Privacy policy
Draft version. This document is a template still to be completed. Before publishing, fill in the fields in square brackets [ ] and ask a lawyer to review the content.
1. Who is the data controller
The controller of your personal data is [full name or organisation name], [address], [tax ID (NIP) / court register number (KRS), if applicable], hereinafter “Gotowa na kryzys” or “we”. For any matters concerning personal data, write to us at: [EMAIL ADDRESS].
2. What data we collect and why
Newsletter
When you sign up for the newsletter, we process your email address in order to send you messages about preparing for emergencies and about the project. Legal basis: your consent (Article 6(1)(a) GDPR (RODO)). You confirm your sign-up by clicking the link in our message.
72h readiness test
Your answers in the test are saved only in your browser (local storage, localStorage) so that they are not lost when you refresh the page. We do not receive them unless you ask for a preparation plan.
If you ask for a plan, we process your email address, your test result (score and level of preparedness) and encoded answers about your household (e.g. number of household members, type of heating, supplies you already have). We use them to send you a link to a plan tailored to your household, followed by further messages with the plan and information about the project. Legal basis: your consent (Article 6(1)(a) GDPR (RODO)).
The plan link contains your encoded answers. Anyone you share this link with will be able to see your result and plan.
Contact
When you write to us by email or via WhatsApp, we process the data you give us in order to reply. Legal basis: our legitimate interest, namely conducting correspondence (Article 6(1)(f) GDPR (RODO)).
Readiness Circle
If you purchase a place in the Readiness Circle, we process the data needed to conclude and perform the contract and for accounting purposes (Article 6(1)(b) and (c) GDPR (RODO)). [To be completed: payment provider, Circle platform, scope of data.]
3. Who we share data with
- Brevo (Sendinblue SAS, France): sending the newsletter and preparation plan, storing the mailing list.
- [Netlify, Inc. / Cloudflare, Inc.] (USA): website hosting. The provider may process your IP address and basic technical data in order to display the website and protect it from attacks. [To be completed: legal basis for transfer to the USA, e.g. the EU-US Data Privacy Framework or standard contractual clauses.]
- WhatsApp (Meta): if you join our group, your data is also processed by WhatsApp under its own terms.
- [Payment provider, Circle – if applicable.]
4. How long we keep data
We keep newsletter data and data from plan requests until you withdraw your consent (unsubscribe). We keep correspondence for as long as needed to conduct it, and then until [PERIOD]. We keep purchase-related data for the period required by tax law.
5. Your rights
You have the right to access your data, to rectification, erasure, restriction of processing, data portability and to object. You can withdraw your consent at any time, e.g. by clicking “unsubscribe” in the footer of any message. Withdrawing consent does not affect the lawfulness of processing carried out before it was withdrawn. You can also lodge a complaint with the President of the Personal Data Protection Office (UODO) (uodo.gov.pl).
6. Cookies and browser storage
Our website does not use advertising or analytics cookies. Fonts are loaded from our own server, not from Google. In your browser’s local storage we save only your test answers and the tasks you have ticked off in your plan, so they are not lost. You can delete them by clearing the site data in your browser settings or by clicking “Start again” in the test.
[If you add visitor statistics, describe them here.]
7. Changes to this policy
If we change this policy, we will publish the new version on this page with a new date.