Privacy policy
§ 1. Data controller
The controller of personal data is PROREMEDIUM SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. Nowy Świat 33 m. 13, 00-029 Warsaw, Poland, NIP 5253092147, KRS 0001244814 (the “Controller”), which operates the blc.org.pl website under the Business Legacy Club brand. Contact regarding personal data: kontakt@proremedium.pl.
§ 2. What data we process and for what purpose
- Orders and customer account – first name, surname, e-mail, telephone, address, invoice details (including tax ID): to conclude and perform the contract (Art. 6(1)(b) GDPR), issue invoices and keep accounts (Art. 6(1)(c) GDPR), and handle complaints and pursue claims (Art. 6(1)(f) GDPR).
- Event participants – first name, surname, e-mail, company name and position of participants entered when buying a ticket: to issue a personal ticket, verify entry, prepare badges and the participant list (Art. 6(1)(b) and (f) GDPR). If you buy a ticket for another person, please pass this policy on to them.
- Online access – account data and technical data (IP address, access logs): to provide streams and recordings and to prevent unauthorised sharing (Art. 6(1)(b) and (f) GDPR).
- Contact and forms – data provided in the message: to respond to the enquiry (Art. 6(1)(f) GDPR).
- Newsletter and event information – e-mail: on the basis of consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time.
- Image – during events we take photographs and recordings for documentation and promotional purposes on the basis of the Controller's legitimate interest (Art. 6(1)(f) GDPR). A participant who does not wish to be recorded may inform the staff before the event or at any time at kontakt@proremedium.pl.
- Website statistics and security – technical data and cookies: to ensure the operation and security of the website and, with consent, for analytical and marketing purposes (details in the Cookie Policy).
§ 3. Recipients of data
Data may be transferred to entities processing it on behalf of the Controller: hosting and e-mail providers, payment operators (including Stripe, imoje/ING, PayPal, Przelewy24), the invoicing system, the accounting office, courier companies (for book shipments), providers of live-streaming and e-mailing tools, and the website's technical support. Data may be disclosed to public authorities where required by law.
§ 4. Transfer of data outside the EEA
Some providers (e.g. payment operators or analytics tools) may process data outside the European Economic Area. Transfers are based on a European Commission adequacy decision or standard contractual clauses.
§ 5. Retention period
- Order and invoice data – for the period required by tax law (as a rule 5 years from the end of the year in which the invoice was issued).
- Customer account data – until the account is deleted, no longer than 3 years from the last activity.
- Event participant data – up to 3 years after the event, to the extent necessary to handle claims.
- Contact form data – up to 12 months after the end of the correspondence.
- Newsletter – until consent is withdrawn.
§ 6. Your rights
You have the right to access your data, rectify it, erase it, restrict processing, data portability, object to processing based on legitimate interest, and withdraw consent at any time (without affecting the lawfulness of processing carried out before withdrawal). Please send requests to kontakt@proremedium.pl. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).
§ 7. Voluntary provision of data
Providing data is voluntary but necessary to place an order, issue a ticket or respond to an enquiry.
§ 8. Cookies
The website uses cookies necessary for its operation (cart, login) and – with consent – analytical and marketing cookies. Consent can be managed in the cookie banner settings. Details: Cookie policy.
§ 9. Changes to the policy
The policy may be updated in connection with changes in the law or the scope of services. The current version is always available on the website.