Preamble
Safety Brake Association (hereinafter: SHB.) respects and protects the privacy and security of its Users. The privacy policy applies to the data provided by Users through the Animafest Gdańsk website with the address www.animafest.pl (hereinafter: Website). Through the Website, data provided directly by the User, as well as collected automatically (through cookies), are processed. The primary purpose of data processing is to ensure the functionality of the websites and to enable purchases through them. However, data may also be processed for marketing and statistical purposes.
§1 Definitions
(1) The definitions adopted in the Terms and Conditions of Ticket Sales shall apply. subject to paragraph 2. (2) In addition, whenever the following is mentioned:
- Privacy Policy - it shall be understood to mean this document;
- RODO - it shall be understood to mean Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation);
- Data Controller - shall mean a natural or legal person, public authority, entity or other entity which alone or jointly with others determines the purposes and means of the processing of personal data, which in the case of data processed by the website is Stowarzyszenie Hamulec Bezpieczeństwa (Security Brake Association) with its registered office in Sopot, 11 Langiewicza Street, code 81-737, Poland, entered in the register of associations, other social and professional organizations, foundations and independent public health care facilities under the KRS number 0000371531, NIP: 5851457877, REGON: 22113197500000;
- cookies - it should be understood as small size files stored on the User's final device (e.g. computer, smartphone, tablet), in which settings and information used on the websites visited by the User are stored. These files contain an identifier. Depending on the type, they are either deleted at the end of the session or stored for a longer period of time on the device's disk.
§2 Cookies
(1) The Site automatically collects information contained in cookies. No other information is automatically collected through the Site.
2. The entity placing cookies on the final device of the Site User is the Data Administrator.
3. the Site uses the following types of cookies, for example:
a. cookies that enable the use of services available on the Site, for example: authentication cookies used for services that require authentication on the Site,
b. "performance" cookies, enabling the collection of information about the use of the Site,
c. "necessary" cookies, enabling the use of services available on the Site, e.g. authentication cookies used for services that require authentication on the Site;
d. "functional" cookies, enabling "remembering" the User's selected settings and personalizing the User's interface, e.g. with respect to the User's selected language or region of origin, font size, website design, etc.;
e. "advertising" cookies, allowing to provide Users with advertising content more tailored to their interests
4. cookies are used in order to (for example):
a. properly adjust the Site to the needs of Users;
b. remember the preferences and individual settings of Users;
c. create viewing statistics for the Site.
5. The Data Administrator informs that the use of cookies by the Site on the User's final device depends on the configuration of the Internet browser used. The User has the right to disable the Website's use of cookies at any time by changing the settings of his/her Internet browser.
6. Using the Website without changing the settings of your Internet browser means that you consent to the use of cookies, subject to §3.
7. The Data Administrator informs that disabling the Website's use of cookies may restrict access to certain functions of the Website.
§3 Cookies for personalization and analytics, geolocation
(1) In addition to the cookies necessary to ensure the proper functioning of the Site (e.g. to eliminate the need to log in to an account each time, or to enter the same data when switching between different tabs of the Site), the Site uses cookies that are used to better adapt the advertisements presented and content served to the User's preferences and interests, as well as to research and analyze interest in the Data Controller's own content, pages, products.
(2) Cookies for personalization and analysis are used only after the User has explicitly consented to it on his/her first visit to the Site.
(3) In addition, the Data Administrator, with the User's prior consent, uses a tool that allows geolocation of the User.
§4 Processing of other personal data
The Site also collects and processes data made available to the Data Administrator directly by the User himself by means of completed forms:
a. when registering a User Account;
b. when purchasing tickets;
c. when signing up for a newsletter.
§5 Protection of personal data
1 The Data Controller shall apply appropriate organizational and technical measures and privacy policies to ensure the protection of personal data in accordance with the provisions of the RODO and national laws.
2. Personal data collected through the Site shall be processed only by persons authorized by the Data Controller to process them. In addition, personal data may be entrusted for processing to third parties providing accounting and bookkeeping services to the Data Controller, money transfers, providing functionality and hosting of the Site, providing analytical and advertising services, and providing courier and postal services.
§6 Scope and period of personal data processed
1. personal data of Users obtained by the Site will be processed:
a. with their consent - the legal basis for processing is Article 6(1) lit. a RODO - in this regard, the following data are processed:
- for the purpose of profiling, consisting of adjusting the presented advertisements, pages and content to the User's preferences, as well as analyzing the interest in the content, pages, products;
- for the purpose of geolocation of the User;
- for the purpose of providing the User from the Data Administrator with commercial and marketing information (newsletter) by means of electronic communication (e-mail);
b. for the purpose of taking action at the request of the data subject prior to entering into an agreement - the legal basis for processing is Art. 6(1)(b) RODO;
c. for the purpose of performing an agreement entered into via the Site (primarily maintaining the User Account; providing tickets, handling complaints) - the legal basis for processing is Art. 6(1)(b) RODO;
d. in order to fulfill a legal obligation incumbent on the Data Controller - the legal basis for processing is Article 6(1)(c) RODO;
e. if it is necessary for purposes arising from legitimate interests pursued by the Data Controller or by a third party - the legal basis for processing is Article 6(1)(f) RODO - the purpose arising from legitimate interests pursued by the Data Controller or by a third party is to prevent the violation of the rights of these entities, e.g..: instituting proceedings against a User committing an offense or a crime to the detriment of the Data Controller or a third party, or causing damage or harm to these entities (for example: ticket speculation, obtaining unauthorized access to the Accounts of other Users, etc.).);
2. The period of processing of Users' personal data is:
a. in the case of data processed on the basis of consent - until the date of withdrawal of consent and a maximum of 7 working days thereafter, due to the necessity of performing technical actions to delete such data;
b. in the case of data processed on the basis of the data subject's request prior to the conclusion of a contract - until the User's request is fulfilled or the grounds for fulfilling the request cease to exist;
c. in the case of data processed for the performance of the contract - for the entire period of performance of the contract and until the statute of limitations for claims arising from the contract; the obligations performed under the contract concluded through the Site are primarily:
- maintenance of the User Account;
- delivery of purchased tickets;
d. in the case of data processed for the purpose of fulfilling a legal obligation incumbent on the Data Controller - until the legal obligation incumbent on the Data Controller is fulfilled or ceases;
e. in the case of data processed for the purposes of legitimate interests pursued by the Data Controller or by a third party - until the termination of proceedings against the User violating the rights of the Data Controller, the organizer of the event or another User of the Site, if such proceedings have been initiated during the period of processing of the User's data on another basis;
- while Users' data will be processed for no less than 5 years if it is necessary for the Data Controller to keep accounting records, tax books and related documents, and this period will be calculated in accordance with the provisions of the Accounting Act and the Tax Ordinance.
3. Consent for the processing of personal data is voluntary. Consent to the processing of personal data may be withdrawn at any time. However, withdrawal of consent does not affect the lawfulness of processing, which was carried out on the basis of the User's consent before its withdrawal.
4. Provision of personal data is voluntary, however:
a. providing personal data in order to fulfill the request of the data subject before entering into a contract;
b. or in order to perform the contract is a requirement for entering into a contract or a contractual requirement, respectively, and is necessary to enter into or perform the contract, and refusal to provide personal data prevents the above.
5. The User shall have the right at any time to request from the Data Controller access to the collected data, rectification and deletion, and restriction of processing. The User may at any time object to the Data Controller's processing of personal data concerning him/her for the purposes of direct marketing, including profiling, to the extent that the processing is related to such direct marketing.
6. The User, whose data are processed by automated means and on the basis of consent or a concluded contract, has the right to data portability. This means that he/she has the right to receive in a structured, commonly used machine-readable format the personal data concerning him/her that he/she has provided to the Data Controller, and has the right to send this personal data to another controller without hindrance from the Data Controller. In exercising the right to data portability, the User has the right to request that the personal data be sent by the Data Controller directly to another controller, if technically possible.
7. The User has the right to lodge a complaint with a supervisory authority if he/she believes that his/her personal data is being processed by the Data Controller in violation of the law.
8. The processing of personal data uses an automated decision-making procedure to the following extent:
a. with respect to Users who have consented to the use of cookies for the purpose of personalizing content, advertising and performing analysis through automated research
interest in the proposed sites and presented content, the anticipated consequence of which is a more accurate matching of the presented advertisements and served content to the User's preferences and interests;
b. with respect to Users making purchases via the Site, by automatically verifying the completeness of personal data filled in by the User, required for the sale of the ticket to the User, the anticipated consequence of which is the automatic delivery of the ticket to the User via electronic means of communication, if such a method of delivery has been selected by the User;
c. with respect to Users who have consented to geolocation, by automatically linking the User's geographic location to services or goods offered by advertisers or event organizers, the anticipated consequence of which is to match the advertisements presented and content served to the User's location.
§7 References to other sites
The Site may contain links that redirect the User to another website. The Data Administrator tries to make sure that the links on the Site do not direct to addresses that pose a danger to the User. In most cases, these will be references to the websites of the User's business partners or advertisers. Nevertheless, the Data Administrator does not oblige or expect the User to visit these websites and is not responsible for the content posted under them, the means of protecting these links and the rules of processing personal and usage data by the entities running these websites.
§8 Final provisions
1.The Site is intended for adults only. Persons under the age of eighteen may use the Site only with the knowledge and consent of their legal representatives. Minors should not independently share any personal information with the Data Administrator through the Site. Minors are not allowed to purchase tickets through the Site.
2. The fastest channel to contact the Data Controller on matters concerning privacy and protection of Users' personal data is to direct a message to the following e-mail address: info@shb.org.pl
3. The Data Controller reserves the right to amend this Privacy Policy by publishing the new content of the document on the Site.