Privacy policy
1. Data Controller
The controller of your personal data is Content Bytes Foundation, based in Kraków, Poland.
If you have any questions regarding this Privacy Policy or the processing of your personal data, you can contact us at: hello@contentbytes.pl.
2. Personal Data We Collect
In connection with ticket sales, we may process the following personal data:
- first and last name
- email address
- phone number (if provided)
- information related to the purchase of a ticket
Payment information is processed by Stripe, our third-party payment service provider.
3. Purposes and Legal Bases for Processing
We process personal data for the following purposes:
- to sell and deliver tickets and manage your order, pursuant to Article 6(1)(b) GDPR (performance of a contract)
- to comply with legal obligations, including accounting and tax requirements, pursuant to Article 6(1)(c) GDPR
- to establish, exercise, or defend legal claims, pursuant to Article 6(1)(f) GDPR (legitimate interests of the Controller)
We may also process participants’ images captured in photographs and/or video recordings taken during the Event. Such materials may be used for documentation and promotional purposes related to the Organizer’s activities, including publication on websites, social media channels, and other marketing materials. This processing is based on the Controller’s legitimate interest pursuant to Article 6(1)(f) GDPR.
4. Data Recipients
Your personal data may be shared with service providers supporting the ticket sales process, including:
- Naffy (ticketing and registration platform)
- Stripe (payment processing provider)
- accounting, IT, and hosting service providers, where necessary for the purposes described above
5. Data Retention
We retain personal data for as long as necessary to perform the contract and fulfill our legal obligations, including obligations arising from tax and accounting laws.
6. Your Rights
Under the GDPR, you have the right to:
- access your personal data
- rectify inaccurate personal data
- request the erasure of your personal data
- request restriction of processing
- object to processing where permitted by law
- receive your personal data in a portable format where applicable
- lodge a complaint with the competent data protection authority
7. International Data Transfers
Some service providers, including Stripe, may process personal data outside the European Economic Area (EEA). In such cases, personal data is transferred in accordance with GDPR requirements and subject to appropriate safeguards.
8. Contact
If you have any questions regarding the processing of your personal data, please contact us at: hello@contentbytes.pl.