THE PRIVACY POLICY OF THE WEBSITE http://bilety.bajkapanakleksa.pl/

I.               General information

1. This Privacy Policy sets out the principles for the processing and protection of Personal Data and Cookies of you as a User of the service available at the Internet address: http://bilety.bajkapanakleksa.pl/ (Service).
2. The Data Administrator ensures that the data are stored in accordance with applicable law and are not made available or sold to third parties.
3. The Data Controller has no intention to transfer your personal data to a third country or international organisation.

1. The controller of your personal data is Bajka Pana Kleksa Sp z o.o. with its registered office in Katowice, ul. Porcelanowa 23, 40-246 Katowice, entered in the Register of Entrepreneurs, also entered in the register of associations, other social and professional organisations, foundations and independent public health care centres of the National Court Register, kept by the District Court in Katowice, IX Economic Division of the National Court Register under KRS number: 0000752524, REGON: 381772256, NIP: 9542798743 - hereinafter referred to as "Administrator" or "Administrator of Data".

 

The Privacy Policy is aimed, among other things, at defining the activities that are carried out by the Administrator in the field of Personal Data in relation to the processing of your personal data, including their collection using the functionalities of the Website and the provision of electronic services such as: the use of the contact form service.

 

1. Purpose, scope and legal basis of the processing of your Personal Data:

 

1. Your Personal Data as a user of the Website is (or will be) collected through the use of the following functionalities:
1. Purchasing a ticket through the website tickets.bajkapanakleksa.pl;
2. Creating an account on the website tickets.bajkapanakleksa.pl.
2. In addition, the Administrator is entitled to automatically obtain and record data transmitted to the server by web browsers or Users' devices, e.g.: IP address, software, hardware parameters, pages viewed, mobile device identification number, as well as other data that relates to the devices and use of the system.
3. The Administrator processes your Personal Data necessary for the proper implementation of the services available on the Website and is entitled to use the data collected and stored within the Website for the following purposes:
1. contact
2. handling complaints,
3. implementation of direct marketing after your consent to such actions,
4. monitoring the activity on the Website of all and specific Users,
5. contacting Users, in particular for the purposes of providing services, User support and marketing and advertising activities to which you have given your separate consent,
6. to carry out analysis of User activity on the Website, including profiling, i.e. automated processing of Personal Data ( without influencing its decision ),
7. carrying out analysis and research of available services in order to improve their performance,
8. accounting and taxation,
9. the possible establishment, investigation or defence against your claims,
10. to conclude and perform Contracts.
4. The Administrator declares that providing the data indicated in paragraph 4, above, marked as required, is voluntary, but necessary to proceed.

 

• Transfer of personal data to other entities

1. Your personal data may be disclosed to other entities in the event that you voluntarily consent to disclose such data to entities you indicate in your declaration or in the event of an obligation to disclose personal data under generally applicable laws to entities entitled to receive such data, in particular: to the general postal operator, investigation authorities, courts.
2. Your Personal Data may also be disclosed to the Administrator's partners, such as:
1. entities that support the Administrator's Service from a technical and programming point of view,
2. entities which support the Administrator in communication with the User by means of electronic communication,
3. service providers of IT systems, law firms, consulting and auditing companies.
3. Your personal data will be disclosed to other entities always respecting the security of your personal data imposing on these entities the obligation to keep the data confidential. The Administrator will only select entities to provide services to him/her that offer due guarantees of fulfilling the requirements under the RODO.
4. Your personal data will be processed for the purpose of sending commercial information by electronic means, including the provision of the Newsletter service only if you have given your voluntary consent. Provision of your data is voluntary, however, in order for the administrator to provide the service it is necessary for you to provide your e-mail address when purchasing a ticket available at http://bilety.bajkapanakleksa.pl/kontakt.
5. The Newsletter will provide you with information about current offers, promotions, news and other special actions organised by the Data Administrator.
6. In order to unsubscribe from the Newsletter, please send an e-mail e.g. by writing to the e-mail address:

IV.           Newsletter and other commercial information

bilety@bajkapanakleksa.pl

V.             Legal basis of personal data processing

Your personal data processed for the purposes related to the performance of the contract for the provision of electronic services will be processed on the basis of Article 6(1)(b) RODO. At the same time, the Data Controller will have the right to process your necessary data to establish, shape the content, change or terminate the legal relationship established between you and the Data Controller on the basis of Article 6(1)(f) RODO in connection with Article 18 of the Act on the provision of services by electronic means (Journal of Laws of 2017, item 1219, of 2018, item 650.). The processing of your data for the marketing of the controller's own products and services will be carried out pursuant to Article 6(1)(a) and (f) RODO. The processing of your personal data for the purpose of possible establishment, investigation or defence against claims being the exercise of our legitimate interest will take place on the basis of Article 6(1)(f) RODO. Furthermore, it should be mentioned that the processing of your data for the purpose of sending you information about the Administrator's products and services will take place on the basis of: article 6(1)(a) RODO. The processing of your data for accounting and tax purposes will be carried out on the basis of Article 6(1)(C) of the RODO.

 

1. Period of processing of your personal data

 

Your Personal Data will be stored for the period necessary for the conclusion and performance of the Contract, after which the data will be stored for the period relevant to the statute of limitations for claims and criminal acts (the statute of limitations for claims in business relations is generally 3 years, while for contracts concluded with consumers, with the exception of periodic claims, the period is 6 years). The processing of data for accounting and taxation purposes will, as a rule, take place for a period of not less than 5 years, with specific periods defined by law, e.g. tax legislation. In addition, your personal data processed on the basis of your freely given consent will be processed until you withdraw your consent. Personal data processed on the basis of a legitimate interest of the controller will be processed until you lodge a potential objection to the processing of your personal data for such purposes, however, there may be certain situations when, despite your objection, the controller will be able to continue to process your personal data e.g. Investigation of claims.

 

• Address for correspondence

If you would like to find out more about issues related to the protection of personal data, amend any of your declarations or exercise your rights as indicated above, please address your correspondence to the Administrator's registered office or by e-mail to bilety@bajkapanakleksa.pl. If you address the aforementioned correspondence to the Administrator, the Administrator will respond to you within 30 days in accordance with the applicable legislation. Due to the complicated nature of the request or the number of requests you provide us with, the response period may be extended to 90 days, in which case we shall inform you of such extension within one month.

VIII.       Security of personal data

1. The Administrator shall apply technical and organisational measures to ensure the protection of the processed Personal Data appropriate to the risks and the category of Personal Data under protection, and in particular to protect data against their disclosure to unauthorised persons, against their being taken by an unauthorised person, against their being processed in breach of the applicable regulations, and against their alteration, loss, damage or destruction.
2. Your rights in relation to the processing of your data by the controller You have the right to request from the controller access to your personal data, rectification, erasure when they are excessive or untrue, restriction of processing, the right to object to further processing on grounds related to your particular situation, or when they are processed for marketing purposes, including profiling, to the extent that the processing is related to such direct marketing.
3. You have the right to withdraw any consent you have given for the processing of your data, including the sharing of your data, at any time without affecting the lawfulness of the processing carried out on the basis of your consent before its withdrawal.
4. You have the right to lodge a complaint with a supervisory authority in relation to the processing of your personal data.

IX.           Your rights

 

1. The rights you have in relation to the processing of your data by the controller You have the right to request from the controller access to your personal data, rectification, erasure when they are excessive or untrue, restriction of processing, the right to object to further processing on grounds related to your particular situation, or when they are processed for marketing purposes, including profiling, to the extent that the processing is related to such direct marketing.
2. You have the right to withdraw any consent you have given for the processing of your data, including the sharing of your data, at any time without affecting the lawfulness of the processing carried out on the basis of your consent before its withdrawal.
3. You have the right to lodge a complaint with a supervisory authority in relation to the processing of your personal data.