Privacy Policy

Table of Contents

1. General Provisions
2. Data Protection Officer Contact Information
3. Purposes and Legal Basis for Processing Personal Data
4. Communication with CKF
5. Website Administration, Research, and Analysis of Website Activity
6. Receiving Applications for Initiatives Organized or Co-organized by CKF
7. Newsletter
8. Establishing, Pursuing, or Defending Potential Claims
9. Transferring Data Outside the European Economic Area
10. Automated Decision-Making, Including Profiling
11. Rights of Data Subjects
12. Cookie Policy
13. Final Provisions

1. General Provisions

The controller of personal data is the Andrzej Wajda Film Culture Center, located in Warsaw, Aleje Ujazdowskie 20/4, 00-478 Warsaw, registered in the Cultural Institutions Register maintained by the Capital City of Warsaw, with NIP 1132989037, REGON 381891140 (“CKF”).

The Privacy Policy outlines the principles for processing personal data collected by CKF from individuals visiting the website and using the services offered on it (“Users”), available at ckf.waw.pl, letsdoc.pl (“Website”).

Depending on the purpose for which personal data is processed, the privacy policy provides detailed information about this processing.

We process personal data in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), otherwise known as “GDPR”.

2. Data Protection Officer Contact Information

For matters related to the processing of personal data, you can contact the Data Protection Officer using the following contact details:

Data Protection Officer
daneosobowe@ckf.waw.pl
Aleje Ujazdowskie 20/4, 00-478 Warsaw

3. Purposes and Legal Basis for Processing Personal Data

Users’ personal data is collected for the following purposes:

• Communication with CKF – responding to inquiries, letters, requests, complaints (legal basis: Article 6(1)(f) GDPR, i.e., legitimate interests pursued by the controller),
• Website administration, research, and analysis of website activity (legal basis: Article 6(1)(f) GDPR, i.e., legitimate interests pursued by the controller),
• Receiving applications for initiatives organized or co-organized by CKF – in accordance with the terms and conditions specified in the relevant initiative’s regulations (legal basis: Article 6(1)(b) or (a) GDPR, i.e., consent of the data subject),
• Sending the newsletter (legal basis: Article 6(1)(a) GDPR, i.e., consent of the data subject),
• Establishing, pursuing, or defending potential claims related to the above purposes (legal basis: Article 6(1)(f) GDPR, i.e., legitimate interests pursued by the controller).

Depending on the purpose of processing personal data, the principles relating to this processing differ. The following provisions contain a detailed description of each of the listed purposes or refer to the document that comprehensively regulates the given issue.

4. Communication with CKF

Data is collected when the User communicates with CKF using the contact details provided on the Website or using the communication tools available on the Website.

Data will be stored until it is no longer useful for the purpose for which it was collected or until the limitation period for potential claims related to the matter discussed in the correspondence expires.

Recipients of data collected for this purpose will be entities to whom the provision of personal data will be necessary to achieve this purpose. In particular, these will be entities providing various services to CKF related to the activities conducted by CKF, such as legal, IT, etc., or entities cooperating with CKF in the implementation of the initiative to which the communication pertains (if necessary). Personal data will also be provided to entities to whom CKF is obliged to disclose data under generally applicable legal provisions. These entities may include law enforcement agencies and courts.

5. Website Administration, Research, and Analysis of Website Activity

The data collected and processed as part of website administration includes: IP address, server date and time, information about the web browser, information about the operating system, date and time of visiting the website, approximate location, time spent on the website, and visited subpages.

Data will be stored until it is no longer useful for the purpose of processing or until an objection is raised.

Recipients of data collected for this purpose will be entities providing IT services to CKF.

6. Receiving Applications for Initiatives Organized or Co-organized by CKF

Personal data will be collected in cases and processed on terms specified in the regulations of the relevant initiative.

7. Newsletter

Data in the form of an email address is received directly from the User.

Data will be stored until the User withdraws their consent.

Recipients of data will be entities providing IT or marketing services to CKF.

8. Establishing, Pursuing, or Defending Potential Claims

In situations where data contained in correspondence conducted with CKF may indicate the possibility of potential claims, CKF will collect data contained in the correspondence until the limitation period expires or until a justified objection is received.

Recipients of data will be entities providing legal, accounting, financial, IT services to CKF, as well as entities to whom CKF will be obliged to disclose data under legal provisions.

9. Transferring Data Outside the European Economic Area

If it is necessary to transfer data outside the EEA, this data will be transferred to entities located in the United States of America (USA), providing IT services to CKF (e.g., Google LLC).

Entities to whom data may or will be transferred must be on the list maintained by the US Department of Commerce under the so-called “EU-US Data Privacy Framework”. Concerning this initiative, the European Commission adopted a new adequacy decision on 10 July 2023. Consequently, the transfer of personal data from the EEA to organizations that have joined the “EU-US Data Privacy Framework” and are on this list is possible without the need for additional permissions or the use of legal instruments such as standard contractual clauses or binding corporate rules.

More information on the description of safeguards and the content of the decision can be found on the European Commission’s website.

10. Automated Decision-Making, Including Profiling

CKF does not make automated decisions based on personal data, including profiling.

11. Rights of Data Subjects

A data subject has the following rights under the conditions and circumstances specified in the GDPR:

1. The right to request access to their data, rectification, erasure, or restriction of processing,
2. The right to object to the processing,
3. The right to data portability,
4. The right to withdraw consent for the processing of personal data for a specific purpose if the data subject has previously given such consent; however, the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal,
5. The right to lodge a complaint with a supervisory authority regarding the processing of personal data by CKF.

A data subject can exercise their rights by contacting CKF using the contact details of the Data Protection Officer.

CKF may refuse to exercise certain rights mentioned above if the exercise of a given right would conflict with the legitimate purpose of CKF’s data processing or if the request is not legally justified.

Providing personal data by the User is always voluntary but necessary, for example, to contact CKF or use the Newsletter service. Deleting personal data or ceasing its processing by CKF may result in the inability to achieve one or more of the specified processing purposes.

12. Cookie Policy

CKF automatically collects information contained in cookies to gather data related to the User’s use of the Website. Please refer to our Cookie Policy to learn more about cookies and similar mechanisms used by CKF, their purpose, and other important information. Remember that you can change your browser settings regarding cookie collection at any time.

13. Final Provisions

The provisions of the Privacy Policy may be changed or updated, so we recommend regularly following changes.