Privacy policy

This notice explains how personal data is used for this website and bookings for the Kino MacGregor workshops in Warsaw.

1. Who is responsible for your data

Legalna Joginka Hanna Walenta
ul. Polna 24/7
00-630 Warsaw
NIP 5221728211
Email: kontakt@kinowarsaw2027.pl
Telephone: +48 537 000 637

The Organizer is the controller of personal data. Use the contact details above for questions about your data or to exercise your rights.

2. Data we use and why

• Bookings and tickets: your name, email, billing country, selected pass, order and payment status, ticket code, transfers and admission records. We use these to arrange your participation, process payment, provide your ticket and check admission. The legal basis is performance of the contract or steps requested before entering it (Article 6(1)(b) GDPR).
• Accounting and legal duties: transaction records and any billing information you provide for a receipt or invoice. Processing necessary to meet legal obligations is based on Article 6(1)(c) GDPR.
• Contact, complaints and claims: your contact details, messages and relevant booking records. Depending on the request, we use these to perform the contract, meet legal duties, or pursue our legitimate interests in responding to enquiries and establishing, exercising or defending claims (Article 6(1)(b), (c) or (f) GDPR).
• Waiting list, when enabled: your email and chosen pass, used with your consent to send availability updates (Article 6(1)(a) GDPR). You can withdraw consent through the unsubscribe link or by contacting the Organizer. Withdrawal does not affect earlier lawful processing. Joining does not reserve a place.
• Website operation and security: IP address, request time, browser information, essential session identifiers and technical logs. Our legitimate interest is operating and protecting the website, investigating errors and preventing abuse (Article 6(1)(f) GDPR).

Required booking details are necessary to fulfil your purchase; without them we cannot issue a personal ticket. Waiting-list participation is optional. We do not request medical records or health information in the booking form. Please do not include them in routine booking messages.

If a ticket is transferred to you, the previous holder provides your name and email to the Organizer so a replacement ticket can be issued. The same rights and contact details apply.

3. Who receives data

Access is limited to authorized people and providers involved in operating the website, hosting (SEOHost), technical support, email delivery, accounting and the workshop. They receive the data needed for their role. Payment information needed to process a transaction is provided to the payment operator, Przelewy24 (PayPro S.A.), when online payments are activated. The website does not store full payment-card numbers or card security codes. The payment operator describes its own processing in its privacy information for payers.

Data may also be disclosed to public authorities where required by law. Contact correspondence and automated booking emails are handled through the Organizer’s mailbox hosted by SEOHost. You may contact the Organizer for information about the providers and safeguards relevant to your data.

4. How long data is kept

Booking and admission data is kept for the time needed to provide the workshop and resolve related requests. Records required for accounting or tax purposes are retained for the statutory period applicable to the record. Information necessary to establish or defend a claim may be retained until the applicable limitation period expires, or until an ongoing dispute is finally resolved.

Waiting-list contact data is used until you withdraw consent or the relevant event has ended, whichever comes first, unless another legal basis requires limited retention. Routine enquiries are retained until resolved; correspondence relevant to a booking, complaint or claim follows the corresponding retention period. Technical logs are retained for the period needed for security and fault diagnosis, with relevant records retained longer if required to investigate an incident or pursue a claim.

5. Your rights

Subject to the conditions in the GDPR, you may request access, correction, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests and withdraw consent for processing based on consent. Some records must still be kept to meet legal obligations or address claims.

You may lodge a complaint with the President of the Personal Data Protection Office in Poland (Prezes Urzędu Ochrony Danych Osobowych), or with the competent supervisory authority where you live or work. See uodo.gov.pl.

We do not use profiling or automated decision-making that produces legal or similarly significant effects on you within the meaning of Article 22 GDPR.

6. Cookies and local website data

The website uses essential cookies for cart contents, checkout sessions, security and administrator login. These are needed to provide the functions you request. This website does not use advertising pixels or optional audience analytics. Browser settings let you inspect or remove cookies; blocking essential cookies may prevent checkout from working. The payment operator may use its own cookies on its payment pages under its own policy.