Privacy policy

PRIVACY POLICY
OF WWW.MALTA-FESTIVAL.PL

1. PRELIMINARY REMARKS

As the organizers of the Malta Festival, we respect your privacy and are aware that by visiting our website; www.malta-festival.pl, you entrust us with legally protected information about yourself. Therefore, we want to provide you with the most important information about what happens to your personal data that we process. In this Policy, we describe how and when we collect your personal data, what we use it for, who we transfer it to, how long we store it and what rights you have in connection with it.

2. WHO IS THE CONTROLLER OF YOUR PERSONAL DATA

The joint controllers of your personal data collected in connection with visiting and using the website www.malta-festival.pl are:

Kulczyk Foundationwith its registered office in Warsaw (00-526) at ul. Krucza 24/26, registered in the Register of Associations, Other Social and Professional Organisations, Foundations and Independent Public Health Care Establishments of the National Court Register kept by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register, under KRS number: 0000471002, NIP (Tax Identification Number): 7010414847, REGON (National Business Registry Number): 147124722 (hereinafter referred to as: the “Kulczyk Foundation”),
dFlights spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw (00-526) at ul. Krucza 24/26, registered in the National Court Register kept by the District Court for the capital city of Warsaw in Warsaw, 12th Commercial Division of the National Court Register, under KRS number: 0000721652, NIP: 6772432524, REGON: 369620432 (hereinafter referred to as: ” dFlights sp. z o . o . “),

Each of them individually hereinafter referred to as the “Controller“, and collectively as the “Joint Controllers” or “Organizers“, “we“, “our“, “us“.

3. GLOSSARY

In our Privacy Policy we use terms whose meanings are explained below.

Controller – entity that determines the purposes and methods of processing personal data,

Application – the Festival application made available by the Organizers in order to promote the Festival, keep records and enable the purchase of tickets.

Joint Controllers – at least two controllers who jointly determine the purposes and methods of processing,

Personal data – any information about a natural person identified or identifiable, whether directly or indirectly, by reference to one or more characteristics that define his or her physical, physiological, genetic, mental, economic, cultural or social identity, hereinafter also referred to as ” data “,

Personal data processing – any action on personal data, regardless of whether it is performed in an automated manner or not, including, for example, collecting, storing, recording, organizing, modifying, viewing, using, sharing, limiting, deleting or destroying personal data which is based on the device’s IP, location data, online identifier and information collected via cookies and other similar technology,

Policy – our Privacy Policy,

GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, (generally the Regulation on data protection),

Festival – a cultural event with a long-standing tradition taking place annually in Poznań under the name: Malta Festival Poznań, now under the name: Malta Festival; starting with the 34th edition of the Festival, which will take place on September 7-15, 2024 in Poznań, of which the Joint Controllers are the Organizers,

Website – the website of the Festival run by the Joint Controllers at: www.malta-festival.pl,

User – any natural person visiting the Website, which includes the use of one or more functionalities described in the Policy.

4. WHOSE DATA WE PROCESS AND HOW WE COLLECT IT

As Joint Controllers, we process your personal data when:

you visit and use our website: malta-festival.pl ,
you download and use the Application,
you contact us via e-mail, telephone or the contact form on our Website or other available communication channels,
you register your participation in the Festival using the application forms on the Website or in the Application,
you are a subscriber to our mailing, you use the newsletter,

and it is precisely during the above-mentioned activities that we obtain your personal data directly from you.
We may also process your personal data provided to us by our contracting partners in order to conclude or implement contracts binding on us. With regard to potential partners and contracting parties, we may collect your personal data from publicly available sources.

5. FOR WHAT PURPOSES AND ON WHAT LEGAL GROUNDS WE PROCESS YOUR PERSONAL DATA

Your personal data is processed to the minimum extent necessary to provide the service consisting in your use and visit of the Website.

The legal ground for the processing of your personal data depends on the purpose for which the data is processed, if the processing takes place:

in order for the Joint Controllers to send the so-called newsletter – i.e. information about the Organizers’ activities, in particular about the Festival, and marketing materials; then the legal ground for data processing is: consent (Article 6(1)(a) of the GDPR),
to inform and promote the Festival and the actions of the Organizers; then the legal ground for processing is the legitimate interest of the Joint Controllers consisting in the promotion of their activities (Article 6(1)(f) of the GDPR),
in order to use the Application, including to purchase a ticket via the Application, the processing of personal data is necessary to perform the contract to which the data subject is a party or to take action at the request of the data subject before concluding the contract ( Article 6(1)(b) of the GDPR),
in order to register for participation in the Festival via the application form available on the Website or in the Application, then your data provided to the Controller via these forms are processed in order to enable you to register for participation in the Festival; the legal ground is the consent and legitimate interest of the Joint Controllers consisting in the proper organization of the Festival, including participation in it (Article 6(1)(a and af) of the GDPR);
and if the form concerns the registration of participation in the Festival in order to establish cooperation with the Organizers (for, among others, volunteers, media representatives, influencers), the processing of personal data is necessary to perform the contract to which the data subject is a party or to undertake actions at the request of the data subject before concluding a contract (Article 6(1)(b) of the GDPR),
to communicate with the User in response to inquiries received; then the legal ground for the processing of personal data is: consent granted or if it is necessary for the purposes of the legitimate interests pursued by the Joint Controllers (Article 6(1)(f) of the GDPR),
for profiling and analysis of statistics on the use of our websites; then the legal ground for processing is the legitimate interest of the Joint Controllers consisting in conducting analyzes of Users’ activity and their preferences in order to improve the quality of communication and functionality of the Website to achieve the statutory objectives of the Joint Controllers (Article 6(1)(f) of the GDPR),
to ensure the proper technical functioning of our Website; then the legal ground for data processing is the legitimate interest of the Joint Controllers consisting in maintaining the proper functioning of the Website (Article 6(1)(f) of the GDPR),
in order to possibly determine and pursue claims or defend against them, then the legal basis for data processing is the legitimate interest of the Joint Controllers consisting in the protection of their rights (Article 6(1)(f) of the GDPR).

6. WITH WHOM WE SHARE YOUR PERSONAL DATA

Below is a list of entities to which we may disclose your personal data:

in the case of Users visiting and using the Website, we share your data with: providers of IT services and systems, including analytical services and tools that we use to run our website and analyze its use statistics; lawyers and consultants providing services to the extent that disclosure of data is necessary to use their services,
in the case of those who contact us via e-mail, telephone or the contact form available on our Website, we share your personal data with: e-mail operators; postal operators and couriers, providers of IT services and systems that we use to use e-mail and our website; lawyers and consultants serving the Organizers to the extent that disclosure of data is necessary to use their services,
in the case of those using the Application, we share your personal data with those involved in the organization of the event (in particular employees or associates of the Organizers, providers of IT services and systems, lawyers and consultants serving the Organizers to the extent that the disclosure of data is necessary to use their services) , and if you purchase tickets via the Application, we may also share your personal data with entities providing services needed to provide the ticket sales and delivery process,
in the case of those registering their participation in the Festival via the application forms available on the Website or in the Application, we provide your personal data to persons involved in the organization of the event (in particular employees or collaborators of the Organizers, providers of IT services and systems, lawyers and consultants serving the Organizers to the extent that disclosure of data is necessary to use their services,
in the case of those making purchases in the online store, we share your personal data with entities providing services needed to provide the sales and delivery of goods, customer service, including complaints about goods and operation of IT systems (including sending information electronically),
in the case of subscribers to our mailing, newsletter, we share your personal data with providers of services needed to send the newsletter to the Joint Controllers, i.e. operation of IT systems, hosting, data security and other IT services (including sending information electronically),
in extraordinary situations, also competent authorities or third parties who request such information, based on an appropriate legal basis and in accordance with the provisions of applicable law – then the Joint Controllers reserve the right to disclose selected information regarding the User,
inasmuch as we use the services of Google Operations Ireland Limited (Google Drive), Facebook Ireland Limited (Facebook Pixel) and Cookie Yes Limited (CookieYes), your personal data may be transferred by these entities outside the European Economic Area on the basis of standard contractual clauses (Article 46 section (2)(c) of the GDPR). Any questions regarding the transfer of data outside the EEA should be addressed directly to these entities. For more information, please click here:
In the case of our Application, we use the services of OVH sp. z o. o., including server services, but your personal data that we process in connection with your use of our Application will not be processed outside the European Economic Area.

7. HOW LONG WE RETAIN YOUR DATA

Below you will find out how long we store the acquired personal data, depending on the entities and categories of data processed:

in the case of data of visitors to and users of our Website:
- we store information about your IP address for as long as the archiving period lasts in the server logs on which our website is located,
- we store information contained in cookies in accordance with the retention periods specified in the table in the COOKIES section of the Policy.
in the case of data of users of the Application:
- we store information about your logs for as long as their archiving period in the OVH server logs where our Application is located,
- we store the data necessary to use our Application for as long as the limitation periods for claims specified in the law require it.
in the case of data of persons who contact the Organizers via e-mail, telephone or contact form on our website or other available communication channels:
- we store the data necessary to respond to your inquiries for as long as necessary to resolve your case,
- additionally, we store personal data needed to defend against or pursue claims for as long as the limitation periods for claims specified in the law require.
in the case of people registering their participation in the Festival via the application forms available on the Website or in the Application:
- we process data related to the implementation of the event until the event is completed,
- we process data related to the promotion and information about the event and the activities of the Organizers for the time necessary to carry out the promotion or information about the event and the activities of the Organizers and the time necessary to pursue any rights arising from image processing,
- we process data related to concluded contracts for the duration and, after their expiry or termination until the limitation period for claims arising from them expires,
- data for archiving purposes, relationship management and ensuring accountability for a period of 5 years after the end of the calendar year in which the event took place, unless you object at an earlier date,
- we store the data necessary to pursue claims and defend against claims related to the implementation of the event for as long as the limitation periods for claims specified in the law require it.
in the case of data of subscribers to our mailing, newsletter:
- we store the data necessary to subscribe to the mailing and newsletter until you withdraw your consent to receive it.

8. YOUR RIGHTS

In connection with our processing of your personal data, you have the following rights:

the right to request access to your personal data and rectification

You have the right to access information about you at any time and to rectify or supplement it if it is incorrect or incomplete.

deletion of personal data we have about you and the right to limit their processing

Upon your request, we will delete the data collected about you after achieving the purpose for which the data was collected. You have the right at any time to request that we delete your data or limit its processing to the extent permitted by law.

the right to data portability

To the extent that personal data is processed in an automated manner for the purpose of performing the contract (Article 6(1)(b) of the GDPR) or on the basis of your consent (Article 6(1)(a) of the GDPR, Article 9(2)(a) point a of the GDPR), you have the right to receive personal data about you from us in a structured, commonly used and machine-readable format, and you have the right to send this personal data to another administrator without any hindrance from us.

the right to object to data processing

To the extent that your personal data is processed in order to pursue the legitimate interests of Kulczyk Foundation, ul. Krucza 24/26, 00-526 Warszawa or dFlights sp. z o. o., ul. Krucza 24/26, 00-526 Warszawa (Article 6(1)(f) of the GDPR), you have the right to object to the processing of your personal data. If you want to exercise this right, you will inform us about the data processing activities to which your objection applies and the reasons for the objection. We will discontinue processing your personal data unless there are compelling legitimate grounds for further processing or it is necessary to defend against or pursue claims.

the right to lodge a complaint with the supervisory authority

If you believe that our processing of your personal data violates applicable personal data protection regulations, you have the right to lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office in Warsaw, ul. Stawki 2, 00-193 Warsaw.

the right to withdraw consent to the processing of personal data

If we process personal data on the basis of your consent, you have the right to withdraw your consent at any time, without this affecting the compliance of the processing carried out on the basis of this consent before its withdrawal.

In addition, we inform you that providing data marked as mandatory when using the Website is a condition for concluding and performing a contract or activating a specific functionality, and failure to provide them results in the inability to conclude and perform the contract or use the functionality (it will prevent sending the newsletter). In other cases, providing data is voluntary.

You can send your requests to exercise your rights to the selected Joint Controller or to the e-mail address: rodo@malta-festival.pl .

9. ANALYTICAL AND MARKETING TOOLS

We and our partners use various solutions and tools used for analytical and marketing purposes, such as: GOOGLE ADS, GOOGLE TAG MANAGER, GOOGLE ANALYTICS, statistics available in the AppStore or GooglePlay . Detailed information about these tools can be found in the privacy policies of individual partners.

10. COOKIES

We use cookies and similar technologies (e.g. pixel tags) on our Website.

Cookies are small text files saved on the User’s end devices (computer, telephone, tablet), usually containing the website address, date of placement, expiration date, unique number and additional information consistent with the purpose of a given file, and then downloaded from it during subsequent visits, collecting information – e.g. by remembering the User’s visits to the online store or the Website and the actions performed by him.

Our Website uses two types of cookies, called “session cookies” and “persistent cookies”. “Session” cookies are temporary files that are stored on the user’s device until they leave the Website. These include: session cookies of media players. “Persistent” cookies remain on the user’s device for a longer period of time or until they are manually deleted by the user.

Cookies perform various functions. First of all, they make it easier to navigate the Website and store information about your preferences in order to present you with appropriate content and contribute to improving the quality of our services.

In addition, we use cookies for statistical and analytical purposes, which allows us to understand how Users behave on our Website using aggregated and anonymous statistical information, and for marketing and remarketing purposes, which allows us to track Users of our Website and inform them about the services we offer online.

On our Website, we use our own cookies and those belonging to our partners, such as advertisers cooperating with us, research companies and multimedia application providers. Although we do not use automated methods of processing personal data, such as targeting and profiling, our partners may do so in order to monitor the preferences, interests, location and behavior of the Users of our Website for advertising purposes.

We use social plug-ins and advertising tools from Google and Facebook. This means that – depending on your device settings and your consent – information about the use of our website may be combined with other information that you have provided to Google or Facebook or that has been collected as a result of using their services. These websites collect data directly from your web browser, processing it under their own privacy policies (the relevant links are below). Our Website also uses plug-ins from third parties in the form of Share buttons on Facebook, Twitter, Instagram, Spotify, Snapchat, YouTube. The information in the Policy regarding cookies also applies to other similar technologies used on the Website.

You can disable the storage of cookies directly on the device used to connect to our website, in accordance with the instructions of the browser manufacturer, including: Google Chrome ; Safari ; Mozilla Firefox .

Information on configuring and deleting cookies in other web browsers can be found on the websites of their manufacturers.

You can check and edit your cookie settings at any time by clicking the cookie settings button in the lower right corner of the website. Here you can check what cookies we use and adjust your choices regarding permissions for our processing of your cookies.

11. NEWSLETTER

The Joint Controllers also provide you with the opportunity to use the newsletter . The newsletter is a form of electronic bulletin sent periodically until you withdraw your consent to receive it, via e-mail to the e-mail address provided by you. The newsletter contains current information about the Festival.

Using the newsletter service is voluntary and free of charge. You can unsubscribe it at any time. To do so, use the link in each newsletter or write to us at: rodo@malta-festival.pl .

12. AMENDMENTS TO THE PRIVACY POLICY, INCLUDING COOKIES

The provisions of the Privacy Policy of the Festival Website may be subject to improvements and changes, and the latest versions will always be published on our Website and will be marked with the date of the last update.

This Policy is effective as of 13 August 2024.

13. CONTACT ABOUT THE POLICY AND YOUR PERSONAL DATA

If you want to exercise your rights, please contact us via e-mail: rodo@malta-festival.pl or in writing by registered post with the note “GDPR” to the address of any of the Joint Controllers, i.e.:

Kulczyk Foundation: ul. Krucza 24/26, 00-526 Warszawa or
dFlights sp. z o. o.: ul. Krucza 24/26, 00-526 Warsaw.