Pursuant to Article 13 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter “GDPR”), we are presenting to you basic information concerning the personal data processing:

The Controller, i.e. the entity to process your personal data is the Krakow Festival Office (Krakowskie Biuro Festiwalowe) with its office at Wygrana 2, 30-311 Kraków, a municipal cultural institution entered in the register of cultural institutions maintained by the Kraków Municipality under the number 19 (hereinafter the “Office”).

You can contact the Office in the following manner: electronically to the email address: poczta@kbf.krakow.pl, in writing at the address: Krakowskie Biuro Festiwalowe z siedzibą przy ul. Wygranej 2, 30-311 Kraków, by phone: +48 12 354 25 00.

A DATA PROTECTION OFFICER has been appointed at the Office – Mr Łukasz Gajdecki, whom you can contact in all matters concerning the personal data processing and using the rights relating to such processing, via the email address: rodo@kbf.krakow.pl or in writing to the address: Inspektor Ochrony Danych, Krakowskie Biuro Festiwalowe z siedzibą przy ul. Wygranej 2, 30-311 Kraków. The detailed information on the data protection officer is available on the website www.kbf.krakow.pl and at the office of the Personal Data Controller.

The Office processes your data for the following purposes:

conclusion and performance of an agreement (legal basis: Article 6(1)(b) of GDPR);

performance of the Office’s duties as provided for by law, including, in particular, issuing and storing the invoices and accounting documents (legal basis: Article 6(1)(c) of GDPR);

for the purposes and to the extent as related to the participation in the projects carried out by the Office, for such a purpose, booking a ticket and making settlement associated with involvement of a participant in a project – legal basis Article 6(1)(b) GDPR;

marketing and promotion of the products and services of the Office (legal basis Article 6(1)(a) and (f) of GDPR;

for archival (evidential) purposes, possible determination, seeking of claims or defending against them, ensuring the security of persons and property on the basis of the legitimate interest of the Office (legal basis: Article 6(1)(f) of GDPR).

Your personal data will be processed for the period necessary to achieve the indicated purposes for which they have been collected according to the criteria as laid down in provisions of law, including for securing possible claims for a period of 10 years.

In case of processing for marketing purpose upon your consent (Article 6(1)(a) of GDPR) up until your withdrawal of such consent.

Your personal data can be made available by the Office to the following categories of recipients:

entities authorised to it under generally applicable provisions of law;

entities processing the data on behalf of the Office, entities which process the data as subcontractors, under provisions of the agreement and solely in accordance with instructions from the Office.

The Office informs you that you have the following rights:

the right of access to your personal data and to obtain information inter alia on the categories of the data, purpose of the processing, and to obtain a copy thereof;

the right to rectification of inaccurate data and have incomplete data completed, and to be forgotten, which means that you have the right to have data processed illegitimately and unlawfully erased (e.g. the data are no longer necessary for the purposes for which they had been collected);

the right to object to data processing and the right to restriction of processing. In such a situation, having considered a request, the Office will not be authorised to process the personal data made available by you, unless it demonstrates important, legitimate grounds for their processing, which override the interests, rights and freedoms of a data subject or grounds for determination, seeking of claims or defending claims;

the right to transfer of data processed by automated means, which means that you may request that the personal data be transferred by the Office directly to another controller, if technically possible;

the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal (where the processing is based on Article 6(1)(a) or Article 9(2)(a) of GDPR);

the right to lodge a complaint with the President of the Personal Data Protection Office, if a participant considers that the personal data processing is in breach of the provisions of GDPR.

Providing data for the purposes of the conclusion and performance of the agreement is voluntary, however the consequence of failure to provide such data is no possibility of performing the agreement.

If consent for the data processing has been granted for the purpose as indicated by the Controller and where consent for such data processing has been given, including for marketing purposes – the provision of personal data is always voluntary, and consent for their processing can be withdrawn at any time.

What are cookies?

The cookies are small text files sent by visited web sited and stored on terminals of users (in the catalogue of web browser files). These files allow recognition of the user’s device and screen a website as adjusted to his/her preferences. The cookies usually contain the name of the website from which they derive, time for which they have been stored on a terminal and a unique number. For more information on the cookies, please visit the website allaboutcookies.org.

What the cookies are used for?

The cookies are used for adjusting the contents of websites to the user’s preferences and optimising the use of the websites. We use the cookies to understand how users use the website and adjust it so that using it is nicer and more interesting for them. The cookies also provide us with statistical data about the traffic of the users and their use of our internet services. The cookies can also be used by the advertisers coopering with us (in order to present promotional contents via the internet services) or by research companies.

Deletion of the cookies

Using the cookies is completely voluntary. The user can at any time block and delete the cookies from the level of the software used by him/her (web browser).
Detailed information on the possibility and manners of handling cookies is available in software (internet browser) settings. In reference to the most popular internet browsers, necessary information is available:

  • for the Mozilla Firefox browser, at the address: www.support.mozilla.org/pl/kb/ciasteczka
  • for the Internet Explorer browser, at the address: www.support.microsoft.com/kb/278835/pl
  • for the Google Chrome browser, at the address: www.support.google.com/chrome/bin/answer.py?hl=pl&answer=95647
  • for the Safari browser, at the address: https://support.apple.com/pl-pl/guide/safari/sfri11471/mac

The Office informs you that normally the internet browsers by default allow placing cookies on the user’s terminal. As a result, if one does not wish to use the cookies it is necessary to make changes to internet browser settings – so as to block the automatic support of the cookies in the internet browser settings or provide information about each occasion on which they have been sent to the user’s device.

The Office informs you that deleting or blocking the cookies may cause difficulties, and in some cases even make it impossible to use a service.