Privacy Policy

Effective date: 28.05.2025

1. Data Controller

WHALETONE Foundation
590 Kingston Road
London SW20 8DN
United Kingdom
Email: dpo@whaletonefoundation.org

If you are located in the European Union, our designated EU representative under Article 27 of the GDPR is:
Whaletone Production Sp. z o.o.
ul. Koszykowa 10/5
00-564 Warsaw
Poland
Email: dpo.ue@whaletone.com

2. Purpose of Data Processing 

We collect your first name and email address when you subscribe to receive communications from WHALETONE Foundation. Your personal data is used exclusively to:

  • Inform you about events, news, and initiatives organized or supported by WHALETONE Foundation.

The legal basis for processing your personal data is your explicit consent under Article 6(1)(a) of the UK GDPR and, where applicable, the EU GDPR.

3. Data Sharing

We may share your personal data with trusted third-party service providers who help us manage communications, host the website, and distribute newsletters. These providers process your data strictly under our instructions and in line with data protection agreements.

Specifically, we may share data with:

  • Google LLC (United States)
    Used for website analytics (Google Analytics). Data may be processed outside the UK/EEA, subject to Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework.
  • Microsoft Corporation (United States)
    Used for business communications and email services (e.g., Outlook, Office 365). Microsoft processes data under SCCs and the Data Privacy Framework.

4. Data Retention

Your personal data will be stored for as long as you are subscribed to our communications or until you withdraw your consent.

5. Your Rights

You have the right to:

  • Access, correct, or delete your personal data,
  • Restrict or object to processing,
  • Withdraw your consent at any time,
  • Lodge a complaint with a supervisory authority:
    • UK: Information Commissioner’s Office – https://ico.org.uk/
    • EU: Your national Data Protection Authority (e.g., UODO in Poland, CNIL in France)

6. Contact

For privacy-related inquiries: dpo@whaletonefoundation.org
General inquiries: contact@whaletonefoundation.org

7. Cookies & Tracking

Our website uses cookies, including third-party cookies (e.g., Google Analytics), for analytics and performance optimization. Your consent is obtained via our cookie banner. You can change your preferences at any time.

8. Legal Basis (Global Compliance)

We rely on your consent under UK GDPR and EU GDPR. We also aim to respect local data protection laws for users outside the UK and EU, applying high standards of privacy and security.