DATA CONTROLLER
Who are we and how can you contact us?
The Krakow Festival Office (hereinafter referred to as KBF or the Office) with its registered address at ul. Wygrana 2, 30-311 Kraków, is a municipal cultural institution entered in the register of cultural institutions kept by the Municipality of Krakow under No. 19. Detailed information about our institution is published via Public Information Bulletin of the City of Krakow https://www.bip.krakow.pl/?bip_id=475.
As a general rule, KBF is the controller of the personal data we process. Third parties may incidentally entrust us with the processing of personal data – in such case, we act at the request of the third party data controller.
You can contact us:
- by post – address: ul. Wygrana 2, 30-311 Kraków
- by phone – +48 12 354 25 00
- by e-mail – poczta@kbf.krakow.pl
WHAT THIS TEXT IS ABOUT
What important things do we want to communicate to you?
Fulfilling the legal obligation of transparency in the processing of personal data and respecting the right of people visiting our website to privacy, we present in this document: a privacy policy dedicated to www.miloszfestival.pl – the website we administer, in which we inform you, among others, about the rules for the processing of your data resulting from your visit to our website. You can find information about the cookie technology used on this website and the rules regarding links to other websites posted there in the Cookie Policy.
STANDARDS FOR THE PROCESSING OF PERSONAL DATA IN KBF
How do we process your personal data?
KBF makes every effort to process your personal data in a manner that complies with applicable law and also ensures the security of the data provided.
- We only process your personal data if we have an appropriate legal basis, and we are guided by fairness in the data processing process.
- We are committed to transparency in our processing of personal data – we keep you fully informed about all relevant aspects of the data processing process.
- When planning and starting the implementation of activities, we try to ensure in the first place that this does not involve the need to process personal data. We only process personal data if this is necessary for the performance of the activities we undertake – in such case, we treat respect for the rights and freedoms of the persons whose data we will process as a priority at the planning stage.
- We only process personal data for specifically identified legitimate purposes. If, after the collection of your data, they have to be processed for a different purpose than originally intended, we will start to process them only if we have an appropriate legal basis – you will be notified about this in detail in advance.
- We take care to collect and process as many personal data as necessary to fulfil the intended purpose, avoiding and refraining from the collection of redundant and inadequate data.
- When processing personal data on a continuous basis, we monitor risks to the security of data processing, which allows us to take measures and actions to prevent breaches of personal data security.
- We monitor our personal data resources on an ongoing basis and try to ensure that personal data are stored for no longer than necessary for the purposes for which they were collected.
- We also take other measures constituting a part of the comprehensive data security policy in KBF. For example:
– we have introduced a number of internal regulations requiring our employees to perform their duties in a way that minimises even accidental breaches of personal data protection;
– we continuously train our employees in data protection, thereby increasing their awareness and commitment to the protection of the personal data we collect and process;
– we use appropriate physical safeguards to protect the personal data we process in printed form;
– we use appropriate technical safeguards to protect the personal data we process electronically.
- We have appointed a Data Protection Officer, who provides professional expert support in the implementation of the data protection policy in KBF. You can contact the Data Protection Officer in all matters related to the processing of your personal data and the exercise of your rights in relation to data processing – by email to rodo@kbf.krakow.pl or by post to: ul. Wygrana 2, 30-311 Kraków.
PURPOSES OF PERSONAL DATA PROCESSING
For what purpose have we collected or obtained your personal data and how do we process them?
Below you will find typical examples of personal data processing in KBF, with the indication of the purposes and legal basis we have specified. In our multidimensional cultural activities, different circumstances arise. And so:
- If you have opted in to receive a newsletter from us – we will process your personal data in the form of your e-mail address to keep you informed about our activities. The legal basis will be your voluntary consent to the processing of your personal data (Article 6(1)(a) of GDPR).
- If we correspond with you (by email or letter), we process your personal data necessary for sending correspondence to you or otherwise disclosed in the content of the correspondence for the following purposes:
– to provide you with a reply if we are legally required to do so (the necessity of processing your data for the fulfilment of a legal obligation will constitute a ground for the processing of personal data – Article 6(1)(c) of GDPR);
– to provide you with a reply or contact you in connection with the statutory tasks of the Office as a municipal cultural institution (the necessity of processing your data for the above tasks carried out in the public interest will constitute the basis for the processing of personal data – Article 6(1)(e) of GDPR);
– to provide you with a reply or contact you in connection with the organisation of our day-to-day activities that are not the direct implementation of our statutory tasks (the necessity of ensuring the proper organisation of the Office’s day-to-day activities will constitute the legitimate interest of the Office, being the basis for personal data processing – Article 6(1)(f) of GDPR);
– to contact you in other matters – only on the basis of the voluntary consent to personal data processing obtained from you (Article 6(1)(a) of GDPR).
RETENTION
How long do we store your personal data?
We process your personal data until the purpose for which they were collected is fulfilled. Thus, individual purposes determine the period for which we use your personal data:
- In the case of personal data that we process in order to keep you informed about our activities via newsletter service – the purpose will be fulfilled when we cease the dispatch of the newsletter (which means termination of the service).
- In the case of personal data that we process for the purpose of our correspondence with you – the purpose will be fulfilled as soon as we settle the matter, provide you with requested information or ascertain the necessary information.
However, please note that:
- Where the processing of your personal data is based on your consent (e.g., a newsletter) and you withdraw or revoke this consent, we will cease the further processing of your data even if the purpose of the processing has not been achieved. This will not affect the correctness of processing your data until you withdraw your consent.
- In the event that your personal data may be necessary for the investigation or defence of claims, once the purpose for which they were collected has been fulfilled, we will continue to process them until the expiry of the limitation period, but they may only be used for the investigation or defence of claims.
As a municipal cultural institution, KBF is legally obliged to archive some of the documentation produced in the course of its activities. If your personal data is included in the documentation that we are obliged to archive, we will transfer them along with this documentation to an archive, where they will be kept for the period required by law.
DATA TRANSFER
Do we transfer your personal data anywhere?
We make every effort to minimise the need to transfer your personal data. In particular, we do not intend to transfer your data to entities from third countries within the meaning of GDPR – with the exception of information about your activities on our website, which you can read more about in the Cookie Policy, in the section on analytical and marketing cookies. Nevertheless, we have to inform you that we may transfer your personal data:
- to entities who will carry out the data processing process upon our order in part or as a whole. Such entities are carefully selected by us and are accountable for the activities entrusted to them – and they are responsible to us for the correctness and legality of the activities carried out upon our order. Apart from that, they may not process your personal data for their own purposes.
- They may be disclosed to third parties – only if this is due to a legal obligation on our part (e.g., disclosure to law enforcement agencies).
YOUR RIGHTS
What are your rights related to our processing of your personal data?
Remember that you have the right to:
- Access the content of your personal data, i.e., the right to be informed whether we process your personal data and to be informed of such processing.
- Correct and rectify your personal data if the data are incomplete, incorrect or out of date.
- Revoke at any time the consent previously given for the processing of personal data – contact us for this purpose.
- Request the erasure of your personal data processed by us if the processing is unfounded and unlawful (e.g., the data is no longer necessary for the purposes for which they were collected).
- Object to the processing of your personal data and the right to restrict processing (this applies where the processing of your data is based on the grounds indicated in Article 6(1)(e-f) of GDPR) – in such a situation, upon the consideration of your request, we will no longer be able to process your personal data unless it is demonstrated that there are important legitimate grounds for processing that override your interests, rights and freedoms.
- If you believe that our processing of your personal data violates the applicable data protection laws and regulations, you have the right to lodge a complaint with the President of the Personal Data Protection Office (correspondence address: ul. Stawki 2, 00-193 Warszawa).
COOKIE POLICY
What are cookies?
Cookies are small text files saved by your browser and stored on your computer that automatically save technical information related to your visit to our website. Our website also uses technologies similar to cookies – whenever further reference is made to cookies, it is understood to mean all such technologies.
Some of the cookies serve as a source of functional information that we need to display our website correctly on your device. In addition to these, our website also uses cookies for statistical and marketing purposes – however, the use of these cookies is subject to your consent.
When you visit our website, you can choose whether to allow cookies to create and store information about this visit on your computer.
Regardless of your previous decision to allow cookies from our website, you can change your cookie settings yourself, specifying the conditions of their storage and access to your computer. In order to do this, you will need to change your browser settings.
If you want to find out how to change your browser settings, please use your browser’s help function or contact your software manufacturer for instructions on how to disable and delete cookies.
Restricting the use of cookies may affect some functionalities available on our website.
Information about the cookies used on www.miloszfestival.pl:
- _ga – cookie for Google Analytics
- _fbp _ga – cookie for Facebook
- pll_language – stores the language selection (Polylang)
What are scripts and a pixel tag?
We can use scripts and a pixel tag on our website. A script is a small program code responsible for the correct and interactive operation of our website. The script code can be executed on our server or on your device.
Our website can use a Web beacon (otherwise known as a pixel tag or piexel tag). These are small, invisible pieces of text or images on our website. They are functionally similar to cookies – they are used to monitor website traffic and, optionally, to personalise advertising. Data about you are stored using web beacons.
For what purpose do we use functional cookies?
The information processed on the website via cookies is collected in order to provide the service correctly. Cookies primarily recognise your device in order to display the website according to its preferences. Some of them are essential for your proper use of our website, while others affect the quality of the display of our website on your device.
We automatically collect information transferred to us by the browser you use. Each time a user logs in, we collect, in particular, the following information:
- date and time of access,
- information about the browser and operating system used,
- information about devices.
For what purpose do we use statistical cookies?
Statistical cookies are those cookies that aggregate and provide us with statistical information about users’ visits to our website. For statistical purposes, we use Google Analytics tools that operate, among others, on the basis of cookies from the manufacturers of the aforementioned tools.
What is Google Analytics?
Google Analytics is an online tool for analysing website statistics provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). We use cookies from the Google Analytics tool on our website in order to generate statistical data about the functioning of the website. This allows us, for example, to determine how often individual pages are visited, and we use the statistical information to optimise and develop our website and to tailor our offer to users’ needs. When using the above tool, we use the anonymisation of your IP address to ensure that the information collected is as anonymous as possible.
In addition to the aforementioned ways of deleting cookies, remember that you can delete your data from our Google Analytics database via the following tool https://tools.google.com/dlpage/gaoptout
Marketing cookies
Please be advised that we intend to use the Google Ads marketing tool provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and the Pixel marketing tool provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). Thanks to information about your visit to our site and dedicated cookies, these tools allow us to:
- verify the conversion and, in particular, to assess to what extent our advertisements appearing in Google search results, on third-party websites as well as on portals administered by Meta Platforms (Facebook, Instagram) caused you to visit our website;
- display personalised (i.e., based on your interests) advertisements about our products and services which we inform you about on our website, in the results of your searches and on third-party sites that are clients of Google and portals administered by Meta Platforms. Personalisation of our advertisements is done through profiling based on information stored through cookie technology.
The use of the above cookies is only possible if you have given us your consent. If you change your mind about the consent you have given us for such marketing activities, you can prevent further marketing tracking in a number of ways – for example, by changing the cookie settings on the web browser you are using or by using the settings provided by Google https://www.google.pl/settings/ads
Please be advised that our use of the above solutions from Google and Meta Platforms may result in the transfer of information collected through these solutions to servers located in the United States of America (a third country within the meaning of GDPR).
We also inform you that targeting you with advertisements personalised for your behaviour on our website is done through the automated processing of information about you. Google Ads and Pixel solutions automatically collect information about your use of our website with regard to the pages you view.
The information collected as part of Google Ads and Pixel is anonymous, i.e., it does not allow us to identify you. They merely provide information about the actions you took on our website. However, please note that Google’s and Meta Platforms’ proprietary solutions may combine this information with other information about you collected through your use of portals administered by Meta Platforms (Facebook, Instagram etc.), Google browser’s search results and other websites and use it for their own purposes, including marketing. Such activities no longer depend on us. You can look for information about them directly in Google’s privacy policies and the portals administered by Meta Platforms.
Links to other websites. Social media.
Our website may also contain references (links) to other websites. The data protection described here applies only to our website. When you go to other pages, please read the data protection information applicable there.
We use social media functionalities (such as Facebook and Instagram) on our website. Our website may include options for activities via social media (e.g., ‘pin’, ‘like’ and ‘share’ buttons). This content is embedded with the code from the providers of these platforms that places cookies. This content may store and process certain information for the purposes of personalised advertising. We encourage you to read the privacy statements of these social networks (which may change regularly) to find out how they handle your data.
Questions
If you have any questions about the collection, processing and use of your personal data, please contact us by sending an email to: rodo@kbf.krakow.pl
