In accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter “GDPR”) we inform you that:

  1. The personal data administrator is KAWA.SKA Spółka z o.o. with its registered office at ul. Zaczarowej Róży 1, 05-540 Zalesie Górne  (hereinafter referred to as “Administrator“);
  2. Your personal data will be processed for the purposes of:
  3. organisation of the event, which constitutes a legitimate interest of the Administrator (Article 6(1)(f) of the GDPR).
  4. in the case of dissemination of data in the form of image – promotion of the Administrator (to the extent resulting from the granted consent to disseminate the image expressed in accordance with Article 81 of the Act of 4 February 1994 on Copyright and Related Rights hereinafter: copyright consent) – the legal basis for processing is Article 6(1)(f) of the GDPR.

NOTE: in the event of participation in a workshop/event organised by the Administrator which is recorded by means of film or photographs, taking part in it is tantamount to consenting to the recording and free use and/or dissemination of the image in promotional and marketing materials without time and territorial restrictions. The consent so given shall include all forms of dissemination and making available, in particular making available on the administrator’s website, on profiles operated by the administrator on social media sites such as Facebook, and in printed or electronically transmitted promotional material on the Internet. The image may be used for various forms of electronic image processing, cropping and composition, without any obligation to accept the final product, but not in forms that are offensive or generally considered unethical. The participant’s image of the event will be juxtaposed with images of other participants and with content relating to the subject matter of the Administrator and its Partners: Leica Microsystems GmbH, Cephares  and the Jerzy Maj Institute of Pharmacology of the National Academy of Sciencesincluding content of a marketing and promotional nature. 

  1. the fulfilment of the Administrator’s legitimate interest in establishing, asserting or defending against claims relating to the inclusion of personal data in promotional material, if such claims are made (Article 6(1)(f) of the GDPR),
  2. the fulfilment of the Administrator’s legitimate interest in establishing, asserting or defending against claims related to the organised event, if such claims are made (Article 6(1)(f) of the GDPR).
  3. indicated in the content of the consents for the processing of personal data, if such consents were given (Article 6(1)(a) of the GDPR),
  4. in order to carry out marketing activities*, which is the fulfilment of the Administrator’s legitimate interest (Article 6(1)(f) of the GDPR), including if you have consented to a form of communication e.g. email then marketing will be sent by a specific communication source of your choice. 

*Marketing activities via an e-mail address or telephone number are carried out on the basis of a separate consent for the use of the respective communication channel on the basis of the Electronic Services Act (Article 10 ) and the Telecommunications Act (Article 172).

  1.  Recipients of your data may be:
  1. providers of external ICT systems, providing support and IT solutions,
  2. contractors and suppliers, including Partners supporting the Administrator and conducting the event/workshop: Leica Microsystems, Cephares and the Jerzy Maj Institute of Pharmacology of the National Academy of Sciences, 
  3. providers of accounting, debt collection or legal services,  
  4. security companies,
  5. state authorities or other entities authorised by law, if this is necessary for the fulfilment of legal obligations.
  1. Your data will be processed for a period of time: 
  1.  until the end of the event, and if claims may arise from the processing, the data will be stored until the expiry of the limitation periods for such claims,
  2. until the publication of the promotional material has been completed,
  3. until the expiry of the limitation periods for claims relating to your image included in the Administrator’s promotional material,
  4. if the specified data are processed on the basis of the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR) and an effective objection to the processing is raised before the expiry of the basic storage period, then the data will be processed for this specified purpose for a shorter period, i.e. until the objection is upheld,
  5. if specific data are processed on the basis of consent (Article 6(1)(a) of the GDPR) and if it is withdrawn before the expiry of the basic storage period, then the data will be processed for this specific purpose for a shorter period, i.e. until consent is withdrawn.
  1. We shall obtain the data from you necessary to send the invitation and organise the event. These include: first and last name, email address, telephone number, name of the organisation, and then – the image recorded during the workshop/event. 
  2. Data subjects are entitled to:
  1. access your data and receive a copy thereof;
  2. rectify (correct) your data;
  3. delete your data,
  4. restrict the processing of your data,
  5. object to the processing of his/her personal data – where the legal basis for the processing is a legitimate interest (Article 6(1)(f) of the GDPR).

For more information on your rights, please refer to articles 12-23 of the GDPR.

In addition, the person whose data is processed by the Administrator has the right to lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office. More information at: https://uodo.gov.pl/pl/p/skargi

  1. Failure to provide data in the form of: first and last name, email address, telephone number, name of organisation may result in inability to participate in the event.
  2. The Administrator does not use data profiling within the meaning of the relevant provisions of the GDPR and does not make automated decisions based on profiling.
  3. Your data will not be transferred to third countries (i.e. non-EU/EEA countries) or international organisations.