Privacy and Cookies Policy

§ 1. General Provisions

The administrator of personal data collected via the magdalenakapela.comwebsite is KAPELLA ART. SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, entered into the register of entrepreneurs of the National Court Register under number KRS 0000830738, whose registration files are kept by the District Court in Bielsko-Biała, VIII Commercial Division of the National Court Register, place of business and address for service prof. dr Mieczysława Michałowicza 12, 43-300 Bielsko-Biała, NIP: 5472217560, REGON: 38562239300000, email address: kontakt@magdalenakapela.pl, phone number: 501 686 882, hereinafter referred to as the 'Administrator'. Personal data collected by the Administrator via the website is processed in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR.

§ 2. Type of Personal Data Processed, Purpose, and Scope of Data Collection

PURPOSE OF PROCESSING AND LEGAL BASIS. The Administrator processes the personal data of users of the magdalenakapela.comwebsite in the case of signing up for the Newsletter to send commercial information electronically. Personal data is processed upon separate consent, based on art. 6 sec. 1 lit. a) GDPR. TYPE OF PERSONAL DATA PROCESSED. In the case of the Newsletter, the user provides their first name and last name, email address. DURATION OF PERSONAL DATA STORAGE. Personal data of users is stored by the Administrator: In the case where the basis for data processing is the performance of a contract, as long as it is necessary for the performance of the contract, and after that time for a period corresponding to the statute of limitations for claims. In the case where the basis for data processing is consent, as long as the consent is not withdrawn, and after withdrawal of consent for a period corresponding to the statute of limitations for claims. Additional information may be collected when using the website, including IP address, domain name, browser type, access time, and operating system type.

§ 3. Sharing Personal Data

The personal data of users is transferred to service providers used by the Administrator in the operation of the website. Service providers to whom personal data is transferred, depending on contractual arrangements and circumstances, either act on the instructions of the Administrator regarding the purposes and means of processing this data (processors) or determine the purposes and means of processing themselves (controllers). Personal data of users is stored exclusively within the European Economic Area (EEA).

§ 4. Right to Control, Access, and Correct Personal Data

The person whose data is being processed has the right to access their personal data and the right to rectify, delete, restrict processing, the right to data portability, the right to object, the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. To exercise these rights, you can send an appropriate email to: kontakt@magdalenakapela.pl

§ 5. Cookies

The Administrator's website uses 'cookies'. Installing 'cookies' is necessary for the proper provision of services on the website. The website uses two types of 'cookies': 'session' and 'permanent'. The user has the right to decide on the access of 'cookies' to their computer by selecting them in their browser window beforehand.

§ 6. Final Provisions

The Administrator uses technical and organizational measures to ensure the protection of processed personal data appropriate to the threats and the category of data protected, and in particular to protect the data against unauthorized access, acquisition by an unauthorized person, processing in violation of applicable laws, and changes, loss, damage, or destruction. In matters not covered by this Privacy Policy, the provisions of GDPR and other relevant provisions of Polish law shall apply accordingly.