Privacy Policy

1. General Information

This Privacy Policy sets out the principles governing the processing of personal data and the use of cookies in connection with the use of the website festiwalbronidziwnej.pl.

The Data Controller is:

2. Contact Regarding Personal Data

If you have any questions regarding the processing of your personal data or the exercise of your rights under the General Data Protection Regulation (GDPR), you may contact the Data Controller at: szkolenia.md@gmail.com.

3. Scope of Personal Data Processed

Depending on the purpose of your contact with us or your use of the Website, the Data Controller may process the following personal data:

• full name,
• email address,
• telephone number,
• firearm licence number and the name of the authority that issued the licence,
• residential address,
• information necessary for issuing invoices,
• technical data related to the use of the Website, including IP address, device information, and cookies.

4. Purposes and Legal Bases for Processing

Personal data are processed for the following purposes:

a) Registration for Events

Personal data are processed for the purpose of registering participants for events organised by the Data Controller. Legal basis: Article 6(1)(b) GDPR — processing necessary to take steps prior to entering into a contract and for the performance of a contract.

b) Communication with Users

Personal data may be processed to respond to enquiries submitted through the Website or by email. Legal basis: Article 6(1)(f) GDPR — the legitimate interests of the Data Controller consisting of communicating with users.

c) Issuing Accounting and Tax Documents

Personal data may be processed for issuing invoices and complying with accounting and tax obligations. Legal basis: Article 6(1)(c) GDPR — compliance with a legal obligation to which the Data Controller is subject.

d) Newsletter

If a newsletter service is introduced, personal data will be processed based on the user's consent. Legal basis: Article 6(1)(a) GDPR — the data subject's consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.

e) Website Analytics and Service Improvement

The Data Controller uses Google Analytics to analyse website traffic and improve the quality and functionality of the Website.

f) Maintaining Mandatory Shooting Range Records

Where events are organised at a shooting range operating under applicable legal regulations, the Data Controller may process personal data for the purpose of maintaining the legally required register of persons using the shooting range or participating in shooting activities. Legal basis: Article 6(1)(c) GDPR — processing necessary for compliance with a legal obligation to which the Data Controller is subject.

5. Recipients of Personal Data

Personal data may be disclosed only to entities cooperating with the Data Controller to the extent necessary for the provision of services, including:

• website hosting providers,
• website infrastructure providers,
• analytics service providers, including Google Analytics,
• email marketing providers (once the newsletter service is implemented),
• accounting service providers,
• IT support providers.

Personal data are not sold to third parties.

6. Transfers of Personal Data Outside the European Economic Area

Certain personal data may be transferred outside the European Economic Area (EEA) in connection with the use of services provided by companies such as Google.

Whenever such transfers take place, the Data Controller ensures that they are carried out in accordance with the applicable provisions of the GDPR and are protected by appropriate safeguards, including the European Commission's Standard Contractual Clauses (SCCs), where required.

7. Data Retention Period

Personal data will be retained:

• for the period necessary to organise and conduct the event,
• for the period required by applicable accounting and tax legislation,
• until consent is withdrawn, where processing is based on consent (e.g. newsletter),
• until a valid objection is raised, where processing is based on the legitimate interests of the Data Controller.

8. Your Rights

Every data subject has the right to:

• access their personal data,
• request rectification of inaccurate or incomplete data,
• request erasure of personal data ("right to be forgotten"),
• request restriction of processing,
• receive their personal data in a portable format,
• object to the processing of personal data,
• withdraw consent at any time, where processing is based on consent,
• lodge a complaint with the competent supervisory authority responsible for data protection.

9. Voluntary Provision of Personal Data

Providing personal data is voluntary. However, certain information may be required in order to register for an event or to contact the Data Controller. Failure to provide the required personal data may prevent the Data Controller from providing the requested services or responding to your enquiry.

10. Cookies

The Website uses cookies for the following purposes:

• ensuring the proper operation and security of the Website,
• analysing website traffic and visitor statistics,
• improving the functionality and performance of the Website,
• supporting analytical and marketing activities.

Cookies may be stored both by the Data Controller and by third-party service providers, including Google.

11. Types of Cookies Used

The Website may use the following categories of cookies:

a) Essential Cookies

These cookies are necessary for the proper functioning of the Website and cannot be disabled in our systems.

b) Analytical Cookies

These cookies collect information about how visitors use the Website, allowing the Data Controller to analyse traffic and improve the Website's performance and user experience.

c) Marketing Cookies

Marketing cookies may be used for advertising and remarketing purposes if the relevant marketing tools are implemented on the Website.

12. Managing Cookies

Users may manage or disable cookies at any time through their web browser settings. Please note that restricting or disabling certain cookies may affect the functionality and performance of the Website.

13. Newsletter

If a newsletter service is introduced, users will be able to subscribe by providing their email address and giving their explicit consent to receive electronic communications.

The newsletter may include:

• information about upcoming events,
• announcements of new event dates,
• educational materials,
• marketing communications relating to the activities of Festiwal Broni Dziwnej and M.D. Shooting.

Every newsletter will include an unsubscribe link, allowing users to withdraw their consent at any time.

14. Data Security

The Data Controller implements appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access, or any other form of unlawful processing.

These measures are regularly reviewed and updated where necessary to ensure an appropriate level of security in accordance with Article 32 of the GDPR.

15. Changes to this Privacy Policy

The Data Controller reserves the right to amend this Privacy Policy at any time, particularly where required due to changes in applicable laws, technological developments, organisational changes, or modifications to the services provided through the Website.

The current version of this Privacy Policy will always be published on the Website.

16. Contact

If you have any questions regarding this Privacy Policy or the processing of your personal data, you may contact the Data Controller at: