Legal document
Privacy Policy
1. Data Controller
The Controller of your personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter: GDPR) is:
GOSZCZDESIGN Monika Kłos
ul. Żelazna 51/53, 00-841 Warsaw, Poland
Tax ID (NIP): 1230732434 · Statistical ID (REGON): 015693649
Business registered with CEIDG
Contact: kontakt@meczmistrzow.com
The Controller is the organizer of the "Match of Champions: Poland vs England" event and the operator of the meczmistrzow.com website (hereinafter: Service).
2. Data Processed
- email address provided in the form for the 10% ticket discount code and ticket sales notifications;
- date and time of signup;
- IP address and technical device data (server logs: browser type, operating system, request path);
- data resulting from cookies (see section 8);
- data provided voluntarily in correspondence with the Controller.
3. Purposes and Legal Bases
3.1. Newsletter and 10% discount code
- Purpose: sending the 10% ticket discount code and information about the ticket sale launch and the event.
- Legal basis: Article 6(1)(a) GDPR (consent of the data subject) and the Polish Act on Providing Electronic Services and the Telecommunications Law (consent for marketing communication via electronic channels).
- Retention: until the consent is withdrawn or until the purpose of processing has been fulfilled (end of event + 30 days of settlements). Withdrawal of consent does not affect the lawfulness of processing prior to such withdrawal.
3.2. Server logs and Service security
- Purpose: ensuring security, diagnostics, prevention of abuse and attacks.
- Legal basis: Article 6(1)(f) GDPR (legitimate interest of the Controller).
- Retention: up to 12 months from the date of the event log.
3.3. Establishment, defence and pursuit of claims
- Purpose: establishment, defence or pursuit of claims.
- Legal basis: Article 6(1)(f) GDPR (legitimate interest of the Controller).
- Retention: until the expiry of statutory limitation periods.
4. Voluntary Nature of Data Provision
Providing data is voluntary. Failure to provide an email address will prevent receipt of the discount code and notifications of the ticket sale launch.
5. Data Recipients
Your data may be entrusted, to the extent necessary and solely for the purposes indicated above, to the following categories of recipients:
- hosting and application infrastructure provider: Vercel Inc. (USA);
- database provider storing newsletter signups: Supabase Inc. (USA);
- email and mailing campaign tool providers (to be updated once implemented);
- ticketing partners (if selected - information will be updated);
- providers of accounting, legal and IT services to the Controller;
- state authorities, where disclosure is required by law.
6. Transfers Outside the EEA
As we use the services of Vercel Inc. and Supabase Inc. (both based in the United States), data may be transferred outside the European Economic Area. The transfer takes place on the basis of Standard Contractual Clauses approved by the European Commission (SCC) and additional technical and organizational safeguards providing a level of protection equivalent to GDPR requirements.
7. Your Rights
You have the following rights:
- right of access to your data (Art. 15 GDPR);
- right to rectification (Art. 16 GDPR);
- right to erasure - "right to be forgotten" (Art. 17 GDPR);
- right to restriction of processing (Art. 18 GDPR);
- right to data portability (Art. 20 GDPR);
- right to object to processing (Art. 21 GDPR);
- right to withdraw consent at any time (Art. 7(3) GDPR);
- right to lodge a complaint with the supervisory authority - the President of the Polish Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
To exercise your rights, contact the Controller at kontakt@meczmistrzow.com. Withdrawal of newsletter consent is also possible via the unsubscribe link in every message or by replying to the contact address above.
8. Cookies and Similar Technologies
The Service uses cookies for the following purposes:
- strictly necessary for the proper functioning of the Service (session, security) - basis: Art. 6(1)(f) GDPR;
- statistical and analytical - only after consent has been given (Art. 6(1)(a) GDPR).
The Service loads web fonts via Google Fonts, provided by Google Ireland Limited. Downloading the font requires the browser to communicate with Google servers, which may involve the processing of the user's IP address by Google.
You can change cookie settings at any time in your browser settings.
9. Automated Decision-Making and Profiling
The Controller does not make decisions in respect of data subjects based solely on automated processing, including profiling, that would produce legal effects or similarly significantly affect them.
10. Data Security
The Controller applies technical and organizational measures appropriate to the risk, including transmission encryption (TLS/HTTPS), access control, and review of providers for GDPR compliance.
11. Changes to the Privacy Policy
The Controller reserves the right to introduce changes to this policy. The current version is always available at www.meczmistrzow.com/en/privacy-policy. Earlier versions are archived by the Controller.
12. Contact
For all matters concerning the processing of personal data, contact the Controller:
GOSZCZDESIGN Monika Kłos
ul. Żelazna 51/53, 00-841 Warsaw, Poland
Tax ID (NIP): 1230732434 · Statistical ID (REGON): 015693649
Email: kontakt@meczmistrzow.com