Privacy Policy

Maintaining data confidentiality is extremely important to us, and we feel responsible for the security of personal data processed in connection with our activities. Our goal is to provide transparent and understandable information to the individuals whose data we process on all related issues.

That's why we've created this Privacy Policy, which describes the purposes and basis for processing personal data, as well as the rights of data subjects. This Policy contains information about our processing of data, including data from participants in sporting events organized by the Administrator, customers of the Administrator's Online Store, and individuals who have consented to receiving our newsletter.

Who is the Personal Data Administrator?

The controller of your personal data, i.e. the entity deciding how the personal data you provide to us will be used, is Towarzystwo Sportowe Wisła Kraków SA ("Controller", "we") with its registered office in Kraków, address: ul. Reymonta 20, 30-059 Kraków, entered into the register of entrepreneurs of the National Court Register maintained by the District Court for Kraków-Śródmieście in Kraków, 11th Commercial Division of the National Court Register under the KRS number: 0000130748, Tax Identification Number (NIP): 677-102-21-49, National Business Registry Number (REGON): 350908122, share capital: PLN 81,287,300 (fully paid up).

The Administrator always processes your personal data in accordance with all provisions of generally applicable law, and in particular in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the "Regulation".

IOD

In all matters related to the processing of personal data, you can contact us via e-mail: iodo@wisla.krakow.pl , by phone: 12 630 76 00 or directly at the following address: ul. Reymonta 20, 30-059 Kraków.

Where do we store your data?

We store collected personal data on servers located in the Republic of Poland. We do not plan to transfer your data to third countries or international organizations. However, if your personal data is transferred to a third country, for example, in connection with our use of services from suppliers using servers located outside the EEA, we will take appropriate legal precautions and security measures to ensure the security and integrity of your personal data.

Who has access to your data?

We do not sell your personal data or exchange it for marketing purposes. Your data may be transferred to external entities providing services to the Controller, in particular IT service providers; companies with whom we cooperate in website management and the sale of our products (entities enabling online payments, courier companies); legal, tax, or accounting advisors. In each case, your personal data is transferred based on an appropriate agreement obliging the recipient to keep your data confidential and to protect it against unauthorized disclosure, deletion, or modification.

In cases provided for by law, we also transfer your personal data to state authorities or other authorized entities, in particular – when you purchase a ticket or season ticket for a match organized at the Stadium where the Wisła Kraków team plays its matches (most often: Henryk Reyman Municipal Stadium in Kraków at ul. Reymonta 20) – your data is available to the entity managing the central system for identifying participants of mass events.

What are the purposes, basis and duration of processing your data?

The purposes, basis, and duration of processing your personal data in each case depend on the actions you undertake and your relationship with the Controller. Below, we present the possible purposes of personal data processing, along with the legal basis and the expected duration of such processing.

Purpose of processing	Legal basis	Storage period
Conclusion and performance of a ticket/pass sales agreement and ensuring the possibility of participating in events organised by us and covered by the ticket/pass	Article 6 paragraph 1 letter b) of the Regulation	For the duration of the contract and then until the expiry of the deadlines for pursuing claims arising from it
Conclusion and performance of the contract regarding the maintenance of an account in our Online Store and the sales contract concluded as a result of placing an order	Article 6 paragraph 1 letter b) of the Regulation	For the duration of the relationship justifying processing, in particular as long as you maintain an active user account in the Store or for the period necessary to complete your order, consider a complaint or other type of complaint or request, as well as for the limitation period for claims arising from the services provided or sales made
Fulfilling our legal obligations as the organiser of a football match, including ensuring the safety of people participating in the match in accordance with the provisions of the Act of 20 March 2009 on the safety of mass events	Article 6 paragraph 1 letter c) of the Regulation	For a period of 2 years from the date of the last purchase of an admission ticket or the provision of another document authorising you to attend a football match, in the case of stadium surveillance recordings – for a period of 3 months, unless the relevant state authorities oblige us to store the recordings for a longer period
Fulfillment of legal obligations imposed on us under separate regulations, in particular accounting and tax regulations	Article 6 paragraph 1 letter c) of the Regulation	For the period resulting from such provisions (e.g. data will be stored for the limitation period of the related tax liabilities)
Fulfillment of our legitimate interest in establishing the existence of, pursuing and defending claims against us	Article 6 paragraph 1 letter f) of the Regulation	For the duration of the contract between us and then for the limitation period for claims related to its conclusion and implementation
Fulfilling our legitimate interest in enabling us to contact you efficiently in the event of changes in the organization or cancellation of the match, including in connection with the need to implement sanitary instructions or other restrictions and solutions recommended to us by government, local government or other state institutions	Article 6 paragraph 1 letter f) of the Regulation	For the period necessary to perform the contract between us; as a rule, until your rights arising from the purchased ticket/pass are exercised
Fulfilling our legitimate interest in handling your notifications, complaints, requests and inquiries, assessing your satisfaction with products and services and the quality of service, ensuring a high level of service provision, as well as fulfilling internal administrative, analytical and statistical purposes	Article 6 paragraph 1 letter f) of the Regulation	Until the legitimate interests pursued by us are fulfilled, but no longer than 2 years from your last contact with us
Fulfillment of our legitimate interest in conducting promotional, advertising, commercial and marketing activities regarding products and services offered by the Controller and its partners and sponsors	Article 6 paragraph 1 letter f) of the Regulation	Until the fulfillment of our legitimate interests constituting the basis for the processing of personal data or until you effectively object to such processing
Carrying out promotional, advertising, commercial and marketing activities regarding products and services offered by us, as well as by our partners and sponsors, via e-mail or telephone, if you have consented to such form of communication	Article 6 paragraph 1 letter a) of the Regulation	Until you withdraw your consent to the processing of your data
Fulfilling our legitimate interest in ensuring a smooth connection, comfortable use of our website and ensuring the assessment of system security and stability by collecting information exchanged between your device and our server when you visit our website	Article 6 paragraph 1 letter f) of the Regulation	Until the legitimate interests pursued by us are fulfilled, but no longer than 2 years from your last contact with us

To the extent that your personal data is processed based on consent, you may withdraw it at any time by contacting us at the addresses or telephone number provided in this Policy. However, withdrawing your consent will not affect the lawfulness of personal data processing based on consent before its withdrawal.

The need to provide personal data

To the extent that personal data is provided for the purpose of concluding a contract with us (e.g., a ticket or season ticket sales contract, an online store account management contract, or a product sales contract available in the store), such provision is voluntary, but, as a rule, necessary for the conclusion and performance of the contract. Failure to provide certain data may prevent you from placing an order.

To the extent that your data is processed to pursue our legitimate interests, providing it is voluntary and is not a condition for entering into any contract. However, in practice, it may prevent or hinder your use of all the services we offer.

What rights do you have in relation to the processing of your personal data?

In accordance with the provisions of the Regulation, you have a number of rights related to our processing of your personal data. You can exercise these rights primarily by contacting us, preferably via the addresses or telephone numbers provided in this Policy. We will process your requests and requests without undue delay, but no later than within one month. If, due to the complexity of the request or the number of requests, it is not possible to respond within this timeframe, we will inform you and provide an estimated response date.

The right to access data

You can obtain confirmation at any time whether and which of your data we are processing, for what purpose, to whom it may be transferred, and for how long it will be stored. You can also obtain a copy of the personal data being processed.

The right to rectify data

You have the right to request the rectification of your personal data if it is incorrect, as well as the completion of incomplete data.

The right to delete data

In the circumstances specified in the Regulation, you have the right to request the immediate deletion of your personal data processed by us. This right does not apply, in particular, to situations where further processing of your data is necessary for us to fulfill a legal obligation or to establish, pursue, or defend legal claims.

The right to restrict processing

In the situations specified in the Regulation, you have the right to request the restriction of the processing of your personal data. In such a case, we will only process your data, with the exception of storage, with your consent, for the establishment, exercise, or defense of legal claims, to protect the rights of another natural or legal person, or for important reasons of public interest of the European Union or a Member State.

The right to data portability

If we process your personal data by automated means, based on your consent or a contract, you have the right to receive a copy of your data in a structured, commonly used, and machine-readable format. This copy can be sent to you or to another entity you designate.

The right to object

To the extent we process your personal data to pursue our legitimate interests, you may object to such processing. In such a case, we will generally no longer be able to process your personal data. You also have the right to object to receiving direct marketing materials, including the analysis of your profile that is conducted for the purpose of preparing such materials. You may opt out of receiving direct marketing materials by following the instructions included in each such email.

The right to submit a complaint to the supervisory authority

If you believe that we are processing your personal data incorrectly, you can file a complaint with the supervisory authority, which is the President of the Personal Data Protection Office.

Profiling your personal data

To conduct marketing activities, we use profiling, i.e., we analyze information about our website users and assess their purchasing preferences to present them with an offer tailored to their characteristics or that, in our opinion, meets their needs and requirements. We also conduct profiling activities that monitor the internet traffic of users of the Administrator's websites (in particular, identifying the websites from which users accessed our sites) in connection with our affiliate marketing. However, we do not intend to make decisions based solely on automated processing, including profiling, of personal data, or that would produce legal effects for you or significantly affect you in any other way.

Cookies

Cookies are small pieces of information in the form of text files, sent by the server and stored on the website visitor's end (e.g., on the hard drive of a computer, laptop, or smartphone's memory card, depending on the device you use to visit our website). Cookies are contained in the HTTP protocol, which is used for communication between the web server and the browser. Their functions are mostly standard for browser settings. Cookies are used to tailor page content to user preferences and to enhance the usability and personalization of website content.

We may process data contained in cookies for the following purposes:

• identifying customers as having an account in the Online Store;
• maintaining the logged-in client's session;
• remembering products added to the cart to place an order;
• adapting the content of the Online Store website to individual customer preferences;
• ensuring the security and reliability of the service;
• keeping anonymous statistics showing how the Online Store website is used.

If you do not consent to the use of cookies, you should select the appropriate settings in your web browser. The process for consenting to the use of cookies varies depending on the browser you are using. However, please note that blocking or deleting cookies may impede your use of our websites and, in some cases, prevent you from using some of their features.

Detailed information on changing cookie settings and deleting them yourself in the most popular web browsers is available in the help section of the given web browser.

Links to other websites

Please be advised that our website contains links to other websites. We recommend that you review the privacy policies of those websites, as we cannot be held responsible for them.

Updates to our Privacy Policy

We may need to update our Privacy Policy in the future. The latest version will always be available on our website wislakrakow.com , where you can check the current status of our data protection information at any time.