Privacy Policy

PRIVACY POLICY OF THE WEBSITE (WWW.REJSYSZCZECIN.PL)

1. Protection of personal data of users is a priority for the website owner, who makes every effort to ensure the security of entrusted data.

2. A User is a natural person, legal entity, or organizational unit using the electronic services available on the website.

3. This policy explains the principles of personal data processing, the rights of users, and provides information about the use of cookies.

4. The Controller applies state-of-the-art technical measures and organizational solutions to ensure data protection.

I. DATA CONTROLLER

The controller is kjt sp. z o.o. with registered office at: Wichrowe Wzgórza 76/4, 72-001 Siadło Dolne, Poland, KRS: 0000955962, NIP: 8513270890.

II. PURPOSE OF PERSONAL DATA PROCESSING

1. Data processing is carried out for the proper performance of ticket sale contracts in the online store.

2. Data is necessary for: concluding contracts, settlements, and delivery of goods and services.

3. With the consent of the user, the controller sends information about new products, promotions, and sales.

4. Data is also processed to fulfill legal obligations, ensure security, and maintain tax documentation.

5. Processing may also occur for direct marketing, securing claims, and marketing by third parties.

III. TYPES OF DATA

Required data:

First and last name
Gender
Delivery address
Phone number
E-mail address

Optional data:

Date of birth
PESEL number (for invoicing)
NIP number (for business invoicing)

IV. LEGAL BASIS FOR PERSONAL DATA PROCESSING

1. Processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR).

2. The controller processes personal data only after obtaining the consent of the User upon transaction confirmation.

3. Consent is voluntary; however, its absence prevents purchases through the website.

V. USER RIGHTS

1. The right to information about the scope of data processing.

2. The right to correct or rectify personal data.

3. The right to withdraw consent without giving a reason. Withdrawing consent for all purposes results in account deletion.

4. The right to erasure of data (right to be forgotten), which simultaneously deletes the account.

5. The right to object to data processing, leading to account deletion.

6. The right to restriction of data processing.

7. The right to data portability — the user may request the transfer of their data to another entity.

8. The controller responds to requests within one month.

VI. PERSONAL DATA RETENTION PERIOD

1. Data is stored only as long as necessary to fulfill obligations.

2. Contract-related information is stored for evidentiary purposes for a period of three years from the end of the year in which the business relationship ended.

3. The controller may retain archival information regarding transactions due to warranty claims.

4. Without a concluded contract, data is stored until account deletion.

VII. ENTRUSTING DATA PROCESSING TO OTHER ENTITIES

1. The controller entrusts data processing to cooperating entities to the extent necessary for transaction execution and delivery.

2. Data will not be disclosed to third parties beyond the stated purposes.

3. Data is not transferred outside the European Union.

4. This policy complies with Art. 13(1) and (2) of the GDPR.