I. General Provisions

This Privacy Policy sets out the rules governing the processing of personal data by WHITE NOISE events and pr Oskar Kacprzak, with its registered office at ul. K. K. Baczyńskiego 9, 99-400 Łowicz, Poland, Tax Identification Number (NIP): 7252032629, acting as the data controller (hereinafter referred to as the “Controller”).

This Privacy Policy sets out the rules for the collection, use, storage and protection of personal data of persons using the website available at www.whitenoise.com.pl (hereinafter referred to as the “Website”).

The Controller processes personal data in accordance with applicable laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “GDPR”), the Polish Act of 10 May 2018 on the Protection of Personal Data, and the Polish Act on Providing Services by Electronic Means.

Each user of the Website may provide their personal data via the contact form, the newsletter subscription form, or by contacting the Controller by email.

This Privacy Policy also sets out the rules governing the use of cookies and other technologies used on the Website.

II. Data Controller

The data controller is:

WHITE NOISE events and pr Oskar Kacprzak
ul. K. K. Baczyńskiego 9
99-400 Łowicz
Poland

Tax Identification Number (NIP): 7252032629

Email: hi@whitenoise.com.pl

The Controller has not appointed a Data Protection Officer, as it is not legally required to do so.

III. Purposes and Legal Bases for Processing Personal Data

The Controller processes personal data only to the extent necessary to achieve specific purposes.

Personal data may be processed:

a) to respond to messages submitted via the contact form or by email, pursuant to Article 6(1)(f) of the GDPR (the Controller’s legitimate interest in conducting correspondence);

b) to take steps prior to entering into a contract or to perform a concluded contract, pursuant to Article 6(1)(b) of the GDPR;

c) to comply with legal obligations, in particular tax and accounting obligations, pursuant to Article 6(1)(c) of the GDPR;

d) for the purpose of direct marketing of the Controller’s own services, pursuant to Article 6(1)(f) of the GDPR or, where required by law, on the basis of the user’s consent pursuant to Article 6(1)(a) of the GDPR;

e) to send newsletters after the user has provided the relevant consent;

f) to analyse how the Website is used, improve its functionality and compile statistics;

g) to establish, pursue or defend against potential claims.

IV. Scope of Personal Data Processed

Depending on the purpose, the Controller may process the following personal data:

- first and last name,
- email address,
- telephone number,
- company name,
- content of messages submitted,
- IP address,
- device information,
- web browser information,
- data relating to activity on the Website.

The Controller does not process special categories of personal data referred to in Article 9 of the GDPR.

V. Provision of Personal Data

Providing personal data is voluntary; however, it may be necessary in order to respond to an enquiry, prepare an offer, enter into a contract or provide selected services.

Failure to provide the required data may make it impossible to fulfil the purpose for which the data is collected.

VI. Recipients of Personal Data

The Controller may disclose personal data only to entities cooperating with the Controller in the course of its business activities, in particular:

- hosting providers,
- email service providers,
- IT service providers,
- analytics service providers
- marketing service providers,
- accounting firms,
- law firms,
- entities providing accounting, tax or advisory services,
- public authorities, where such disclosure is required by law.

Such entities process personal data only on the basis of appropriate agreements and in accordance with applicable laws.

The Controller does not sell personal data or disclose it to unauthorised entities.

VII. Transfers of Personal Data Outside the European Economic Area

In connection with the use of services provided by technology providers such as Google or Meta, personal data may be transferred outside the European Economic Area (EEA).

In such cases, the Controller uses only entities that ensure an adequate level of data protection, in particular through the use of Standard Contractual Clauses approved by the European Commission or other safeguards provided for under the GDPR.

VIII. Data Retention Period

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected.

The retention period depends on the type of data and the purpose of its processing, in particular:

- for the duration of correspondence,
- for the duration of a contract,
- for the period required by applicable law,
- until consent is withdrawn,
- until an effective objection to processing is made,
- until the expiry of the limitation period for potential claims.

IX. Rights of Data Subjects

Each data subject has the right to:

- access their personal data,
- obtain a copy of their personal data,
- rectify their personal data,
- erase their personal data,
- restrict the processing of their personal data,
- data portability,
- object to the processing of their personal data,
- withdraw consent at any time where processing is based on consent.

Data subjects also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

X. Data Security

The Controller implements appropriate technical and organisational measures to ensure the security of personal data and to protect it against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

The Controller does not make decisions that produce legal effects concerning users based solely on automated processing of personal data.

XI. Cookies

The Website uses cookies and similar technologies.

Cookies are used in particular to:

- ensure the proper functioning of the Website,
- remember user preferences,
- conduct statistical analyses,
- improve the quality and performance of the Website,
- carry out marketing activities.

During their first visit to the Website, users may accept or reject specific categories of cookies using the consent management tool.

Users may also change their web browser settings or delete stored cookies at any time.

Restricting the use of cookies may affect the proper functioning of certain features of the Website.

XII. Third-Party Tools

The Website uses services provided by third parties, which may process user data in accordance with their own privacy policies.

In particular, the Controller uses the following tools:

- Google Analytics 4 – to analyse Website traffic statistics and how users interact with the Website;

- Meta Pixel – to measure the effectiveness of marketing activities conducted through Meta platforms;

- YouTube – to embed video content on the Website.

XIII. Contact

For matters relating to the processing of personal data, you may contact the Controller at:

WHITE NOISE events and pr Oskar Kacprzak
Email: hi@whitenoise.com.pl

XIV. Amendments to the Privacy Policy

The Controller reserves the right to amend this Privacy Policy, in particular in the event of changes to applicable laws, the scope of services provided or the technological solutions used.

The current version of the Privacy Policy is published on the Website and takes effect on the date of its publication.