INFORMATION ON THE PROCESSING OF PERSONAL DATA

1. Personal Data Controller

The controller of your personal data under GDPR is: Karaoke Box Wojciech Legerski (address: ul. Westerplatte 13/7, 31-033 Kraków, NIP: 6793207057, REGON: 387341267, correspondence address: ul. Cechowa 51/2, 30-614 Kraków), email address: hello@karaokespot.pl, hereinafter referred to as the "Controller". All inquiries and comments regarding the processing of your personal data should be addressed to the Controller.

2. Purpose of Processing Your Personal Data 

The Controller may process your personal data for the following purposes: 

1. Presenting offers or considering service reservations offered by the Controller based on Article 6(1)(b) or (f) GDPR;
2. Conclusion, proper execution, termination of contracts, or other activities necessary for the conclusion or execution of the contract based on Article 6(1)(b)-(c) GDPR;
3. Fulfilling obligations under the law, including tasks performed in the public interest based on Article 6(1)(c) and (e) GDPR;
4. Marketing, including the promotion of products and services offered by the Controller to tailor products and services to your preferences based on Article 6(1)(f) GDPR;
5. Correspondence to provide you with necessary information regarding the conclusion, execution, or termination of the contract, as well as resulting from your possible letters and requests based on Article 6(1)(f) GDPR;
6. Establishing, pursuing, and collecting claims by the Controller or defending against claims in connection with the conducted business activities through amicable pre-litigation proceedings and legal, mediation, and enforcement proceedings provided for by law based on Article 6(1)(f) GDPR;
7. Other purposes carried out within the so-called legitimate interest of the Data Controller, including storing data for archival and statistical purposes, ensuring the ability to perform and account for compliance with obligations under the law, particularly accounting and tax regulations based on Article 6(1)(f) GDPR;
8. Sharing your personal data with entities cooperating with the Controller based on Article 6(1)(a) GDPR.

3. Categories of Your Personal Data Processed

The Controller may process the following categories of your personal data obtained from you or third parties: personal data (e.g., name, surname, address); contact details (e.g., phone number, email); identification data (e.g., date of birth); audiovisual data (e.g., data related to monitoring in the Venue).

Additionally, the Controller may process other personal data if they cannot be classified into any of the above groups, provided it is done for the purposes described in this document. 

4. Source of Your Personal Data

The Controller processes your personal data obtained directly from you (e.g., provided in the reservation application or other forms) and also obtained from other sources in accordance with the law.

5. Sharing Personal Data

Your personal data may be transferred to other entities to perform the contract/service (Article 6(1)(b) GDPR) and as necessary to achieve the purposes defined under Article 6(1)(f) GDPR. Such data recipients may include authorized employees of the Controller and entities providing technical, IT, telecommunications, accounting, legal, debt collection services, as well as entities cooperating in archiving and creating statistics. Furthermore, your data may be shared by the Controller with entities and authorities to whom the Controller is obligated or authorized to provide personal data based on generally applicable law. Your personal data may be shared with entities cooperating with the Controller. The Controller declares that personal data may be transferred to a third country or an international organization.

6. Data Processing and Storage Period

Your personal data will generally be processed for the duration of the concluded contract – to ensure the ability to perform the contract (Article 6(1)(b) GDPR) and for the time necessary to achieve the purposes arising from the legitimate interests pursued by the Controller or by a third party (Article 6(1)(f) GDPR). 

The period for which your personal data will be stored is determined based on the following criteria: legal regulations, the validity of the offer or consideration of the reservation application; the period during which the Controller performs duties and rights related to the contract concluded with you or the service provided; the period necessary to secure the Controller's defense against claims and to pursue claims by the Controller, including particularly until the expiration or lapse of any claims; other purposes carried out within the so-called legitimate interest of the data controller, including storing data for archival and statistical purposes and for promotion and marketing purposes for a period of 10 years. 

7. Your Rights 

In connection with the processing of your personal data by the Controller, you have the following rights:

1. Right to access data, i.e., you can obtain information on whether the Controller processes your personal data. If so, you can access them, e.g., request a copy. You can also obtain detailed information on which data are being processed and for what purpose, to whom they are transferred; 
2. Right to rectify your data, i.e., if they are incorrect, you can request their correction;
3. Right to delete your data (right to be forgotten) or restrict processing in cases provided by law;
4. Right to object to the processing of your personal data in case they are processed for the purpose of pursuing the Controller's legitimate interest, including profiling;
5. Right to data portability;
6. Right to lodge a complaint with the supervisory authority dealing with personal data protection – the President of the Personal Data Protection Office if you believe your data is being processed unlawfully;
7. Additionally, if personal data processing is based on consent, you have the right to withdraw consent to the processing of personal data at any time, with the withdrawal of consent not affecting the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, please contact the Controller.

8. 8. Profiling

Your personal data may be processed automatically. These actions may lead to refusal to enter into a contract or offer products or services on specific terms. 

9. Information on Data Provision Requirement

To the extent that the processing of your personal data is for the purpose of concluding and performing a contract with the Controller, providing data is necessary for concluding and performing the contract. Providing personal data is voluntary, but without them, it is not possible to conclude and perform the contract/service.

10. Regarding Information Collected Through the www.karaokespot.pl Website – The website uses cookies. Cookies are small text and numerical files sent by the visited website and stored on the user's end device. They contain information readable by the entity collecting them, which in this case is the administrator. Cookies do not contain information that can be considered personal data as they do not allow for the identification of the persons who generate them. However, some information contained in cookies, combined with information obtained through reservation, may allow the identification of an individual and thus be considered personal data. The cookies we use are saved in the device's memory (computer, phone, etc.); enable the use of all website functionalities; allow for subsequent user identification, making it possible, for example, to remember data so they do not have to be re-entered in the login window; are not harmful to the device and do not change the settings of the software installed on the device. Cookies may be used for the following purposes: providing website functionalities; remembering user session information; remembering login data; marketing and statistical purposes. Cookie settings can be changed in the web browser settings (e.g., Firefox, Chrome, Safari, Internet Explorer). We reserve the right that changing cookie settings may prevent or limit the functionality of the online store. Lack of consent to the use of cookies should result in leaving the online store's website.

The website www.karaokespot.pl is hosted (technically maintained) on the servers of the operator zenbox.pl.