Privacy Policy

Last update: 28-09-2025

1. Introduction

This Privacy Policy sets out the rules for processing and protecting personal data provided by users in connection with the use of the website swiatlodzwieki.art.

2. Data Controller

The Data Controller of personal data is the Our [Pl]ace Foundation for the Support of Culture, based in Poznań, registered under KRS number: 0000578750, which operates the website swiatlodzwieki.art.
The Data Controller can be contacted via email: festiwal@swiatlodzwieki.art.

3. Purpose of Data Processing

Personal data of users, such as name, surname, email address, phone number, residential address, and payment-related data, are collected solely for the following purposes:

• enabling the purchase of tickets for the festival and handling reservations and payments,
• fulfilling legal obligations (e.g., accounting and tax obligations),
• contacting participants in connection with the organization of the event,
• sending newsletters with information about the festival and related events – if the user has provided separate consent.

4. Legal Basis for Processing

The legal basis for processing users’ personal data is:

• necessity for the performance of a contract (Art. 6(1)(b) GDPR) – in the case of ticket purchases,
• legal obligations of the Controller (Art. 6(1)(c) GDPR) – in the case of storing accounting documents,
• user’s consent (Art. 6(1)(a) GDPR) – in the case of subscribing to the newsletter.

The user has the right to withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

5. Data Recipients

Users’ personal data may only be shared with entities cooperating with the Foundation in the scope of:

• payment processing,
• technical support of the website,
• fulfilling legal obligations (e.g., accounting office).

These entities process data exclusively on the basis of a data processing agreement and in compliance with applicable law. Data will not be sold or disclosed to third parties for marketing purposes.

6. Data Retention Period

Personal data will be stored for as long as necessary to achieve the purposes for which they were collected, in particular:

• data related to ticket purchases – for the duration of the event and the period required by law (e.g., 5 years for accounting documents),
• data processed based on consent (e.g., newsletter) – until the user withdraws consent.

7. Rights of the Data Subject

Every user has the right to:

• access their data,
• rectify their data,
• erase their data,
• restrict processing,
• data portability,
• object to the processing of their personal data,
• lodge a complaint with the supervisory authority (President of the Personal Data Protection Office in Poland).

8. Changes to the Privacy Policy

This Privacy Policy may be updated from time to time. The latest version will always be available on the website. Any changes to the Policy will be communicated to users in an appropriate manner.