2 Stawki Street, 00-193 Warsaw, Poland

uodo.gov.pl (opens in a new tab)

Cookies and analytics

At present, our website does not use tracking or marketing cookies or analytics tools that profile users. We do not build user profiles, track you across websites or display advertising.

The website may use only technically necessary mechanisms required for correct and secure operation where these are used by our hosting provider.

If we introduce analytics tools or other cookies in future, we will update this policy and request consent where required.

Finally

Policy changes and contact

We may update this Privacy Policy, for example when the law or the way our website operates changes. The current version will always be available on this page, with the date of the latest update shown at the top.

If you have questions about your data or wish to exercise your rights, please contact us.