According to Article 13 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter the "GDPR") , please review basic information regarding the processing of your personal data:

The Cracow Festival Office (Krakowskie Biuro Festiwalowe) with its seat at ul. Wygranej 2, 30-311 Kraków, a municipal cultural institution entered into the register of cultural institutions run by the Kraków City Municipality under the number 19 (hereinafter the "Office") is the Controller, that is the entity that processes your personal data.

You may contact the Office in the following way: electronically to the following e-mail address: poczta@biurofestiwalowe.pl, in writing at: Krakowskie Biuro Festiwalowe z siedzibą przy ul. Wygranej 2, 30-311 Kraków, by phone: +48 12 354 25 00.

The DATA PROTECTION OFFICER - ŁUKASZ GAJDECKI has been designated in the Office, which can be contacted in all matters related to the processing of personal data and the exercise of data processing rights, via e-mail address: rodo@biurofestiwalowe.pl or in writing to the following address: Inspektor Ochrony Danych, Krakowskie Biuro Festiwalowe z siedzibą przy ul. Wygranej 2, 30-311 Kraków. Detailed data of the Data Protection Officer data are available on the website www.biurofestiwalowe.pl and at the office of the Personal Data Controller.

The Office processes your data for the following purposes:

1. conclusion and implementation of the contract (legal basis: Article 6(1)(b) of the GDPR);
2. implementation of the Office's duties provided for by law, including in particular issuing and storing invoices and accounting records (legal basis: Article 6(1)(c) of the GDPR);
3. for the purposes and to the extent related to participation in projects implemented by the Office, including to book a ticket and make settlements pertaining to the participant's participation in the project – (legal basis: Article 6(1)(b) of the GDPR);
4. marketing and promotion of the Office products and services (legal basis: Article 6(1)(a) and Article 6(1)(f) of the GDPR);
5. for archival purposes (evidence), possible determination, investigation of or defence against claims, ensuring the safety of persons and property in accordance with the legitimate interest of the Office (legal basis: Article 6(1)(f) of the GDPR).

Your personal data will be processed for the period necessary to attain the specific goals to which they have been collected in accordance with the criteria set out in the law, including to secure any claims for a period of 10 years.

In the case of processing for marketing purposes based on your consent (Article 6(1)(a) of the GDPR) - until you withdraw your consent.

The Office may make your personal data available for the following categories of recipients:

1. entities authorised to obtain your data pursuant to generally applicable regulations;
2. entities that process data on behalf of the Office, that is entities that process data as subcontractors, under a contract and only in accordance with the instructions of the Office.

Please be advised that you have the following rights:

1. to access the content of your personal data and find out about such issues as the categories of data, the purposes of their processing, and obtain copies thereof;
2. to rectify incorrect and completing missing data, and be forgotten, in other words you have the right to erase any data processed unreasonably and unlawfully (by way of illustration data which are no longer necessary for the purposes for which they were collected);
3. to object to the data being processed and the right to restrict the scope of processing. In such a situation, once your request has been reviewed, the Office will not be able to process personal data which you provided, unless it demonstrates valid and legitimate grounds for processing, overriding the interests, rights and freedoms of the data subject or the basis for determination, investigation of or defence of claims;
4. to transfer the data processed in an automated manner, that is you have the right to demand that personal data be sent by the Office directly to another Controller, where technically feasible;
5. the right to withdraw consent at any time without affecting the lawfulness of the processing which has been effected on the basis of consent prior to its withdrawal (if processing takes place pursuant to Article 6 (1)( a) or Article 9 (2) (a) of the GDPR);
6. the right to lodge a complaint with the President of the Office for Personal Data Protection, if the participant considers that the processing of personal data is in breach of the provisions of the GDPR.

Providing data for the purposes of the conclusion and implementation of the contract is voluntary, but the failure to provide the data will result in the incapacity to perform the contract.

In the event of consent to the processing of data for the purpose specified by the Controller and consent to such data processing, including for marketing purposes - providing personal data is always voluntary and consent to their processing may be withdrawn at any time.

What are “cookies”?

“Cookies” files (so-called: “cookies”) are small text files sent by visiting websites and stored in user’s terminal equipment (in the browser’s files catalogue). These files allow recognising user’s equipment and show a website adjusted to their individual preferences. Usually “cookies” include a name of the website from which they originate, time of storing on the terminal equipment and unique number thereof. More information on cookies can be found on the website: allaboutcookies.org

What do we use “cookies” for?

“Cookies” are used in order to adjust contents of websites to user’s preferences and optimise the use of websites. We use cookies in order to understand how users use the website and to adjust it accordingly so that using it is more pleasant and interesting. Furthermore, cookies provide us with statistical data regarding users’ traffic and using our websites. Cookies can be also used by advertisers cooperating with us (in order to present promotional contents via websites) and by research companies.

Deleting “cookies”

Using “cookies” is completely voluntary. A user can at any time block and delete “cookies” from the software used by them (Internet browser).

Detailed information on the possibility and manners of handling “cookies” is available in software settings (Internet browser). With regard to the most popular Internet browsers, necessary information can be obtained in the following manner:

• with regard to Mozilla Firefox browser at: www.support.mozilla.org/pl/kb/ciasteczka
• with regard to Internet Explorer browser at: www.support.microsoft.com/kb/278835/pl
• with regard to Google Chrome browser at: www.support.google.com/chrome/bin/answer.py?hl=pl&answer=95647
• with regard to Safari browser at: https://support.apple.com/pl-pl/guide/safari/sfri11471/mac

The Office hereby informs that normally Internet browsers implicitly allow placing “cookies” on the user’s terminal equipment. As a consequence, in case of not using “cookies” it is necessary to change the Internet browser’s settings in order to block automatically handling “cookies” in the Internet browser’s settings or inform each time they are sent to the user’s equipment.

The Office informs that deleting or blocking “cookies” can result in impediments and in some cases disable using the website.