Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR) (OJ EU L 2016.119.1), we hereby inform that:
- CONTROLLER - The controller of personal data, i.e. the entity deciding on the purposes and methods of processing such data, is TERNTIX sp. z o.o. with its registered office in Dzierżoniów (Batalionów Chłopskich 55 / 1, 58-200 Dzierżoniów, Poland), entered into the National Court Register under number 0001227621.
- DATA PROTECTION OFFICER - In matters related to the processing and protection of personal data, you may contact via e-mail: KONTAKT@TERNTIX.COM or in writing to the address of the Company's registered office.
- SOURCE OF DATA - The controller processes data of persons who have completed the Order Form. Personal data obtained by completing the aforementioned Form include the following categories of data: first name, last name, e-mail address. Optional – phone number. In order to obtain a VAT invoice also: address and tax identification number.
- PURPOSES OF PROCESSING - personal data of persons ordering tickets for the Event will be processed for the purpose of:
- providing services by electronic means through concluding agreements for the sale of tickets ordered by the Customer and performing these agreements, as well as after registering an account in order to place further orders by using the ticket sales module on the website (Article 6(1)(b) GDPR);
- ticket returns and handling of potential complaints (the legal basis for processing is Article 6(1)(b) GDPR);
- fulfilling legal obligations, in particular in the field of financial reporting (the legal basis for processing is Article 6(1)(c) GDPR);
- pursuing the legitimate interest of the controller (the legal basis for processing is Article 6(1)(f) GDPR), which shall be understood as:
- responding to inquiries submitted by Customers via e-mail and telephone,
- establishing, pursuing or defending claims related to the operation of the ticket sales module and services provided through it.
- PROCESSING PERIOD - personal data will be processed until:
- the duration of the sales agreement between the Customer and the Controller, and after its termination until the expiry of limitation periods for claims arising therefrom;
- in relation to data processed on the basis of the legitimate interest of the controller, until an effective objection is raised by the Customer, subject to the next point;
- in relation to marketing activities, until the withdrawal of consent to receive such information by electronic or telephone means or until an objection to processing in this scope is raised, whichever occurs first;
- until the expiry of the obligation to store data resulting from legal provisions, in particular the obligation to store accounting documents relating to the sales agreement.
- DATA RECIPIENTS - personal data may be disclosed to:
- public authorities and other entities authorized to access data within the scope and for the purposes specified in legal provisions;
- external entities providing services to the controller supporting its operations within the scope of provided services, including transport companies, IT service providers, entities auditing its activities, and entities responsible for electronic payments.
- RIGHTS OF DATA SUBJECTS - in connection with the processing of personal data, Customers have the following rights:
- the right of access to their personal data;
- the right to rectify their personal data;
- the right to erase their personal data;
- the right to restrict processing of their personal data;
- the right to data portability;
- the right to object to the processing of their personal data;
- the right to withdraw consent to the processing of personal data where it constitutes the basis for processing, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal;
- the right to lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office – more information regarding this right is available at: https://uodo.gov.pl/pl/p/skargi.
- VOLUNTARY PROVISION OF PERSONAL DATA - providing personal data is voluntary, however failure to provide them will make it impossible (in the case of data indicated in the Order Form as necessary) or may hinder (in the case of e-mail address and phone number) the provision of services by electronic means by the Controller, and thus making online ticket purchases.
- TRANSFER OF DATA TO THIRD COUNTRIES - personal data of Customers purchasing tickets online via the module will not be transferred to countries outside the European Economic Area.
- AUTOMATED PROCESSING, INCLUDING PROFILING - The Controller will not carry out activities consisting of automated processing (including profiling) of personal data of Customers that could produce legal effects concerning them or similarly significantly affect them.