In accordance with Article 13(1) and (2) of the General Data Protection Regulation of 27
April 2016 (GDPR), we hereby inform you that:

1. The controller of your personal data is NOWODVORSKI LIGHTING sp. z o.o. with its registered office in Częstochowa, ul. Bojemskiego 11, 42-202 Częstochowa.

2. If you have any doubts regarding the processing of your data, please do not hesitate to contact the Data Protection Officer at: iod@nowodvorski.pl or in writing to the address of the Controller's registered office.

3. Your personal data will be processed for the following purposes:
a) pursuing the Administrator's legitimate interest in establishing, pursuing or defending against claims (Article 6(1)(f) of the GDPR),
b) the pursuit of the Administrator's legitimate interest in documenting and promoting the public event and its activities, while respecting the image and personal rights of the participants (Article 6(1)(f) of the GDPR).

The image of the event participants may be recorded in the form of photographs and video recordings covering the general course of the fair, reports from the event and situational shots. The purpose of the processing is to document and promote the fair as a public event, including presenting its course, atmosphere and scale, as well as providing information about the Organiser's activities and future initiatives. The recorded materials may be used in photo and video reports and promotional materials published in traditional and electronic media (e.g. on the Organiser's website, on social media such as Facebook, Instagram, LinkedIn or YouTube), in a manner that does not infringe the rights and freedoms of the persons visible in the shots.

4. The recipients of your personal data may be:
a) state authorities or other entities authorised by law, if this is necessary to fulfil legal obligations,
b) suppliers of external ICT systems, providing support and delivering IT solutions,
c) entities auditing our activities or experts,
d) entities providing accounting, consulting or legal services,
e) companies utilising or archiving documents and other media.

5. As a rule, your personal data will not be transferred outside the European Economic Area (hereinafter: EEA), except in the following situations:

- performance of services provided by the Controller's subcontractors in the provision of support for ICT services and IT infrastructure - the Controller may commission the performance of specific IT activities or tasks to recognised subcontractors operating outside the EEA, which may result in the transfer of your data outside the EEA.

- disclosure of your personal data to META for the purpose of the Administrator's legitimate objective, which is the promotion of products and services as well as marketing activities. In this regard, your personal data will be transferred outside the EEA. You can read META's detailed Privacy Policy here: https://www.facebook.com/privacy/policy/?entry_point=facebook_help_center_ig_data_policy_redirect&locale=pl_PL and https://help.instagram.com/155833707900388/

- your personal data will be shared with Microsoft, the owner of the LinkedIn platform, for the purpose of the Administrator's legitimate interest, which is the promotion of products and services as well as marketing activities. In this regard, your personal data will be transferred outside the EEA. You can read META's detailed Privacy Policy here: https://www.linkedin.com/legal/privacy-policy

We would like to inform you that recipients outside the EEA, in accordance with the decision of the European Commission, ensure an adequate level of personal data protection in line with EEA standards. In the case of recipients in countries not covered by the European Commission's decision, in order to ensure an adequate level of protection, the Controller enters into agreements with the recipients of your personal data, based on standard contractual clauses issued by the European Commission in accordance with Article 46(2)(c) of the GDPR. A copy of the standard contractual clauses can be obtained from the Controller by contacting the contact details provided above. The method used by the Controller to secure your data complies with the rules set out in Chapter V of the GDPR. You may request further information about the security measures used in this regard, obtain a copy of these security measures and information about where they are available.
6. How long we process your data:

If we process certain data on the basis of your consent (Article 6(1)(a) of the GDPR) and your consent is withdrawn before the end of the basic storage period, the data will be processed for that specific purpose for a shorter period, i.e. until your consent is withdrawn.

The specified data will also be stored until the expiry of the data storage obligations resulting from specific regulations, in particular the storage of accounting documents.

If we process specific data on the basis of the Controller's legitimate interest (Article 6(1)(f) of the GDPR) and an effective objection to the processing is lodged before the end of the basic storage period, the data will be processed for that specific purpose for a shorter period, i.e. until your objection is accepted.

7. In situations provided for by law, you have the following rights:
a) the right to access your data and receive a copy thereof,
b) the right to rectify (correct) your data,
c) the right to erase your personal data,
d) the right to restrict the processing of your data,
e) the right to transfer your data – if the legal basis for its processing is consent (Article 6(1)(a)
f) the right to withdraw consent to data processing when it constitutes the basis for data processing (Article 6(1)(a) of the GDPR), without affecting processing prior to the date of withdrawal,
g) the right to object to the processing of your personal data – if the legal basis for their processing is a legitimate interest (Article 6(1)(f) of the GDPR).

8. If you consider that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with the President of the Personal Data Protection Office.

9. Your data will not be subject to automated decision-making with legal effects or similarly significant impact.