Privacy policy
"KARTON" ASSOCIATION Privacy policy
"KARTON" ASSOCIATION is the owner of the website www.junglescratch.evotickets.pl
We care about the security of the personal data we process and pay attention to the compliance of processing with applicable law, in particular with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).
Personal data controller:
The controller of your personal data is the "KARTON" ASSOCIATION. based in Gdańsk, Jana Sobieskiego 14, 80-216 Gdańsk, Poland, hereinafter referred to as "Administrator".
Personal data inspector:
We have appointed a Personal Data Inspector (person responsible for the correct processing of personal data). Inspector's contact details: Paweł Ślagowski, at the e-mail address: ido@karton.network or in writing to the address of our headquarters.
Purposes and basis of processing
The system collects personal data of Users, in particular name, surname, e-mail address, in order to:
a. Implementation of contracts related to the activities of the association;
b. Issuing invoices and accounting documents
c. Conducting correspondence related to the implementation of contracts.
d. Fulfillment of legal obligations arising from legal provisions
e. Conducting marketing activities, if the customer consents.
Users' personal data may be processed for the following purposes:
- Implementation of the contract concluded by the User (the legal basis for processing is the necessity of data to perform the contract to which the User is a party or to take action at the request of the User before concluding the contract);
- Archiving to secure information in the event of a legal need to prove facts (the legal basis for processing is the legitimate interest of the Administrator);
- Analytical, including the selection of services to the needs of Users, optimization of services based on the course of the service process (the legal basis for processing is the legitimate interest of the Administrator);
- Customer satisfaction surveys and verification of the quality of our services (the legal basis for processing is the legitimate interest of the Administrator);
- Conducting direct marketing (the legal basis for processing is the legitimate interest of the Administrator);
- Fulfilling the legal obligation of the Administrator (the legal basis for processing is the necessity to fulfill the legal obligation of the Administrator).
Users' personal data will not be made available to third parties without the Users' express consent, unless required by law or necessary to ensure the provision of services related to the activities of the association.
Personal data processing is based on:
a. Art. 6 section 1 letter b GDPR - in order to perform the contract.
b. Art. 6 section 1 letter c GDPR - in order to fulfill legal obligations.
c. Art. 6 section 1 letter a GDPR - based on the customer's consent regarding marketing activities.
We process the following personal data of customers:
a. Name and surname.
b. Address of residence or registered office.
c. Telephone number.
d. E-mail address.
e. NIP number (in the case of entrepreneurs).
f. Invoice details.
Data recipients
We may share your personal data with the following categories of entities:
- Authorized employees of the Administrator;
- Entities cooperating with the "KARTON" ASSOCIATION to the extent necessary for the implementation of the contract;
- IT service providers and entities supporting the association's business processes, based on data processing entrustment agreements;
- Subcontractors, i.e. entities used by the Administrator to perform the services provided;
- Suppliers responsible for operating IT systems
- Entities such as banks and payment operators that handle the order process
- Entities providing the Administrator with services related to business operations: accounting, legal, auditing, consulting;
- Entities or bodies authorized under the law.
Data processing period
The period of processing of the User's personal data depends on their purpose
processing, therefore:
- Personal data are processed until the end of the limitation periods for potential claims arising from the concluded contract, in accordance with applicable law, in particular the provisions of the Act of May 30, 2014 on consumer rights and the Act of April 23, 2014 1964 Civil Code;
- Personal data obtained for marketing purposes, in the case of data processing based on consent. we process until the User withdraws consent to their processing for this purpose, and in the case of data processing based on the legitimate interest of the Administrator, until the duration of marketing campaigns or until an objection is raised;
- We process personal data until we no longer have a legal obligation obliging us to process personal data.
Profiling
We do not use profiling on our website, as referred to in Art. 22 GDPR.
Your rights
The user has the right to:
at any time - Request access to the User's Personal Data in order to rectify it;
- Delete the User's Personal Data;
- Restrictions on the processing of User's Personal Data;
- Object to further processing of the User's Personal Data;
- Transferring the User's Personal Data;
If the processing of the User's Personal Data is based on consent, the User has the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of the processing of the User's Personal Data that was processed on the basis of consent before its withdrawal. In case of doubts as to the lawfulness of the processing of the User's Personal Data, the User has the right to lodge a complaint with the supervisory body of the President of the Office for Personal Data Protection or another competent supervisory body.
Information on the voluntary nature of providing data:
Providing personal data by the User is voluntary, however, failure to provide some personal data (name and surname, address details, e-mail address) may prevent the Administrator from concluding the Agreement via the system and performing the concluded Agreement.
Contact:
If you have any questions regarding the Privacy Policy, please contact us at the following e-mail address:info@karton.network
This Privacy Policy is effective from July 1, 2024.