Regulations and privacy policy

PRIVACY POLICY 

I. GENERAL INFORMATION

This document defines the rules related to the processing of personal data by the Administrator, obtained by the Administrator via the Website and Social Profiles, as well as related to the so-called files. cookie. 

II. DEFINITIONS 

1. Administrator - it means an entity that is the administrator of:

Aeropact limited liability company with its registered office in Poznań at: ul. Bukowska 285 lok. 588, 60-189 Poznań, entered into the Register of Entrepreneurs of the National Court Register under the number KRS 0000511199, for which registration files are kept by the District Court in Poznań, VIII Commercial Department, NIP: 7811897683, REGON: 302831470, share capital - PLN 500,000 (paid in full) ; 

2. Website - operating in the domain: https://www.aeropact.pl/ website, including main pages and all subpages;

3. Privacy policy - this document; 

4. Content - content posted on the Website and as part of Social Profiles by the Administrator in any form, including in particular graphic, text, sound, audiovisual, photographic;

5. Social Profiles - Administrator profiles in social media such as in particular Facebook, Instagram, regarding the Event. 

6. GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (General Data Protection Regulation ) (Journal of Laws of the EU. L. of 2016 No. 119). 

III. PERSONAL DATA

1. ADMINISTRATOR
   

The administrator of personal data is the Administrator (full details are provided in section II point 1 of the Privacy Policy). 

Due to the fact that as Administrator two entities are given as joint controllers, they inform that they are equally responsible in fulfilling the obligations arising from the GDPR, and this Privacy Policy contains all data enabling data subjects to exercise their rights . 

2. ADMINISTRATOR CONTACT DETAILS 
   

Contact of data subjects with the Administrator regarding personal data is possible:

1. 1. electronically to the e-mail address: biuro@aeropact.pl;

   2. electronically via contact forms provided on the Website; 

   3. in writing (by letter) to the following address: Aeropact Spółka z ograniczoną odpowiedzialnością, ul. Bukowska 285 lok. 588, 60-189 Poznań. 

2. PURPOSES OF PROCESSING PERSONAL DATA AND LEGAL BASIS FOR PROCESSING
   

The administrator processes personal data for the purposes indicated below and based on the legal grounds indicated below: 

1. 1. personal data is processed for purposes related to the performance of contracts concluded in connection with the use of the party, in which case the legal basis for processing is the necessity of processing to perform the contract or to take action at the request of the data subject before the conclusion of the contract (Article 6 paragraph 1 point b of the GDPR);

   2. in the event of contacting the Administrator in any way (in particular via e-mail addresses provided on the Website or on Social Profiles, or via contact forms provided via the Website, or in writing to the address indicated in point 2 of the policy privacy, or via functionalities made available as part of Social Profiles, in particular by means of commentary or private messages) - personal data is processed for the purpose of communication and dealing with the matter to which this contact relates, in which case the legal basis for processing is justified Administrator's interest (art.6 par.1 lit.f RODO), consisting in conducting correspondence and settling the case in connection with business operations, or the necessity of processing to perform the contract or to take action at the request of the data subject before concluding the contract (Art. 6 clause 1 lit. b GDPR);

   3. in the case of a given person's consent to receive commercial information by electronic means to the e-mail address or telephone number provided - personal data are processed for the purpose of sending commercial information by the Administrator, in which case the basis for processing is the consent of the data subject ( art.6 par.1 lit.a RODO); 

   4. personal data is processed for the purpose of providing Content, in which case the legal basis for processing is the Administrator's legitimate interest (Article 6 paragraph 1 letter f of the GDPR) consisting in providing Content for the purposes of business operations, including conducting and day-to-day Profile management Social and contacting users, or the need for processing to perform the contract or to take action at the request of the data subject before the conclusion of the contract (Article 6 (1) (b) of the GDPR); 

   5. personal data is processed for analytical and statistical purposes, in which case the basis for processing is the Administrator's legitimate interest (art.6 par.1 lit.f) RODO) consisting in conducting analyzes of users' activity, as well as their preferences, in order to: used functionalities of the Website, improving the use of the Website, creating the best-adapted offer by the Administrator regarding the Event, improving the use of Social Profiles, creating the most relevant Content; 

   6. personal data is processed for the purposes of possible determination and assertion or defense against them on the part of the Administrator, including in the complaint consideration process, in which case the basis for processing is the justified interest of the Administrator (art.6 par.1 lit.f RODO) consisting in protection of his rights and responses to claims filed against the Administrator;

   7. personal data is processed for direct marketing purposes related to the Administrator's products and services, including matching them in terms of user preferences or location by profiling, in which case the basis for processing is the Administrator's legitimate interest (Article 6 paragraph 1 point f RODO) consisting in the marketing of the Administrator's own services and products or the consent of the data subject (art.6 par.1 lit.a RODO), including in the case indicated in point 4) above. 

   8. personal data is processed for the purpose of organizing competitions and loyalty programs, in which case the basis for data processing is the necessity of processing for the performance of the contract or for taking action at the request of the data subject before the conclusion of the contract (Article 6 (1) lit. b GDPR), or the consent of the data subject (art.6 par.1 lit.a GDPR);

2. REQUIREMENT OF DATA AND CONSEQUENCES OF NON-SUBMISSION OF PERSONAL DATA
   

Providing the Administrator's personal data is voluntary, however, failure to provide the data required by the Administrator (in particular those marked with an asterisk as part of the Website):

1. 1. in the case of contacting the Administrator, including submitting complaints - it may prevent the response to an inquiry or the implementation of actions expected by a given person in response to contact, and thus is a requirement for the purposes of full response and contact; 

   2. if you wish to read the Content - may prevent or limit the ability to view these Content;

   3. in the case of the will to receive commercial information by electronic means from the Administrator - will prevent them from receiving this information from the Administrator; 

   4. in the event of a will to participate in contests or loyalty programs - may prevent such participation. 

2. RIGHTS OF PERSONS WHO THE DATA CONCERNS
   

Each person in connection with the processing of their personal data by the Administrator has the right to:

1. 1. request access to personal data
      (i.e. to obtain information about the processing of personal data, including primarily about the purposes and legal grounds for processing, the scope of data held, entities to which personal data is disclosed and the planned date of their removal and to receive a copy of this data);

   2. rectification of personal data
      (i.e. to correct incorrect personal data, including when it is out of date, incorrect or incomplete);

   3. delete personal data ("right to be forgotten")
      (i.e. to request the deletion of data in the cases specified in the GDPR, i.e. in particular: when the data are no longer necessary for the purposes for which they were collected or otherwise processed; withdrawal by the data subject of consent to data processing (about if the Administrator has no right to process data on a different legal basis); when data is processed unlawfully; the need to delete data results from the Administrator's legal obligation);

   4. restrictions on the processing of personal data
      (i.e. to submit a request to limit data processing in the cases specified in the GDPR; in the event of such a request - the Administrator is required to limit operations on personal data to the extent and on the principles set out in the GDPR, in principle to store them);

   5. object to the processing of personal data
      (i.e. to object to the processing of personal data on the basis of the justified interest of the Administrator, in a manner binding for the Administrator, unless there are other, prevailing legitimate grounds for the processing of data by the Administrator. The data subject has in particular the right to object to the processing data for direct marketing, including profiling. 

   6. transferring personal data
      (i.e. to obtain from the Administrator their personal data provided to the Administrator or to indicate another administrator to whom the Administrator would transfer it, if it is technically possible);

   7. withdrawal of consent to process data at any time, however, without affecting the lawfulness of the processing that was carried out on the basis of consent before its withdrawal;

   8. lodging a complaint to the supervisory authority
      (i.e. to the President of the Office for the Protection of Personal Data if the data subject finds that the processing of personal data violates applicable provisions on the protection of personal data).

2. PERIOD OF STORING PERSONAL DATA
   

The period of data processing by the Administrator depends on the basis and purpose of processing. As a rule, personal data is stored for the duration of the contracts between the Administrator and the data subjects and for the period resulting from the limitation period for claims, bookkeeping or other rights or obligations under applicable law. 

If the processing is based on consent, the data is processed until it is withdrawn (if the Administrator has no right to process data on a different legal basis). 

Personal data processed for the purposes of direct marketing are generally processed until objection to their processing for this purpose, or withdrawal of consent (if the data is processed on the basis of consent given).

7. RECIPIENTS OF PERSONAL DATA
   

The recipients of personal data may be external entities, in particular entities cooperating with the Administrator in connection with the organization of events (including entities providing information and order services for the purposes of events, entities that control access to events), IT service providers, courier companies and postal entities providing accounting and legal services, as well as entities to which the Administrator is obliged to provide personal data on the basis of mandatory provisions of law. 

8. TRANSMISSION OF DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANIZATION
   

Personal data is not transferred to a third country or international organization within the meaning of the GDPR. 

9. AUTOMATED DECISION MAKING, INCLUDING PROFILING
   

   1. In order to implement some of the Administrator's marketing activities, namely behavioral advertising, the Administrator may use the so-called profiling, and thus by automatic processing of data assess selected factors concerning data subjects in order to analyze their behavior or create a forecast for the future. Behavioral advertising consists in displaying or sending to data subjects advertising content that corresponds to their interests or location, i.e. consists in displaying or sending personalized and tailored advertising or location of these persons.

   2. In the case of behavioral advertising, the processing of data (in particular collected via cookies) may also include user profiling. In principle, the condition for such processing is consent to the use of cookies, which can be withdrawn at any time (for more information on the so-called cookies and the indicated consent, see point IV of the Privacy Policy). In addition, in the case of behavioral advertising carried out by Facebook and Google, if the user uses their websites or tools, the condition for such profiling is not blocking ads within the websites of these entities (more information about blocking ads within the websites of these entities can be found on these websites entities). Withdrawal of consent regarding so-called files cookie on the Website will cause cessation of the above-mentioned profiling on this Website. Blocking ads on Facebook and Google will stop the abovementioned profiling by these entities to the extent that the blockade occurred. 

   3. Profiling will not have any legal effects or similarly significantly affect the situation of users. 

IV. SOFTWARE FILES COOKIE

The website uses so-called files. cookie. Anyone can change the settings for the so-called files at any time by choosing the appropriate browser option. cookies, in particular by blocking the use of so-called files cookies or their removal. Detailed information about the possibilities and ways of handling so-called files cookies are available in the browser settings used by the person. Permission to use so-called files cookie or not disabling this option, if it is enabled by default, means that so-called files cookies will be placed on the end device and the Website will be able to access them. The administrator informs that disabling the so-called files cookie may cause difficulties in using the Website or prevent it from being used. File mechanism cookie does not allow the Administrator to download any personal data or any confidential information from the user's end device. 

The administrator may use so-called files. so-called cookie own in particular for the following purposes:

1. Website configuration, including:
   

   1. adapt the content of the Website to the user's preferences and optimize the use of the Website;

   2. recognition of the user's end device using the Website and its location and appropriate display of the Website tailored to his individual needs;

2. User authentication within the Website and providing him with sessions as part of the abovementioned Pages including:
   

   1. maintaining the session (after logging in);

   2. correct configuration of selected Website functions, including in particular verification of the authenticity of the browser session;

   3. optimizing and increasing the efficiency of services provided by the Administrator;

3. Implementation of processes necessary for the full functionality of the Website, including:
   

   1. adapt the content of the Website to the user's preferences and optimize the use of the Website. In particular, so-called files cookies in this case allow to recognize the basic parameters of the user's end device and properly display the Website, tailored to his individual needs;

   2. proper handling of the partner program, including in particular verification of sources of users' redirection to the Website;

   3. enable the use of certain functions on the Website;

4. Analysis and research as well as audience audit, including the creation of anonymous statistics that help understand how users use the Website, which allows improving its structure and content; 

5. Ensuring the security and reliability of the Website.

The administrator may also use so-called files. so-called cookie external, in particular for the following purposes:

1. Presenting multimedia content on the Website that is downloaded from an external website, e.g. youtube;

2. Collecting general and anonymous static data via analytical tools, e.g. Google Analytics;

3. Presenting ads tailored to users' preferences using an online advertising tool, e.g. Google Adwords;

4. Popularizing the Website using social networking sites such as Facebook.com, Instagram.com and others.

Aeropact Boarding Pass regulations