Personal Data Controller
NIP (Tax ID): 7551934110
REGON: 368888931
General Information and Data Security
This document defines the principles for processing and protecting personal data of individuals visiting and using the website llamerada.org.pl, including the alpaca wool handicraft store and contact and booking forms managed by Llamerada Foundation. This document is hereinafter referred to as the "Privacy Policy".
The controller of your personal data is Llamerada Foundation with its registered office: Dębowiec 11a, 48-200 Prudnik, entered into the register of associations, other social and professional organizations, foundations, and independent public healthcare institutions maintained by the District Court in Opole, 8th Commercial Division of the National Court Register, under number KRS: 0000707207, NIP: 7551934110, REGON: 368888931.
For any matters concerning the processing of your personal data, you can contact us:
- • By mail to the address: Llamerada Foundation, Dębowiec 11a, 48-200 Prudnik
- • By email to: fundacja@llamerada.org.pl
- • By phone: +48 885 556 484
We answer all inquiries and requests without undue delay, no later than within 14 days, unless a shorter period arises from legal provisions.
We apply technical and organizational data protection measures required by current legislation (including a secure connection encrypted with an SSL/TLS certificate), preventing unauthorized persons from obtaining and modifying personal data sent to us electronically.
Personal data means any information relating to an identified or identifiable natural person (in particular name and surname, telephone number, e-mail address, delivery address, or online identifier).
For what purpose do we process your data and on what legal basis?
Your personal data are processed solely for lawful purposes arising from the nature of your relationship with the Llamerada Foundation:
1. Order processing in the Handicraft Store
When you order handcrafted items made of our alpaca wool (sauna hats, slippers, yarn skeins, decorations), your data (first name, last name, phone, email, delivery address / parcel locker code) is processed in order to conclude and execute the sales agreement, deliver the parcel, and issue an invoice.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract)2. Booking visits, alpaca therapy, and workshops
Handling telephone bookings and contact forms for alpaca encounters, alpaca therapy sessions, horticultural therapy, 'From Alpaca to Sweater' educational presentations for schools, and handicraft workshops at our Educational Farm.
Legal basis: Art. 6(1)(b) and (f) GDPR (pre-contractual steps / legitimate interest)3. Donations and accounting and tax obligations
In the case of donations for statutory purposes made via bank transfer or BLIK, we process donor data necessary to record the payment and fulfill the foundation's tax obligations.
Legal basis: Art. 6(1)(c) GDPR (legal obligation)4. Volunteer Club "Alpaca Haven"
Recruitment and administration of volunteer agreements with individuals supporting herd care, workshops, and statutory activities of the Foundation.
Legal basis: Art. 6(1)(a) and (b) GDPR in conjunction with the Public Benefit Activity Act5. Pursuit of and defense against claims
Protection of the Foundation's rights in the event of potential civil law claims arising from the sale of products or organized events.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest of the Controller)6. Information / marketing consent
Only with separate, voluntary consent – informing about new craft products, charity campaigns, and educational programs.
Legal basis: Art. 6(1)(a) GDPR (voluntary consent, which can be withdrawn at any time)Important: Providing your personal data is always voluntary. However, failure to provide data marked as required in the order or booking form will make it impossible to process the order or book a visit to the ranch.
Recipients of your personal data
The processing of your personal data may be entrusted to trusted entities cooperating with the Llamerada Foundation. Such entrustment takes place solely on the basis of a written data processing agreement (pursuant to Art. 28 GDPR), ensuring the application of appropriate security measures.
Categories of entities to which we may entrust data processing:
- 1. Postal operators and courier companies: for the delivery of ordered handmade goods or correspondence;
- 2. Payment institutions and bank: Cooperative Bank in Prudnik for handling bank transfers and processing donations and BLIK payments;
- 3. Hosting and e-mail service providers: entities hosting the Foundation's web servers and email mailboxes in secure data centers;
- 4. Accounting office and legal advisors: to the extent necessary to maintain accurate accounting and tax records of the Foundation;
- 5. Technical software providers: contact form processing systems maintaining data transmission confidentiality.
Retention period of personal data
Your personal data will be stored for the period necessary to fulfill the purposes for which they were collected:
- • Data concerning orders and contracts: for the period of contract execution, and subsequently for the limitation period of potential claims (pursuant to Article 118 of the Civil Code – typically 3 or 6 years);
- • Accounting and tax documentation: for the period required by tax regulations and the Accounting Act (5 years, counted from the end of the calendar year in which the tax payment deadline expired);
- • Inquiries and correspondence: for the period necessary to provide comprehensive answers, no longer than 12 months after the conclusion of contact;
- • Data processed on the basis of consent: until consent is withdrawn by the data subject.
Rights of data subjects (Art. 15–21 GDPR)
In connection with the processing of your personal data by the Llamerada Foundation, you are entitled to the full catalog of rights under the GDPR:
You may at any time request information about what data of yours we process, for what purpose, to whom they were entrusted, and obtain the first free copy of your data.
You can request the immediate rectification of inaccurate data or the completion of incomplete data.
You can request the erasure of your data if it is no longer necessary for the purposes for which it was collected, you withdrew consent, or you raised an objection (provided processing is not required to fulfill our legal obligations or pursue claims).
You may request the restriction of data processing solely to storage while the accuracy of the data is verified or the submitted objection is assessed.
You have the right to object at any time to the processing of data based on the legitimate interest of the Controller (e.g., statistical purposes) as well as an absolute right to object to processing for direct marketing purposes.
When data is processed automatically based on a contract or consent, you have the right to receive it in a structured, commonly used machine-readable format (e.g., CSV, JSON) or have it transmitted directly to another designated controller.
If you consider that the processing of your personal data violates the provisions of the General Data Protection Regulation (GDPR) or Polish law, you have the right to lodge a complaint with the competent supervisory authority in Poland:
ul. Stawki 2, 00-193 Warsaw
Helpline: 606 950 000 | Website: www.uodo.gov.pl
Current legal bases
This Privacy Policy has been updated and meets the requirements arising from:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR, OJ EU L 119 of 04.05.2016);
- Act of 10 May 2018 on the Protection of Personal Data (Journal of Laws of 2019, item 1781);
- Act of 18 July 2002 on Providing Services by Electronic Means (Journal of Laws of 2020, item 344, as amended);
- Act of 12 July 2024 – Electronic Communications Law (Journal of Laws of 2024, item 1222).
Cookie Policy, Local Storage (localStorage) and Image Rights Protection
🍪 Cookies and Browser Local Storage
Our website does not use third-party tracking, advertising, or profiling cookies (such as Google Analytics, Meta Pixel or TikTok Pixel). We take utmost care of our visitors' privacy.
The website uses exclusively a secure, technical mechanism of the browser local storage (localStorage) for the following purposes:
-
llamerada_cart_v2– remembering customer shopping cart contents (added products, quantities) during order placement for handicrafts; -
llamerada_rodo_accepted_v1– remembering the confirmation of reading GDPR/Cookies information and closing the bottom information bar.
Cached data localStorage remain exclusively on your device and are not transmitted to external servers. You can delete them at any time in your web browser settings.
📸 Protection of the Likeness of Children and Workshop Participants
As a foundation providing animal-assisted therapy (alpaca therapy), horticultural therapy, and educational activities for kindergartens, schools, and special educational centers (SOSW), we attach the highest priority to protecting the privacy and personal rights of participants.
All photographs from workshops published on the Foundation's website or social media are subject to strict rules: they are published solely with the prior written consent of parents or legal guardians, or are subject to digital facial anonymization (blurring/cropping), so as to eliminate the possibility of direct identification of the wards.