1. Data Controller
   The data controller is the UNITY LEGAL COLLABORATION HUB FOUNDATION, with its registered office in Kraków (31-010), Rynek Główny 28, hereinafter referred to as the “Foundation.”
   The Foundation processes personal data in accordance with applicable law, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
   
   

2. Purposes and Legal Bases of Personal Data Processing
   The Foundation collects and processes personal data for the following purposes:

• providing services offered by the Foundation and fulfilling concluded agreements,

• complying with legal obligations, in particular in the areas of taxation and accounting,

• handling complaints and pursuing or defending mutual claims,

• conducting recruitment and employment processes.
  
  

3. Rights of Data Subjects
   Individuals whose data is processed by the Foundation have the following rights:

• Right to information – to obtain detailed information on data processing,

• Right of access – to obtain a copy of personal data,

• Right to rectification – to request correction of inaccurate data or completion of incomplete data,

• Right to erasure – to request deletion of data in cases provided by law,

• Right to restriction of processing – to request limitation of processing operations in certain situations,

• Right to object – including objection to the processing of data for marketing purposes.

To exercise these rights, contact the Foundation in writing at its registered office or electronically.

4. Data Retention Period
   Personal data is retained for the period necessary to achieve the purposes for which it was collected, namely:

• until the completion of the agreement or service,

• for the period required by law (e.g., for storing tax and accounting documentation),

• until the limitation period for claims arising from the agreement expires.
  
  

5. Transfer of Personal Data to Other Entities
   Recipients of personal data may include entities providing services supporting the Foundation’s activities, in particular:

• entities providing management, accounting, marketing, and legal services,

• IT systems and hosting providers,

• entities authorized under applicable law (e.g., tax authorities).

Personal data is not transferred to third countries or international organizations unless required by separate agreements or with the consent of the data subject.