This Policy is addressed to users of the website
https://www.miceisnice.pl/
[Website]. This Policy describes the rules for collecting and
using the data of Website users, gathered directly from them or via cookies and
similar technologies.
Data Controller and Contact Details
The controller of the data collected in connection with the use of the Website is
Śląska Organizacja Turystyczna (Silesian Tourist Organization), based in Katowice at
ul. Mickiewicza 29. In matters related to the processing of personal data, you may
contact the Personal Data Officer.
Contact details for personal data matters:
email address:
info@silesiaconvention.pl
Scope and Purposes of Data Collection
-
The data of persons who are registered users of the
miceisnice.pl portal are processed on the basis of the
controller's legitimate interest (Article 6(1)(f) of Regulation 2016/679 of
27 April 2016 on the protection of natural persons with regard to
the processing of personal data and on the free movement of
such data, and repealing Directive 95/46/EC – hereinafter "GDPR"),
in the form of providing the portal for the purposes of publishing promotional
materials and managing users of the portal – for the duration of holding
an account on the portal.
-
The Controller collects data related to your activity, such as
time spent on the site, search phrases used, the number of subpages
viewed, the date and source of the visit, in order to analyze network traffic,
ensure security within the Website, and tailor content
to users' needs, on the basis of the Controller's legitimate interest
(Article 6(1)(f) GDPR).
Providing data necessary for the statistical analysis of Website users
is voluntary. You may use so-called incognito mode
to browse the site without providing the Controller with information
about your visit to the Website. Using incognito mode, and therefore not providing this
data, does not affect your ability to use the Website.
-
In connection with the placement of the "Like" plugin on the site, the Controller
transfers data to Facebook on the terms set out in
Facebook's privacy policy
.
By clicking the plugin link, the user voluntarily transfers their data.
-
Data is also collected in connection with running the
Silesia Convention Bureau fan page on the Facebook social network. The Controller
enables contact via the Facebook Messenger,
posting comments under posts, and assigning reactions
("emojis") to a given post. The Controller processes personal data,
including in particular the first name, last name, or username
on the Facebook portal, on the basis of a legitimate interest
(Article 6(1)(f) GDPR).
The content of correspondence and contact information is processed for the
time necessary to handle the user's matter, and subsequently for archiving
purposes and, where necessary, to pursue or defend against
potential claims. After that time, the information is deleted from the
Controller's fan page and will no longer be accessible.
-
The Controller may use statistical tools provided
by Facebook as part of its marketing campaigns.
In this regard, the Controller collects only statistical data
covering age, gender, location, and interests, in order to
tailor content and marketing campaigns to users,
within the scope of the Controller's legitimate interest
(Article 6(1)(f) GDPR). Data is collected for the duration of running the
fan page.
-
The Controller may run contests on its fan page.
As part of organizing a contest and selecting a winner, it processes
users' data, including in particular the user's first and last name,
as its own legitimate interest (Article 6(1)(f) GDPR).
Data is processed on the fan page for the duration of the contest,
and subsequently to the extent necessary to pursue or defend against claims.
-
The Controller collects the data of persons who have signed up for the
newsletter. The purpose of the processing is to send messages of a
promotional nature based on the person's voluntary consent – until it is
withdrawn by unsubscribing.
Providing your email address is voluntary but necessary to receive
information about news and promotions.
Your Rights Under the GDPR Regarding the Processed Data
You have the right to:
-
request access to your data from the Controller, and to receive
a copy of it (Article 15 GDPR);
-
request that the Controller rectify or correct your data
(Article 16 GDPR), where the data is inaccurate or incomplete;
-
request that the Controller erase your data (Article 17 GDPR);
-
request that the Controller restrict processing (Article 18 GDPR),
for example if you notice that the data is inaccurate – for a period
allowing the Controller to verify its accuracy;
-
lodge a complaint regarding the Controller's processing of personal
data with the President of the Personal Data Protection Office.
Recipients of Your Personal Data
Recipients of your personal data may only be entities that are
authorized to receive it under the law. In addition, your data
may be shared with entities cooperating with the Controller under
concluded agreements and providing the Controller with support services in
pursuit of the purposes of processing indicated above.
Data Retention Period
Your personal data will be stored until consent is withdrawn or
until the matter is resolved, and thereafter until the expiry of the limitation period for
claims of the parties related to its performance.
Data related to network traffic analysis, collected via cookies
and similar technologies, may be stored until the cookie
expires. Some cookies never expire,
in which case the data retention period will correspond to the time
necessary for the Controller to achieve the purposes related to collecting
data, such as ensuring security and analyzing historical data
related to traffic on the site.
Transfer of Data to a Third Country or International Organization
Your data will not be transferred to third countries or international
organizations.
Use of Cookies and Similar Technologies
The Website enables the collection of information about the user via
cookies and similar technologies, the use of which
usually involves installing this tool on the user's device,
such as a computer or smartphone.
This information is used to remember the user's decisions,
such as font choice, contrast, or acceptance of the policy, to maintain the user's
session, e.g. after logging in, to remember a password with the user's
consent, to gather information about the device and the user's visit,
to ensure security, to analyze visits, and to tailor content.
Information obtained via cookies and similar
technologies is not combined with other Website users' data and is not used by
the Controller to identify them.
Users can set their browser to block certain types of
cookies and other technologies, specifying, for example, that only files
necessary for the correct display of the site will be allowed.
By default, most browsers allow the use of all cookies,
but users can change these settings at any time or delete
cookies that have already been installed. Every browser enables
this to be done via one of the options available in its settings or
preferences.
Users may also use the site in so-called incognito mode, which
limits the ability to collect data about their visit.
Using the Website without changing browser settings, i.e. with the default
acceptance of cookies and similar technologies, constitutes consent to their
use for the purposes specified above. The Controller does not use the
information obtained for marketing purposes.