Privacy Policy

The controller of your personal data is Potrójnie Pozytywna Foundation, based in Leszno (64-100), ul. Ks. Sylwestra Marciniaka 10/11, Poland, entered in the register of associations, other social and professional organizations, foundations and public healthcare institutions of the National Court Register (KRS) under number 0000903510, tax ID (NIP) 6972381961, statistical number (REGON) 389087502 ("the Foundation", "we").

For any matters concerning the processing of personal data, you can contact us at kontakt@potrojniepozytywna.pl.

Contact form: name, email address and message content - to respond to your inquiry.

Newsletter: email address and language - to send information about new clinical trials, articles and Foundation news.

Donations: name (optional), email address, donation amount - to process and account for the donation and issue a payment confirmation. Payments are handled by an external payment operator, Tpay S.A., which processes data to the extent necessary to complete the transaction, as an independent controller.

Analytics data: pseudonymized website traffic data collected via Google Analytics 4 - to analyze visitor statistics and improve the quality of the site.

Consent of the data subject (Art. 6(1)(a) GDPR) - newsletter, analytics cookies.

Performance of a contract or steps taken at your request prior to entering into one (Art. 6(1)(b) GDPR) - processing a donation.

Legitimate interest of the controller (Art. 6(1)(f) GDPR) - responding to contact inquiries, basic website traffic analytics.

Tpay S.A. (payment operator) - to the extent necessary to process a donation.

Resend (email delivery provider) - sending transactional emails and the newsletter.

Vercel Inc. and Neon Inc. (application and database hosting) - storing data on cloud infrastructure.

Google LLC (Google Analytics) - website traffic analytics data.

Some recipients may process data outside the European Economic Area - in such cases we apply appropriate safeguards required by GDPR, including standard contractual clauses.

Contact form data is kept until the correspondence is concluded, for no longer than 2 years.

Newsletter data is kept until you unsubscribe.

Donation data is kept for the period required by tax and accounting law (generally 5 years, counted from the end of the year in which the donation was made).

Analytics data in Google Analytics is kept for 2 months (we shortened this from the 14-month default).

You have the right to: access your data, rectify it, erase it, restrict its processing, data portability, object to processing, and withdraw consent at any time (without affecting the lawfulness of processing carried out before its withdrawal).

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, if you believe that the processing of your data violates GDPR.

Essential cookies - used for the site to function properly (e.g. remembering your chosen language or the contents of your clinical trial shortlist). These don't require consent, as they're necessary to provide the service.

Analytics cookies (Google Analytics 4) - we use Google Analytics 4 to understand how visitors use our tools (e.g. the Clinical Trials Radar) and to improve them. The data collected includes: pages visited, approximate location (country/city level, based on an anonymized IP address), device and browser type, referral source, and interactions with page elements (e.g. using Radar filters, viewing a trial card, clicking a link to ClinicalTrials.gov). We do not collect or process any health data or other special category data under Article 9 GDPR in Google Analytics - the mere fact of visiting an oncology-related site is never linked to your identity.

The legal basis for processing analytics data is your freely given consent (Article 6(1)(a) GDPR), given by clicking "Accept" in the cookie banner. Google Analytics only loads on the site after consent is given - without it, no analytics data is collected or sent to Google.

We apply additional safeguards: IP anonymization, a shortened data retention period (2 months instead of the 14-month default), Google Signals disabled (Google Analytics does not link data to your Google account or build an advertising profile), and advertising features disabled - we don't show ads and don't use remarketing.

You can withdraw your consent at any time by clicking "Cookie settings" in the footer. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

We reserve the right to make changes to this privacy policy, in particular in connection with changes in the law or how the site operates. The current version of the policy is always available on this page.