Privacy policy
This privacy policy, together with the established security standards, fulfills the obligation pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) imposed on the Personal Data Controller.Our primary goal is to maintain the confidentiality, integrity and availability of personal data and to process them in accordance with the adopted principles and legal provisions, and in particular to maintain the highest security standards regarding the processes and IT systems used to process personal data and in such a way that in no case there was a violation of the fundamental rights and freedoms of the personal data subjects.
1. The data controller is the Poznań Tourism Organization with its registered office in Poznań (61-841) at Plac Kolegiacki 17, entered into the register of associations, other social and professional organizations, foundations and independent public health care facilities of the National Court Register kept by the Court. District Poznań - Nowe Miasto and Wilda in Poznań, 8th Commercial Division of the National Court Register under the KRS number: 0000165637, with tax identification number (NIP) 7781412473, tel.: 61 8785 506, e-mail address: biuro@plot.poznan.pl
2. Contact details of the data protection officer at the Poznań Tourism Organization: biuro@plot.poznan.pl
3. Data collected by the Poznań Tourism Organization is collected for the purpose of:
1. provision of services related to the "Poznań Tourist Card" by the Poznań Tourism Organization and system partners (Article 6(1)(a) - consent of the data subject and Article 6(1)(b) - contract, General Regulation on data protection of April 27, 2016);
2. conducting settlements, accounting and reporting (Article 6(1)(c) - legal obligation of the controller, General Data Protection Regulation of April 27, 2016);
3. keeping statistics (Article 6(1)(f) - legitimate interests of the controller, General Data Protection Regulation of April 27, 2016);
4. monitoring (Article 6(1)(f) - legitimate interests of the controller, General Data Protection Regulation of April 27, 2016);
5. cookie processing (Article 6(1)(f) - legitimate interests of the controller, General Data Protection Regulation of April 27, 2016).
4. Your data will be shared:
1. entities cooperating with the administrator in connection with the implementation of the contract, including an entity providing professional legal, accounting and HR services;
2. postal operators or courier companies in connection with the performance of the contract;
3. external entities providing IT support;
4. entities authorized to obtain them, if required by law.
2. postal operators or courier companies in connection with the performance of the contract;
3. external entities providing IT support;
4. entities authorized to obtain them, if required by law.
5. Your rights in connection with the processing of personal data:
1. access to your data, including confirmation of their processing, receiving a copy of the data and information about their processing (Article 15 of the GDPR),
2. rectification of incorrect data or completion of incomplete data (Article 16 of the GDPR),
3. deletion of data if the Administrator no longer has a legal basis for processing it or the data is no longer necessary for the purposes of processing (Article 17 of the GDPR),
4. restrictions on data processing (Article 18 of the GDPR),
5. transferring data, including receiving it in a structured, machine-readable format or requesting that it be sent to another Administrator (Article 20 of the GDPR),
6. object to processing for purposes arising from the legitimate interests of the Administrator, in particular direct marketing and profiling carried out for these purposes (Article 21 of the GDPR),
7. withdrawal of consent to the processing of personal data when it constitutes the basis for data processing, which, however, does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal (Article 7(3) of the GDPR),
8. submit a complaint to the supervisory authority - the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
2. rectification of incorrect data or completion of incomplete data (Article 16 of the GDPR),
3. deletion of data if the Administrator no longer has a legal basis for processing it or the data is no longer necessary for the purposes of processing (Article 17 of the GDPR),
4. restrictions on data processing (Article 18 of the GDPR),
5. transferring data, including receiving it in a structured, machine-readable format or requesting that it be sent to another Administrator (Article 20 of the GDPR),
6. object to processing for purposes arising from the legitimate interests of the Administrator, in particular direct marketing and profiling carried out for these purposes (Article 21 of the GDPR),
7. withdrawal of consent to the processing of personal data when it constitutes the basis for data processing, which, however, does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal (Article 7(3) of the GDPR),
8. submit a complaint to the supervisory authority - the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
6. Providing personal data is voluntary, but necessary to conclude contracts, settle business activities and comply with legal requirements.
7. Personal data will not be processed in an automated manner and will not be profiled.
8. The data controller has no intention of transferring personal data to a third country or international organization.
9. Depending on the purpose, data will be processed until:
a. art. 6(1)(a) a GDPR - consent of the data subject - until the consent is withdrawn or the project is completed;
b. art. 6(1)(a) b - performance of the contract - until the limitation period for claims arising from the contract in accordance with applicable law;
c. art. 6 section 1 letter c - legal obligation imposed on the administrator - in accordance with applicable law;
d. art. 6 section 1 letter f – legitimate interests of the administrator – until an objection to data processing is raised.
b. art. 6(1)(a) b - performance of the contract - until the limitation period for claims arising from the contract in accordance with applicable law;
c. art. 6 section 1 letter c - legal obligation imposed on the administrator - in accordance with applicable law;
d. art. 6 section 1 letter f – legitimate interests of the administrator – until an objection to data processing is raised.
The Website may contain links to other websites. Such websites operate independently of the Website and are not supervised in any way by the Poznań Local Tourist Organization. These websites may have their own privacy policies and regulations, which we recommend that you read.