PRIVACY POLICY  

 

  1. GENERAL INFORMATION  

 

This document sets out the rules related to the processing of personal data by the Administrator, obtained in connection with the Event organized by the Administrator, including via the Website and Social Profiles, as well as related to files, the so-called cookie.  

 

  1. DEFINITIONS 

 

  1. Administrator- Aeropact Limited Liability Company with its registered office in Poznań at the following address: ul. Naramowicka 76c, 61-622 Poznań, entered into the Register of Entrepreneurs of the National Court Register under KRS number 0000511199, for which the registration files are kept by the District Court in Poznań, VIII Commercial Division, NIP: 7811897683, REGON: 302831470, share capital - PLN 500,000 (fully paid up);  

 

  1. Event- mass events related to sports, entertainment and recreation under the name Gdynia Aerobaltic (with possible clarifications within these names regarding the place of organization or sponsors), covering in particular air sport events, including dynamic air shows, as well as accompanying events (such as the so-called Aerocamp, Aeroexpo, Airline);   

 

  1. 3. Website- operating in the domains:https://aerobaltic.pl/ and https://aeroexpo.pl/ websites, including home pages and all subpages; 

 

  1. 4. Privacy policy -this document; 

 

  1. 5. Content -content posted on the Website and as part of Social Profiles by the Administrator in any form, including in particular graphic, text, audio, audiovisual, photographic; 

 

  1. 6. Social Profiles- Administrator's profiles in social media, such as in particular: Facebook, Instagram, Twitter, Youtube, Vimeo, about   

 

  1. GDPR -RRegulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (General Data Protection Regulation) ( Journal of Laws UE. No. of 2016. No. 119). 

 

III. PERSONAL DATA 

 

  1.  ADMINISTRATOR  

The administrator of personal data is the Administrator (full details are provided in point II point 1 of the Privacy Policy).      

 

  1. CONTACT DETAILS OF THE ADMINISTRATOR  

 

Contact of data subjects with the Administrator regarding personal data is possible: 

1) electronically to the Administrator's e-mail address: biuro@aeropact.pl; 

2) electronically via contact forms available on the Website;   

3) in writing (by letter) to the address of the Administrator's seat: Aeropact Spółka z ograniczoną odpowiedzialnością, ul. Naramowicka 76c, 61-622 Poznań.  

 

  1. PURPOSES OF THE PROCESSING OF PERSONAL DATA AND THE LEGAL BASIS FOR PROCESSING 

 

The administrator processes personal data for the purposes indicated below and based on the legal grounds indicated below:  

 

1) personal data are processed for purposes related to the performance of contracts concluded in connection with the Event, including, in particular, participation in the Event, in such a case, the legal basis for processing is the necessity of processing to perform the contract or to take action at the request of the data subject before concluding the contract (Article 6 (1) (b) of the GDPR); 

 

2) personal data are processed for the purposes of the organization by the Event Administrator from the point of view of implementation by The administrator of the obligations imposed by him under applicable law, in which case the legal basis for processing is legal obligation incumbent on the Administrator (Article 6 (1) (c) of the GDPR); 

 

3) in the case of contacting the Administrator in any way (in particular via e-mail addresses provided on the Website or on Social Profiles, or contacting the Administrator using telephone numbers provided on the Website or on Social Profiles, or via contact forms made available via the Website, or in writing to the address of the Company's registered office, or via functionalities made available as part of Social Profiles, in particular by means of a comment or private messages) - personal data are processed for the purpose of communication and settling the matter this contact concerns, and in such a situation the legal basis for processing is the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR), consisting in conducting correspondence and settling the matter in connection with the conducted business activity, or the necessity of processing requests to perform the contract or to take action at the request of the data subject before concluding the contract (art. 6 sec. 1 lit. b GDPR); 

 

4) in the event of consent by a given person to receiving commercial information by electronic means (so-called newsletter or other) to the e-mail address or telephone number provided - personal data are processed for the purpose of sending commercial information by the Administrator, in which case the basis for processing is the consent of the data subject (Article 6 (1) (a) of the GDPR);  

 

5) personal data are processed for the purpose of sharing the Content, in which case the legal basis for the processing is the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in making the Content available for the purposes of the business, including running and ongoing management of Social Profiles and contacting users, or the necessity of processing to perform the contract or to take action at the request of the data subject, before concluding the contract (Article 6 (1) (b) of the GDPR);  

 

6) personal data is processed for analytical and statistical purposes, and in this case the basis for processing is the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR), consisting in conducting analyzes of users' activity, as well as their preferences, in order to : improving the functionalities of the Website, improving the use of the Website, creating the best-tailored offer by the Administrator regarding the Event, improving the use of Social Profiles, creating the most appropriate Content;  

 

7) personal data are processed for the purposes of possible determination and pursuit of claims or defense against them by the Administrator, including in the process of considering complaints, where the basis for processing is the Administrator's legitimate interest (Article 6 (1) (f) of the GDPR) consisting in the protection of his rights and responses to claims filed against the Administrator; 

 

8) personal data is processed for direct marketing purposes relating to the Administrator's own products and services, including selecting them in terms of the preferences or location of the user by means of profiling, in this case, the basis for processing is the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in the marketing of the Administrator's own services and products or the consent of the data subject (Article 6 (1) (a) of the GDPR ), including in the case indicated in point 4) above.   

 

9) personal data are processed in order to organize competitions and loyalty programs, and in this case the basis for data processing is the necessity to process the data to perform the contract or to take action at the request of the data subject prior to the conclusion of the contract (Article 6 (1) letter b of the GDPR) or the consent of the data subject (Article 6 (1) (a) of the GDPR); 

 

10) personal data are processed for the purposes of maintaining a dedicated account on the Website for users who use it to submit applications for accreditation for the Event, in which case the legal basis for processing is the necessity of processing to perform the contract or to take action on request the data subject before concluding the contract (Article 6 (1) (b) of the GDPR); 

 

11) personal data are processed for the purposes of ensuring epidemiological security and counteracting the spread of the SARS-CoV-2 virus, in which case the legal basis for the processing of personal data is their necessity for the purposes of the legitimate interests of the administrator, consisting in ensuring epidemiological security and counteracting the spread of the SARSCoV-2 virus (Article 6 (1) (f) of the GDPR). 

 

  1. REQUIREMENT TO PROVIDE DATA AND CONSEQUENCES OF FAILING TO PROVIDE PERSONAL DATA 

 

Providing the Administrator's personal data is voluntary, however, failure to provide the data required by the Administrator (in particular those marked with an asterisk on the Website): 

  1. in the event of the will to conclude a contract with the Administrator in connection with the Event, including participation in this Event in any capacity, or entry to the Event area - it will prevent the conclusion of this agreement, including participation in this Event or entry to the Event area;   
  1. in the case of contacting the Administrator, including filing a complaint - it may prevent an answer to the inquiry or the implementation of actions expected by a given person in response to the contact, and thus is a requirement for the purpose of full response and contact; 
  1. in the event of the will to read the Content - it may prevent or limit the possibility of viewing these Content; 
  1. in the case of the will to receive commercial information by electronic means from the Administrator - it will be impossible to receive this information from the Administrator;  
  1. in the event of the will to participate in contests or loyalty programs - it may prevent such participation.  

 

  1. RIGHTS OF PERSONS WHO THE DATA CONCERNS  

 

Each person in connection with the processing of their personal data by the Administrator has the right to: 

 

1) requesting access to personal data 

(i.e. to obtain information on the processing of personal data, including, in particular, the purposes and legal grounds for processing, the scope of the data held, entities to whom personal data are disclosed and the planned date of their removal, and to receive a copy of this data); 

 

2) rectification of personal data 

(i.e. to correct incorrect personal data, including when it is out of date, incorrect or incomplete); 

 

3) deletion of personal data ("the right to be forgotten") 

(i.e. to request the deletion of data in the cases specified in the GDPR, i.e. in particular: when the data is no longer necessary for the purposes for which it was collected or otherwise processed; the data subject withdraws consent to data processing (o unless the Administrator has the right to process data on a different legal basis); when the data is processed unlawfully; the need to delete data results from the Administrator's legal obligation); 

 

4) restrictions on the processing of personal data 

(i.e. to submit a request to limit data processing in the cases specified in the GDPR; in the event of such a request - the Administrator is obliged to limit operations on personal data to the extent and on the terms specified in the GDPR, generally to their storage); 

 

5) object to the processing of personal data 

(i.e. to object to the processing of personal data on the basis of the Administrator's legitimate interest, in a manner binding on the Administrator, unless there are other, prevailing, legally justified grounds for data processing by the Administrator.  

 

The data subject has, in particular, the right to object to the processing of data for the purposes of direct marketing, including profiling.  

 

6) transferring personal data 

(i.e. to obtain from the Administrator his personal data provided to the Administrator or to indicate another administrator to whom the Administrator would transfer them, if technically possible); 

 

7) withdrawal of consent for data processing at any time, but without affecting the lawfulness of the processing, which was carried out on the basis of consent before its withdrawal; 

 

8) lodge a complaint with the supervisory authority 

(i.e. to the President of the Office for Personal Data Protection if the data subject considers that the processing of personal data violates the applicable provisions on the protection of personal data). 

 

  1. PERIOD OF STORAGE OF PERSONAL DATA

 

The period of data processing by the Administrator depends on the basis and purpose of processing. As a rule, personal data is stored for the duration of the contracts binding the Administrator with data subjects and for the period resulting from the limitation of claims, bookkeeping or other rights or obligations resulting from applicable law.  

 

If the processing is based on consent, the data is processed until it is withdrawn (if The administrator has no right to process data on a different legal basis).  

 

Personal data processed for the purposes of direct marketing are generally processed until an objection to their processing for this purpose is raised, or until consent is withdrawn (if the processing of such data takes place on the basis of consent). 

Personal data collected for the purposes indicated in point III point 3.11) of the Regulations will be processed 14 days from the end of the Event.  

 

7. RECIPIENTS OF PERSONAL DATA  

 

The recipients of personal data may be external entities, including in particular entities cooperating with the Administrator in connection with the organization of the Event (including entities providing information and order services for the purposes of the Event, entities controlling access rights to the Event), IT service providers, courier companies and postal services, entities providing accounting and legal services, as well as entities to which the Administrator is obliged to provide personal data on the basis of mandatory provisions of law.  

 

 

Personal data collected for the purposes indicated in point. III point 3.11) of the Regulations may be transferred appropriate services performing epidemiological supervision. 

 

  1. TRANSFER OF DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANIZATION

 

Personal data is not transferred to a third country or an international organization within the meaning of the GDPR.  

 

  1. AUTOMATED DECISION MAKING, INCLUDING PROFILING

 

In order to implement some of the Administrator's marketing activities, namely behavioral advertising, the Administrator may use the so-called profiling, and thus by automatic data processing, evaluate selected factors relating to data subjects in order to analyze their behavior or create a forecast for the future. Behavioral advertising consists in displaying or sending to data subjects advertising content that corresponds to their interests or location, i.e. it consists in displaying or sending personalized advertising tailored to the preferences or location of these people. 

 

In the case of behavioral advertising, data processing (in particular, data collected via the so-called cookies) may also include user profiling. Basically, the condition for such processing is consent to the use of cookies, which can be withdrawn at any time (more information on the so-called cookies and the consent indicated can be found in point IV of the Privacy Policy). Moreover, in the case of behavioral advertising carried out by Facebook and Google, if the user uses their websites or tools, the condition for such profiling is not to block advertisements on the websites of these entities (more information on blocking advertisements on the websites of these entities can be found on these websites. entities). Withdrawal of consent regarding files, the so-called cookie on the Website will stop the above-mentioned. profiling within this Website. Blocking ads on Facebook and Google will stop the above-mentioned. profiling by these entities, to the extent that there was a blockade. 

Profiling will not have any legal consequences or significantly affect the situation of users.  

 

  1. SO-CALLED FILES COOKIE

 

The website uses files called cookie. Each person by selecting the appropriate option of the web browser can at any time make changes to the settings for files, the so-called. cookies, in particular by blocking the use of the so-called. cookies or their deletion. Detailed information about the possibilities and methods of handling files, the so-called cookies are available in the settings of the browser used by a given person. Permission to use files, the so-called cookie or disabling this option, if it is enabled by default, means that the so-called. cookies will be placed on the end device, and the website will be able to access them. The administrator informs that disabling the so-called files cookie may cause difficulties in using the Website or prevent it. File mechanism, the so-called The cookie does not allow the Administrator to download any personal data or any confidential information from the user's end device.  

 

The administrator may use the so-called cookie own, in particular for the following purposes: 

1) configuration of the Website, including: 

  1. adjusting the content of the Website to the user's preferences and optimizing the use of the Website; 
  1. recognition of the user's end device using the Website and its location and appropriate display of the Website, tailored to his individual needs; 
  1. User authentication as part of the Website and providing him with sessions as part of the above-mentioned. Parties including:  
  1. maintaining the session (after logging in); 
  1. correct configuration of selected functions of the Website, including enabling, in particular, verification of the authenticity of the browser session; 
  1. optimizing and increasing the efficiency of services provided by the Administrator; 
  1. Implementation of processes necessary for the full functionality of the Website, including: 
  1. adjusting the content of the Website to the user's preferences and optimizing the use of the Website. In particular, the so-called In this case, cookies allow to recognize the basic parameters of the user's end device and properly display the Website, tailored to his individual needs; 
  1. correct operation of the affiliate program, including, in particular, verification of the sources of user redirects to the Website; 
  1. enabling the use of certain functions on the Website; 
  1. Analysis and research as well as audience audit, including the creation of anonymous statistics that help to understand how users use the Website, which allows improving its structure and content;  
  1. Ensuring the security and reliability of the Website. 

 

The administrator may also use the so-called cookie external, in particular for the following purposes: 

  1. Presenting multimedia content on the Website that is downloaded from an external website, e.g. youtube; 
  1. Collecting general and anonymous static data via analytical tools, e.g. Google Analytics; 
  1. Presenting advertisements tailored to the preferences of users using an online advertising tool, e.g. Google Adwords; 
  1. Popularization of the Website using social networking sites, i.e. Facebook.com, Instagram.com and others.