PRIVACY POLICY

We respect the right to privacy of persons using the Services available on the Website (hereinafter “Users”) and make every effort to ensure that the personal data of our Users is processed in accordance with applicable laws, including the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. On the protection of individuals in connection with
with the processing of personal data and on the free flow of such data and the repeal of Directive 95/46/EC (hereinafter the “Regulation”).

The use of the Services available on the Website requires us to process your personal data. Our Privacy Policy was created to inform Users who is the controller of their personal data, what personal data we process, for what purpose, on what basis and for how long
and to whom we share them, as well as what rights you have as a personal data subject. This Privacy Policy also applies to
To the cookies used on the Website.

PERSONAL DATA CONTROLLER.

The administrator of Users’ personal data is Olivia Star Top Spółka z ograniczoną odpowiedzialnością with its registered office in Gdańsk, al. Grunwaldzka 472C, entered in the Register of Entrepreneurs of the National Court Register by the District Court Gdańsk-Północ in Gdańsk, VII Economic Department of the National Court Register under the KRS number 0000785038, NIP 5842783933, REGON 383308043, with fully paid-up share capital of PLN 5,000.00 (hereinafter referred to as “Service Provider”). In addition, the administrator of the Users’ personal data for the purpose of making online payment for the entrance ticket to the View Floor is the Payment Operator – PayPro Spółka Akcyjna with its registered office in Poznań, ul. Kanclerska 15 (60-327) Poznań, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court Poznań Nowe Miasto and Wilda VIII Economic Department of the National Court Register after the KRS number 0000347935, NIP 7792369887 and in the Register of National Payment Institutions kept by the Polish Financial Supervision Authority under the entity number in UKNF IP24/2014 (as a national payment institution).

HOW TO CONTACT US REGARDING THE PROCESSING OF PERSONAL DATA?

In all matters concerning the processing of personal data, the User should contact the Service Provider. For all matters relating to the processing of personal data for the purpose of making an online payment for an admission ticket to the View Floor, the User should contact the Payment Operator at the contact information indicated in the “Terms and Conditions for the Online Purchase of Admissions to the View Floor”, available on the Website.

WHAT PERSONAL DATA DO WE PROCESS?

The Service Provider processes personal data that the User provides or leaves in the course of using the Site or Services available on the Site. The scope of the User’s personal data processed by the Service Provider depends on the extent of the User’s use of the Site or Services available on the Site. When a User visits/enters the Website, the Service Provider processes the data that the User leaves in cookies, which may include, but are not limited to: IP address, information about the User’s terminal device, browser or operating system, time and date of the visit. In the case of the User’s use of the Services available on the Site, as specified in the “Terms and Conditions for the online purchase of admission tickets to the View Floor” (hereinafter referred to as the “Terms and Conditions”), the Service Provider processes the personal data entered by the User in the electronic forms available on the Site for the purpose of making an online purchase of an admission ticket to the View Floor, as well as the data related to making an online payment, in particular: the User’s name and email address, the amount of the payment made and the transaction number.

FOR WHAT PURPOSE AND ON WHAT BASIS DO WE PROCESS YOUR PERSONAL DATA?

The Service Provider processes the User’s personal data for the following purposes:

1. to conclude or execute an online purchase transaction of an admission ticket to the View Floor and the exercise of the entitlement arising from such ticket, as defined by the provisions of the Regulations, pursuant to Article 6(1)(b) of the Regulation,
2. to fulfill the legal obligations of the Service Provider, in particular to prepare, maintain and archive records, including accounting or tax records, based on Article 6(1)(c) of the Regulation,
3. To establish, secure or assert claims by the Service Provider related to its business, the transaction of online purchase of an entrance ticket to the View Floor or the execution of this ticket by the User, the person of the User, or to establish the liability of the Service Provider, or to defend against claims directed against the Service Provider, before law enforcement or adjudicatory bodies, in criminal, civil or administrative proceedings, based on Article 6, paragraph 1, point f) of the Regulation,
4. for the purpose of conducting statistics and improving electronic services available on the Site (realization of the Service Provider’s legitimate interests), based on Article 6, paragraph 1, point f) of the Regulation,
5. to handle complaints related to the online purchase of an entrance ticket to the View Floor and the execution of such ticket by the User, pursuant to Article 6(1)(f) of the Regulation,
6. ensure safety for persons or protection of property located on the View Floor and allow the User to access the View Floor, pursuant to Article 6, paragraph 1, point (f) of the Ordinance,
7. if the Service Provider processes personal data on the basis of the consent granted by the User, the content of the consent shall specify for what purpose the Service Provider processes the User’s personal data, with the legal basis for the processing of such personal data by the Service Provider being Article 6(1)(a) of the Regulation.

WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

The User’s personal data may be shared by the Service Provider with entities that process data on behalf of the Service Provider, including: entities used by the Service Provider or entrusted by the Service Provider to perform activities within the scope of its business, entities entrusted by the Service Provider with the processing of personal data, entities providing tax, accounting, consulting, auditing, insurance, legal, technical or IT assistance to the Service Provider, providers of systems supporting the Service Provider’s operations. In addition, the User’s personal data may be made available to other administrators processing personal data on their own behalf, including: entities conducting payment activities, Payment Operator, entities providing insurance, courier, postal or banking services, entities acquiring receivables, authorized entities and bodies to which the Service Provider is obliged or authorized to make personal data available under applicable laws, including law enforcement, judicial, administrative bodies, the owner of the office building named “Olivia Star”, located in Gdansk at al. Grunwaldzka 472C. Partners of the Website cooperating in the implementation of the Services available on the Website are based in countries of the European Economic Area (EEA). However, we do not exclude cooperation with partners who may be based outside the EEA. In the event that we transfer your data outside the EEA, we will require such partners to provide guarantees of a high level of personal data protection by committing to the standard contractual clauses adopted by the Commission (EU) or participating in the Privacy Shield program established under Commission Implementing Decision (EU) 2016/1250 of July 12, 2016. On the adequacy of the protection provided by the EU-U.S. Privacy Shield.

FOR HOW LONG DO WE PROCESS PERSONAL DATA?

The duration of storage of personal data by the Service Provider depends on the legal basis and purpose of processing such data, taking into account the principle of accountability. With the above in mind, your personal data may be stored for a period of time:

1. personal data processed for the purpose of concluding or executing the transaction of online purchase of an admission ticket to the View Floor and realization of the entitlement resulting from this ticket, as specified in the Regulations – for the period of validity of the admission ticket and settlements related to it, and after its termination for the period necessary to fulfill the Seller’s legal obligation (for example: in terms of drawing up, maintaining and archiving documentation, including tax documentation) and the period in which the Seller may bear the legal consequences of failure to fulfill this obligation, or for the period specified in point c) below,
2. in the case of processing of personal data for the purpose of fulfilling a legal obligation incumbent on the Service Provider – for the time necessary to fulfill this obligation and the time during which the Service Provider may incur the legal consequences of non-fulfillment of this obligation,
3. for the time necessary to establish, indemnify or assert claims by the Service Provider or to establish the Service Provider’s liability, or to defend against claims made against the Service Provider, before law enforcement or adjudicatory bodies, in criminal, civil or administrative proceedings, taking into account the limitation periods specified in applicable laws,
4. in the case of personal data processed for the purpose of statistics and improvement of electronic services available on the Website – at the latest until an effective objection is made,
5. in the case of personal data processed for the purpose of investigating complaints related to the online purchase of an entrance ticket to the View Floor and the execution of this ticket by the User – for the time necessary for the investigation of this complaint, and after its investigation for the period necessary to fulfill the Service Provider’s legal obligation (for example: to prepare, maintain and archive documentation) and the time during which the Service Provider may incur the legal consequences of failure to fulfill this obligation, or for the period specified in point c) above,
6. in the case of personal data processed for the purpose of ensuring safety for persons or protection of property located on the View Floor and allowing the User to enter the View Floor: in the case of an image – depending on the technical means at the Service Provider’s disposal – for a period from 30 days to 3 months from the date of recording, and in the case of other personal data processed for this purpose by the Service Provider – for a period of 3 years calculated from the date the User leaves the View Floor area, subject to the provisions of point c) above,
7. in the case of personal data processed on the basis of the User’s consent to their processing – at the latest until the consent is withdrawn. In the case of personal data processed for different purposes or on different processing grounds, for which there are different retention periods, the total retention period for such personal data will not be longer than the latest expiring retention period.

WHAT RIGHTS DO YOU HAVE IN RELATION TO THE PROCESSING OF YOUR PERSONAL DATA?

In connection with the Service Provider’s processing of the User’s personal data, the User is entitled to:

1. The right of access to personal data,
2. The right to rectify personal data,
3. The right to delete personal data (right to be forgotten),
4. The right to restrict the processing of personal data,
5. The right to transfer personal data to another controller,
6. The right to object to the processing of personal data, including profiling,
7. The right to withdraw consent where the Service Provider processes the User’s personal data based on consent, at any time, without affecting the legality of the processing performed on the basis of consent before its withdrawal,
8. The right to lodge a complaint with the President of the Office for Personal Data Protection if the User believes that the processing of data violates the provisions of the Regulation.

AUTOMATED DECISION-MAKING, INCLUDING PROFILING.

During the processing of your personal data, there is no exclusively automated decision-making or profiling within the meaning of Article 22 of the Regulation. This means that the User is not subject to decisions based solely on automated processing, including profiling, which could produce legal effects or similarly materially affect the User.

IS THERE A REQUIREMENT FOR PERSONAL INFORMATION?

Provision of personal data is voluntary, although it is necessary to conclude or perform an agreement for the provision of Services available on the Site or to use the Services available on the Site.

COOKIES

The website uses cookies. Cookies are computer data saved in files and stored on the User’s terminal device (for example: on a computer, cell phone), which are sent from the User’s browser to the Service Provider’s server each time the User connects to the Service Provider’s websites from a given User’s terminal device. Cookies usually contain the domain name of the website from which they originate, their duration of existence and a unique name. Cookies also store information that is necessary for the proper operation of the website. The cookies may also store a unique number that identifies the user’s device, but the user’s identity is not determined from it. The Service Provider’s website may place a cookie on the User’s browser if the browser allows it. The Service Provider can only access cookies placed by the Service Provider’s website and not those placed by other websites.
The Service Provider uses cookies to optimize and improve the functionality of the use of the Website and Services available on the Website and to collect statistics on the use of the Website and Services available on the Website. This gives the Service Provider the opportunity to later improve the structure and content of the Site and Services available on the Site, excluding personal identification of the User. The service provider may use session (temporary) and permanent cookies. Session cookies are stored on the User’s terminal device only until the User logs off from the Website or shuts down the browser. Permanent cookies are stored on the User’s terminal device for as long as they have a set existence time or until the User deletes them. When using the Website or Services available on the Website, you may receive cookies from Website partners working with the Service Provider. Cookies used by the aforementioned partners are subject to their own privacy policies. At the same time, the Service Provider informs that for the purpose of calculating statistics on the Website it uses Google Analytics technology, which, in the case of Users using the Website and logged into their Google account at the same time, may present more data than the IP address, information about the User’s terminal device, browser or operating system, time and date of the visit, excluding the possibility of personal identification of a given User. The software you use to browse the web may allow cookies to be accepted on your terminal device by default. However, the user can change the browser settings so that cookies are blocked in whole or in a certain part, or are deleted, or to receive messages every time cookies are sent to the user’s terminal device. Information about the handling of cookies and possible configurations is available in the settings of the browser used by the User.