ŁDF / Privacy policy

Privacy policy

This Privacy Policy lays down the rules for the processing of personal data acquired via www.lodzdesign.com (hereinafter: “Website“).
The owner of the Website and, at the same time, the data controller is Fundacja Łódź Art Center, ul ul. Tymienieckiego 3, 90-365 Łódź, entered in the register of the National Court Register kept by the DISTRICT COURT FOR ŁÓDŹ-SRODMIESCIE IN ŁÓDŹ, 20TH DIVISION OF THE NATIONAL COURT REGISTER with KRS number 0000246599, NIP: 7282604912, REGON: 100146798, hereinafter referred to as ŁAC.
Personal data collected by ŁAC by means of the Website are processed in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), also referred to as GDPR.
You can contact the Data Protection Officer for the data collected by ŁAC at the following email address: iod@lodzartcenter.com.
ŁAC takes great care to respect the privacy of the Users visiting the Website.

§1 ŁAC TAKES GREAT CARE TO RESPECT THE PRIVACY OF THE USERS VISITING THE WEBSITE.

Your personal data are collected in case of:
a) subscription to the Newsletter, for the purpose of performing a contract for the provision of services by electronic means. Legal basis – consent of the data subject to the performance of the Newsletter service contract (Article 6(1)(a) of the GDPR).
b) using the registration forms available on the Website in order to perform the contract provided by electronic means. Legal basis: necessity to perform the contract for the provision of registration form service (Article 6(1)(b) of the GDPR).
Should you use the Newsletter service, you only need to provide your email address.
Should you use the registration form service, you need to provide your email address, first name and surname, and – in justified cases (e.g. for the purposes of make me! competition) also, among others: date of birth, country of origin, and telephone number.
While using the Website, additional information may be collected, including, but not limited to: the IP address assigned to the User’s computer or the external IP address of the Internet operator, domain name, browser type, access time, type of the operating system.
We may also collect navigation data from you, including information about links and references you decide to click on or other actions taken by you on the Website. Legal basis – legitimate interest (Article 6(1)(f) of the GDPR) to facilitate the use of services provided by electronic means and to improve the functionality of these services.
You provide personal data to ŁAC on a voluntary basis in order to receive services via the Website, however failing to provide the data specified in the forms will make your registration impossible.
Personal data will not be subject to any decision based solely on automated processing, including profiling, which produces legal effects or affects the decision in a similar manner.

§2 WHOM WE TRANSFER OR ENTRUST THE DATA TO AND FOR HOW LONG WE STORE THEM?

Your personal data are transferred to the service providers employed by ŁAC to operate the Website. The service providers to whom personal data are transferred, depending on contractual arrangements and circumstances, are either subject to instructions from ŁAC as to the purposes and methods of processing (processors) or determine the purposes and methods of processing themselves (controllers).
a) Processors. ŁAC uses providers who process personal data only at ŁAC’s instruction. They include, but are not limited to, providers of hosting services, accounting services, providers of marketing systems, systems for Website traffic analysis, systems analysing the effectiveness of marketing campaigns;
b) Controllers. ŁAC uses providers who do not act exclusively on instruction and determine the purposes and uses of your personal data themselves. Such providers render electronic payment and banking services.
Location. Service providers are mainly established in Poland and in other countries of the European Economic Area (EEA).
Storage. Where the legal basis for the processing of personal data is your consent, your personal data are processed by ŁAC until such consent is revoked, and after the consent is revoked, for a period of time corresponding to the period of limitation of claims that may be raised by ŁAC and those that may be raised against it. If not otherwise stipulated by a specific law provision, the period of limitation is 6 years, and for periodic performance claims and business-related claims – 3 years.
Navigation data may be used to ensure better user experience, to analyse statistical data and to customise the Website to your preferences, as well as to administer the Website.
Should you subscribe to the Newsletter, ŁAC will send electronic messages containing information related to the registered activities of ŁAC to your email address, including information about events, publications, and activities of the foundation’s partners.
Upon request, ŁAC makes personal data available to authorised state authorities, in particular to organisational units of the Prosecutor’s Office, the Police, the President of the Personal Data Protection Office, the President of the Office of Competition and Consumer Protection, or the President of the Office of Electronic Communications.

§3 COOKIES, IP ADRESS

The Website uses small files called cookies. They are saved by ŁAC on the end device of the Website visitor, if the Internet browser allows it. A cookie typically contains the name of the domain from which it comes, its “expiry time”, and a unique random number that identifies the cookie. The information collected by such cookies helps to customise ŁAC’s offer to the individual preferences and actual needs of Website visitors. They also make it possible to produce general statistics on visits to products presented on the Website.
ŁAC uses two types of cookies:
a) Session cookies: once a browser session ends or the computer is turned off, the information stored by cookies is deleted from the device’s memory. The mechanism of session cookies does not allow to collect any personal data or any confidential information from your computer.
b) Persistent cookies: these are stored in the memory of your terminal device and remain there until they are deleted or expire. The mechanism of permanent cookies does not allow to collect any personal data or any confidential information from your computer.
ŁAC uses cookies for:
a) analysis and research, as well as viewing audits, and in particular for generating anonymous statistics which help to understand how Users use the Website, which in turn allows to improve its structure and content.
b) collect general and anonymous statistical data using Google Analytics tools (third-party cookie administrator: Google Inc. based in the USA);
The cookie mechanism is harmless to the computers of Website Users. In particular, it is not possible for viruses or other unwanted software or malware to get into Users’ computers via cookies. Nevertheless, the Users have the possibility to limit or disable access of cookies to the computer in the browsers. It is possible to use the Website with this option selected, except for those functions that by their nature require cookies.
Below we explain how to change the cookie settings of popular web browsers:
a) Google Chrome
Należy kliknąć na menu (w prawym górnym rogu), zakładka Ustawienia >
Click on the menu (top right-hand corner), tab Settings > Show advanced settings. In the “Privacy” section, click on the Content settings button. In the “Cookies” section, you can change the following cookie settings:
• Delete cookies
• Block cookies by default
• Enable cookies by default
• Save cookies and page data by default until you close your browser
• Exceptions for cookies from specific sites or domains
b) Internet Explorer
From the browser menu (top right-hand corner) select: Tools > Internet Options > Privacy, Websites button. Use the slider to set the desired level, and confirm with OK.
c) Mozilla Firefox
From the browser menu, select: Tools > Options > Privacy. Activate the Firefox box: “Use user settings”.
You can decide whether to accept cookies by clicking on the Accept cookies box.
d) Opera
From the browser menu, select: Tool > Preferences > Advanced.
You can decide whether to accept cookies by clicking on the Cookies item.
e) Safari
In the Safari drop-down menu, select Preferences and click the Security icon. Here you select the security level under “Accept cookies”.
ŁAC may collect IP addresses of Users. An IP address is a number assigned to the computer of a person visiting the Website by the Internet operator. The IP number enables access to the Internet. In most cases, it is assigned to a computer dynamically, i.e. changes each time the device connects to the Internet. The IP address is used by ŁAC to diagnose technical problems with the server, to generate statistical analyses (e.g. determination of regions with the highest number of visits), as information useful for administration and improvement of the Website, as well as for security purposes and possible identification of unwanted automatic programmes for browsing the Website which increase the server load.
The Website includes links and references to other websites. ŁAC is not liable for the privacy practices of such other websites

§4 RIGHTS OF DATA SUBJECTS

Right to withdraw consent – legal basis: Article 7(3) of the GDPR.
a) You have the right to withdraw any consent you have granted to ŁAC.
b) Withdrawal of consent takes effect as of the moment of withdrawal.
c) Withdrawal of consent does not affect the legality of the processing carried out by ŁAC before the withdrawal.
d) Withdrawal of consent does not involve any negative consequences for you, but it may prevent further use of services or features which, under law regulations, ŁAC may only provide with consent.
Right to object to data processing – legal basis: Article 21 of the GDPR.
a) You have the right to object – on grounds relating to their particular situation – at any time to the processing of your personal data where ŁAC processes your data on the basis of a legitimate interest, e.g. marketing of ŁAC’s products and services, compiling statistics on the use of particular features of the Website and facilitating the use of the Website, as well as a satisfaction survey.
b) Should you opt out by e-mail from receiving marketing communications about products or services, this will imply your objection to the processing of your personal data.
c) If your objection proves to be valid and ŁAC has no other legal basis for the processing of your personal data, your personal data will be erased.
Right to erasure (“right to be forgotten”) – legal basis: Article 17 of the GDPR.
a) You have the right to request that all or some of your personal data be erased.
b) You have the right to request the erasure of your personal data if:
• the personal data are no longer necessary for the purposes for which they were collected or processed;
• you have withdrawn a specific consent, to the extent that personal data were processed on the basis of this consent;
• you have objected to the use of your data for marketing purposes;
• your personal data are being processed unlawfully;
c) Notwithstanding a request for erasure of personal data, following an objection or withdrawal of consent, ŁAC may keep certain personal data to the extent that the processing is necessary for the establishment, exercise, or defence of claims, as well as for complying with a legal obligation requiring processing under Union law or the law of a Member State to which ŁAC is subject. This applies in particular to personal data including: first name, surname, email address, which are kept for the purpose of handling complaints and claims relating to the use of ŁAC’s services, or additional data which are kept for the purpose of handling complaints and claims relating to sales contracts concluded or services provided.
Right to restriction of processing – legal basis: Article 18 of the GDPR.
a) You have the right to request that the processing of your personal data be restricted. Filing such a request, until it is considered, prevents the use of certain features or services involving the processing of the data covered by the request. ŁAC will also not send any messages, including marketing messages, to you.
b) You have the right to request the restriction of the use of your personal data in the following situations:
• if you contest the accuracy of your personal data;
• when the processing is unlawful and instead of erasure, you request the restriction of the use of your data;
• when the personal data are no longer necessary for the purpose for which they were collected or used, but you need them in order to establish, exercise or defend your claims;
• if you have objected to the use of your data.
Right of access – legal basis: Article 15 of the GDPR.
You have the right to obtain confirmation from the Controller as to whether it is processing your personal data and, if so, you have the right to:
• access your personal data;
• obtain information on the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of these data, the planned period of storage of your data or the criteria for determining this period (when it is not possible to anticipate the planned period of data processing), your rights under the GDPR and your right to lodge a complaint with the supervisory authority, the source of these data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of these data outside the European Union;
• obtain a copy of your personal data.
Right to rectification – legal basis: Article 16 of the GDPR
You have the right to request the Controller to rectify without delay any personal data concerning you that is inaccurate. Subject to the purposes of the processing, the User to whom the data relates has the right to request that incomplete personal data be completed, including by providing an additional statement, by sending a request to the email address specified in §5 of the Privacy Policy.
Right to data portability – legal basis: Article 20 of the GDPR.
You have the right to receive your personal data that you have provided to the Controller, and then forward it to another controller of your choice. You have also the right to request that your personal data be sent by the Controller directly to such another controller, if this is technically feasible. In this case, the Controller will send your personal data in the form of a file in .csv format, which is a common machine-readable format that enables the transfer of the data to another controller.
Should you request to exercise any of the aforementioned rights, ŁAC will either satisfy the request or refuse to satisfy it immediately, but no later than within one month of receiving the request. Nevertheless, if – due to the complexity of the request or the number of requests – ŁAC is not able to satisfy the request within one month, it will satisfy it within the next two months, informing you previously, within one month of receiving the request, of the prolongation of the deadline and the reasons for it.
You may lodge complaints, enquiries and requests to the Controller regarding the processing of your personal data and the exercise of your rights.
You have the right to request ŁAC to provide a copy of the standard contractual clauses by submitting a request as indicated in §5 of the Privacy Policy.
You have the right to lodge a complaint with the President of the Personal Data Protection Office regarding infringement of your data protection rights or other rights afforded under the GDPR.

§5 CHANGES TO THE PRIVACY POLICY

The Privacy Policy is subject to change, of which ŁAC will inform the Users 7 days in advance.
In case of questions related to the Privacy Policy, please contact: iod@lodzartcenter.com.
Date of last revision: 07.01.2023 r.