GENERAL INFORMATION
This document defines the rules of the Privacy Policy as part of the Internet platform being a tool enabling participation in Online Events, provided by the Service Provider (hereinafter: “Platform”, “Internet Platform”). The administrator of personal data (hereinafter also referred to as: “Administrator”) is Blu Experience sp. z o.o. with its registed office in Kraków, at ul. Długa 74/7, 31-146 Kraków, entered into the Register of Entrepreneurs of the National Court Register by the District Court for Kraków – Śródmieście in Kraków, 11th Commercial Division of the National Court Register under the number 0000495773, NIP: 9452177517, REGON: 123030655, with a share capital of PLN 50,000.00.
Personal data collected by the Administrator are processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27/04/2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (general regulation on data protection) (Official Journal EU L 119, p. 1), hereinafter referred to as: “GDPR”.
The words used with a capital letter have the meaning given to them in the regulations of the Platform.
The administrator makes special efforts to protect the privacy and information provided to him. The administrator selects and applies appropriate technical measures, including those of a programming and organizational nature, to ensure the protection of the processed data with due diligence, in particular, protects the data against unauthorized disclosure, disclosure, loss and destruction, unauthorized modification, as well as against their processing in violation of applicable law.
The addressees of the Platform Services are not persons under 16 years of age. The personal data administrator does not provide for the purposeful collection of data regarding persons under 16 years of age.
The Platform may use the so-called. plug-ins and other social tools, including, in particular, enabling the User to share content with other users of these websites or to recommend them as part of an account with the provider of a given portal. The providers of these services may also process personal data as independent administrators. In this case, the Administrator and the plug-in provider are joint controllers of personal data.
PERSONAL DATA
Personal data administrator – you can contact the personal data administrator by:
registered letter sent to the postal address: ul. Długa 74/7, 31-146 Kraków;
e-mail to the following address: kontakt@wydarzeniaonline.pl
interactive chat available on the Platform.
OBJECTIVES AND BASIS FOR PROCESSING PERSONAL DATA
The personal data administrator processes your personal data for the following purposes and scope:
For full clarity of our activities, once again, we would like to point out in particular that the Administrator may use personal data to prepare and present you personalized advertisements, including the use of third-party tools and cookies, which is more fully indicated in the Cookie Policy
in order to contact the User – if you contact us via an interactive chat available on the Platform – for this purpose we may process your personal data provided as part of the chat form, device session data, operating system, browser, location and unique ID, IP address;
in order to establish, pursue and enforce claims and defend against claims in court proceedings and other enforcement authorities – for this purpose, we may process your personal data necessary to prove the existence of a claim or which result from a legal requirement, court order or other legal procedure;
marketing of our services and goods and services of our partners, including remarketing – for this purpose, we process data that is registered and stored via “cookies”, in particular search history, clicks on the Platform, login dates, history and your activity related to our communication. In the case of remarketing, we use data about your activity to reach you with our marketing messages, including personalized advertisements outside the Platform, and we use the services of external suppliers for this purpose. These services consist in displaying our messages on websites other than the Platform. Details on this subject can be found in the provisions regarding “cookies” in the Cookie Policy;
consideration of complaints, complaints and requests, and answers to Users’ questions – for this purpose, we process the personal data provided by you in the contact form, complaints, complaints and requests, and questions contained in a different form. For this purpose, we also process other personal data provided by you, including data contained in documents attached to complaints, complaints and requests;
PERSONALIZED ADVERTISING AND SOCIAL PLUGINS
Due to the use of the so-called social plug-ins, including those enabling the User to share content or their recommendations with other users of these websites as part of their account with the provider of a given portal, the providers of these websites may also process your personal data as independent administrators. When you visit the Platform, the browser you use may make a direct connection to the servers of entities providing these plug-ins/tools, thanks to which these entities receive information about your use of the Platform and, among others, your IP address. Such information can be sent regardless of whether you have an account on the website of such an entity and whether you are currently logged in to it. If you have an account with such an entity and are logged in to it, additionally, this information may be associated and assigned to your account on the social networking site. Certain content may also be published as part of your profile on social networking sites and visible to other users of such portals, including in particular those with whom you establish relationships.
If you do not want the providers of plug-ins/tools/social networking sites to assign your data collected when entering the Platform to your profile with a given provider, then before entering the Platform, make sure to log out of this social networking site. Remember that you can also prevent plug-ins from being loaded on the website using appropriate mechanisms within the browser you use – in accordance with its settings.
The administrator tries to exercise due diligence in order to select only software, including the above-mentioned plug-ins, from reputable entities that broadly define their personal data protection rules.
The purposes, scope and rules for the collection and further processing of personal data by these entities can be found in their privacy rules. We encourage you to familiarize yourself with them, you will find them, e.g. at the following addresses:
http://www.facebook.com/policy.php;
https://policies.google.com/privacy;
CATEGORIES OF RELATED PERSONAL DATA
The personal data controller processes the following categories of relevant personal data:
contact details;
data on complaints and requests;
marketing data.
VOLUNTARY PROVISION OF PERSONAL DATA
Providing the required personal data by you is voluntary and is a condition for the provision of the Services.
DATA PROCESSING TIME
Personal data will be processed by us as the Administrator for the period necessary to carry out marketing activities and other services performed for the User. Personal data will be deleted in the following cases:
when the data subject asks for their erasure or withdraws their consent;
when the data subject does not take action for more than 10 years (inactive contact);
after being informed that the stored data is outdated or inaccurate.
Some data in the field of: e-mail address, name and surname, address may be stored for the next 3 years for evidence purposes, consideration of complaints, complaints and claims related to the Platform. This data will not be used for marketing purposes.
We store data on Users who are not logged in for a period of time corresponding to the life cycle of “cookies” saved on devices or until they are deleted on the User’s device by the User.
Your personal data regarding preferences, behaviors and selection of marketing content may be used as a basis for making automated decisions to determine sales opportunities.
RECIPIENTS OF PERSONAL DATA
We transfer your personal data to the following categories of recipients:
state authorities, e.g. the prosecutor’s office, the Police, the Office for Personal Data Protection, if they request it;
service providers with whom we cooperate by providing the infrastructure of the Platform. The list of suppliers can be found under the link:
Personal data may also be transferred to other entities – suppliers of tools whose cookies we use. Information about these entities and the purposes of using cookies can be found in the Cookie Policy.
Our suppliers are mainly based in the countries of the European Economic Area (EEA), but also outside the EEA. Your personal data transferred outside the EEA will be secured with appropriate legal safeguards so that our suppliers guarantee a high level of personal data protection. These guarantees result in particular from the obligation to use standard contractual clauses adopted by the Commission (EU) or participation in the Privacy Shield program established by Commission Implementing Decision (EU) 2016/1250 of July 12, 2016 on the adequacy of protection provided by the Shield EU-US Privacy Policy.
RIGHTS OF THE PERSON WHOSE PERSONAL DATA WE PROCESS
Based on the GDPR, you have the right to:
submitting a request to limit the processing of personal data (Article 18 of the GDPR) – you can request it when:
you question the correctness of your personal data – the personal data administrator will limit the processing of your personal data for a period of time that allows you to check the correctness of this data;
when the processing of your data is unlawful, and instead of deleting your personal data you request restriction of the processing of your personal data;
your personal data are no longer needed for the purposes of processing, but they are needed to establish, pursue or defend your claims;
when you have objected to the processing of your personal data – until it is determined whether the legitimate interests of the personal data Administrator override the grounds indicated in your objection.
objection to the processing of personal data (Article 21 of the GDPR) – you can object at any time to the processing of your personal data, including profiling, in connection with:
processing necessary to perform a task carried out in the public interest or processing necessary for purposes arising from legitimate interests pursued by the Administrator or a third party;
processing for direct marketing purposes.
request the transfer of personal data (Article 20 of the GDPR) – you have the right to receive your personal data from the Administrator in a structured, commonly used machine-readable format and send it to another personal data administrator or request that the Administrator send your personal data directly to another administrator (if technically possible).
withdraw consent to the processing of personal data – you can do it at any time. This does not affect the lawfulness of processing based on your consent before its withdrawal.
complaints to the supervisory authority – if you believe that the processing of your personal data violates the GDPR, you have the right to submit a complaint to the supervisory authority, in particular in the Member State of your habitual residence, place of work or place of alleged infringement.
You can exercise all your rights by contacting the Administrator at the contact addresses indicated in this document. The administrator without undue delay – and in any case within one month of receiving the request – will provide you with information about the actions taken in connection with your request. If necessary, the one-month period may be extended by another two months due to the complexity of the request or the number of requests. In any case, the Administrator will inform you about such an extension within one month of receiving the request, stating the reasons for the delay.
access to personal data (Article 15 of the GDPR) – you can obtain information from the Administrator whether your data is processed and if it is processed, you have the right to:
data access;
obtain information about the purposes of processing, categories of processed personal data, recipients or categories of recipients of this data, the planned period of storing your data or the criteria for determining this period, about your rights under the GDPR and the right to lodge a complaint with the supervisory authority, about the source of these data, about automated decision-making, including profiling, and about the safeguards applied in connection with the transfer of such data outside the European Union;
obtain a copy of your personal data.
rectification of personal data (Article 16 of the GDPR) – if your personal data is incorrect, you can request the Administrator to correct it immediately. You can also request the Administrator to supplement this data.
deletion of personal data, the so-called “right to be forgotten” (Article 17 of the GDPR) – you can request it when:
your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
you have withdrawn a specific consent to the extent that personal data was processed based on your consent;
your personal data has been processed unlawfully;
you have objected to the processing of your personal data for the purposes of direct marketing, including profiling, to the extent that the processing of personal data is related to direct marketing;
you have objected to the processing of your personal data in connection with the processing necessary to perform a task carried out in the public interest or processing necessary for purposes arising from legitimate interests pursued by the Administrator or a third party.
Despite submitting a request to delete personal data, the Administrator may process your data further in order to establish, pursue or defend claims, about which you will be informed.