Privacy and Cookie Policy

This policy explains what personal data we collect on the www.piecsmakow.pl and www.radioazja.pl website (the Website), why we process it, whom we entrust it to, what rights users have, and how we use cookies. The rules for using the Website are set out in the Terms and Conditions.

Part I. Personal data

1. Data controller

The controller of your personal data is Fundacja Sztuki Arteria (Arteria Art Foundation), headquartered in Warsaw at 30/68A Świętokrzyska St, 00-116 Warsaw, Poland, entered into the register of associations, other social and professional organisations, foundations and independent public health care institutions and into the register of entrepreneurs maintained by the District Court for the Capital City of Warsaw, 12th Commercial Division of the National Court Register, under KRS number 0000213829, NIP 521-329-94-74, REGON 015779463 (the Foundation).

For all matters concerning personal data you can contact us by e-mail at info@piecsmakow.pl or by post at the Foundation's registered address.

2. What data we collect and where it comes from

We process only the data that users provide to us themselves, the data we receive from Google when a user signs in with a Google account, and technical data related to the use of the Website.

• User account: login, e-mail address, password (stored in encrypted form only) and, optionally, first name, surname, postal address, phone number, preferred Website language and consents to the newsletter and SMS notifications.
• Orders: order number, purchased tickets, passes, online access and accreditations, ticket recipient details, invoice details (company name, tax ID, address), voucher number, and a photograph in the case of passes and accreditations with a photo.
• Phone number verification: a Polish mobile phone number and a one-time verification code sent by SMS.
• Google sign-in: the data described in section 3.
• Correspondence: the content of questions, opinions, requests and complaints, and the contact details provided in the message.
• Technical data: IP address and the approximate location derived from it, browser and device type, server logs and data stored in cookies, as described in Part II.

Providing data is voluntary, but without the data marked in the forms as mandatory it is not possible to create an account or place an order.

3. Signing in and signing up with a Google account

The Website allows you to create an account and sign in with a Google account (Google Identity Services). When you choose this option and give your consent on the Google screen, we receive only your basic profile data from Google:

• the e-mail address of your Google account, together with confirmation from Google that it has been verified,
• your first name and surname,
• the address of your profile picture,
• the technical identifier of your Google account.

We use this data solely to create an account on the Website or to sign you in to an existing account with the same e-mail address, and to fill in your first name and surname in your profile if they have not been provided before. We do not receive your Google password and we have no access to your other Google services, such as mail, contacts or drive. We do not publish anything on your behalf and we do not share the data received from Google with any third parties, except for the providers of hosting and IT services who process it solely on our instructions. We do not use data from Google for advertising or profiling.

An account created with a Google account works like any other account on the Website: you can set your own password at any time (using the "forgot password" function), and you can withdraw the consent granted to Google in your Google account settings (under "Third-party apps & services"). Withdrawing that consent does not delete your account on the Website; you can request account deletion as described in section 8.

Our use of data received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. Google is a separate controller of the data processed within your Google account; its rules are described in the Google Privacy Policy.

4. Phone number verification

You can verify a Polish mobile phone number. Verification is voluntary, but without it you cannot use the Five Flavours at Home VOD service (watch films online, purchase an online pass or activate access codes). We send a one-time code to the number provided and record the number in your account as verified. A verified number is used to confirm your identity for selected operations on the Website and to send SMS notifications if you consent to them. We do not send marketing SMS messages. We send SMS messages through the SMSAPI platform (smsapi.pl), to which we pass only the phone number and the content of the message.

5. Purposes and legal bases of processing

We process data on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR):

• to conclude and perform the agreement for the provision of electronic services, including maintaining your user account, and agreements for the purchase of tickets, passes, online access and goods in the shop (Article 6(1)(b) GDPR);
• to send the newsletter and SMS notifications, on the basis of your consent, which you can withdraw at any time (Article 6(1)(a) GDPR);
• to handle complaints and to respond to questions, opinions and requests (Article 6(1)(c) and (f) GDPR);
• to issue invoices and keep the accounts required by law (Article 6(1)(c) GDPR);
• to ensure the security of the Website, prevent abuse and establish and pursue claims, which constitutes our legitimate interest (Article 6(1)(f) GDPR);
• for statistical and marketing purposes using cookies, solely with the consent given in the cookie settings (Article 6(1)(a) GDPR).

6. Recipients of data

We entrust data to entities that provide services necessary for the operation of the Website and that process it solely on our instructions: hosting and IT service providers, electronic payment operators, the accounting office, the printing house, the law firm, the SMSAPI platform for sending SMS messages, Google for Google sign-in and, for the Five Flavours at Home VOD service, the provider of the video streaming and DRM platform and the provider of the IP geolocation database we use to apply geo-blocking. With the consent given in the cookie settings, technical data is passed to the providers of statistical and marketing tools (Google Analytics, Meta Pixel) described in Part II. Data may also be disclosed to public authorities where required by law.

Some of these providers (Google, Meta) may process data outside the European Economic Area. This takes place on the basis of a European Commission adequacy decision or standard contractual clauses.

7. How long we keep data

• user account data: for as long as the account exists and for 3 years after its deletion or the end of the services;
• order data and accounting documents: 5 years from the beginning of the year following the year in which the transaction was finally settled or became time-barred;
• complaint data: 1 year after the complaint has been resolved or the warranty period has expired;
• correspondence: 1 year after the reply has been sent;
• data related to abuse: until the claims or liability become time-barred;
• SMS verification codes: 60 days from sending;
• data processed on the basis of consent: until the consent is withdrawn.

8. Your rights

Every user has the right to access their data, to have it rectified, erased or its processing restricted, the right to data portability for data processed in order to perform an agreement, the right to object to processing based on a legitimate interest, and the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

You can correct your account data yourself after logging in, under "Account". To delete your account together with the data received from Google, or to exercise your other rights, simply write to info@piecsmakow.pl from the e-mail address assigned to your account. Account deletion does not cover order data, which we are required to keep for the period specified by tax and accounting regulations.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland).

9. Security

The connection to the Website is encrypted (HTTPS). User passwords are stored only as an irreversible hash. Access to data is limited to authorised persons and to the extent necessary for their duties.

10. Changes to this policy

This policy may be updated, in particular when the Website's features or the law change. The current version is always available at this address. This version applies from 2 September 2026.

Part II. Cookies

On piecsmakow.pl, the website operated by the Arteria Art Foundation, we use cookies. Cookies are small text files that are stored on your computer or mobile device when you browse our website.

Cookies serve various purposes on the piecsmakow.pl website. They collect information to enhance the user experience by temporarily storing user preferences (such as user name, language etc.), eliminating the need to re-enter the same data during a single visit. Additionally, cookies can compile anonymous statistics about website usage and create user interest profiles for displaying relevant advertisements.

There are two main types of cookies: first-party cookies,which are files specific to the visited website and can only be read by that website, and third-party cookies, which are files from external services utilized by the website.

Cookies can also be classified based on their duration: persistent cookies are stored on the user's computer and remain even when the browser is closed, while session cookies are automatically deleted when the user exits the browser application.

Lastly, cookies can be categorized according to their purpose of use, which include the following:

Essential cookies

These cookies are necessary for navigating the website and using its essential features. They are required to provide the telecommunications service and transmit data to display content.

Functionality cookies

Functionality cookies enable the website to provide additional functionalities and remember user-selected settings.

Performance cookies

Performance cookies aid in understanding how users interact with the website by collecting and reporting information. On piecsmakow.pl, these cookies include third-party cookies from the Google Analytics tool, which are used for the following purposes:

• to collect information about user activity on the website
• to generate detailed reports and analyze user behavior on the website

The data collected through Google Analytics cookies may be used by us to analyze user behavior and enhance the piecsmakow.pl website, with a focus on improving the user experience and evaluating the effectiveness of marketing campaigns.

The provider of the Google Analytics tool does not use the collected data to personally identify individuals, nor does it combine this information to enable identification. More detailed information about the extent and principles of data collection related to this service, can be found at the following link: https://policies.google.com/technologies/partner-sites?hl=en

Advertising cookies

Advertising cookies enable us to create a user profile during a visit to the piecsmakow.pl website and provide users with tailored advertisements on third-party sites based on their profile.

On the piecsmakow.pl website, we use Meta Pixel (Facebook Pixel) to monitor the effectiveness of advertising campaigns on the Facebook platform and optimize our ads. Facebook Pixel is used in the following ways:

• Tracking conversion actions, such as purchases, registrations, downloads, etc., that result from users' interactions with ads on Facebook. This helps us measure the effectiveness of our advertising campaigns and identify which ads yield the best results.
• With the data collected through Facebook Pixel, Facebook can optimize ad display to reach relevant audiences.
• Facebook Pixel is also used for retargeting, which allows us to reach users who have previously visited piecsmakow.pl. Through retargeting, we can show personalized ads to users who have shown interest in our services but have not yet made a purchase.

Facebook uses data from the Facebook Pixel to generate reports and analyze the performance of advertising campaigns. This provides us with valuable information on metrics such as impressions, clicks, conversions, and other relevant data, which helps us assess the effectiveness of our ads and make informed decisions regarding our marketing strategies.

Facebook Pixel does not directly store users' personal data. Instead, it utilizes a unique identifier that is associated with the data collected on the Facebook platform.

At piecsmakow.pl we also use a Facebook Click ID file, which serves to track and report on the effectiveness of our Facebook advertising campaigns.

When a user clicks on an ad on Facebook and gets redirected to a website, the Facebook Click ID is stored in the user's browser as a cookie. This cookie contains a unique identifier for the click, which is then passed on to the landing page. This enables Facebook to track and analyze which ad clicks result in conversion actions, such as purchases or registrations.

The Facebook Click ID serves the following purposes:

• Placing a Facebook ID in a user's browser when they click on an ad on the Facebook platform. This enables Facebook to track ad clicks and redirect users to the appropriate landing pages.
• Collecting data on clicks and conversions, including purchases, registrations, downloads, etc., through the Facebook Click ID. This allows us to effectively measure the effectiveness of our advertising campaigns and understand which ads are driving desired results.
• Utilizing the data from the Facebook Click ID to optimize ad delivery and reach the right audience.
• Retargeting, so reaching users who have previously visited piecsmakow.pl. This allows us to target users who have shown interest in our services but have not yet taken the desired action, such as making a purchase.
• Generating reports and analyzing the results of advertising campaigns using data from the Facebook Click ID. This provides us with valuable insights such as the number of clicks, ad costs, conversion rates, and other data that help us evaluate ad effectiveness and make informed marketing decisions.

Facebook Click ID is solely used by Facebook and does not store any personal user data apart from click information. However, Facebook may combine this data with other information collected by the platform to generate more accurate marketing reports and analyses.

For detailed information about Facebook Pixel and Facebook Click ID, please visit this link: https://www.facebook.com/privacy/policies/cookies/?entry_point=cookie_policy_redirect&entry=0.

Information on how to customize Facebook ad displays based on activity information from advertising partners can be found at this link: https://www.facebook.com/help/568137493302217

Managing cookies

Essential cookies that are necessary for the proper functioning of the website are automatically installed on the user's device and cannot be opted out of, as they are required to provide the service. These cookies enable data transmission to display content or to provide services through the site. If the user wants to use the service, e.g. browse the website, it is not possible to opt out of these cookies.

Performance and advertising cookies are not automatically installed on the user's device. The user can choose to give consent for the installation of performance and/or advertising cookies.

To give consent for the installation of performance and/or advertising cookies, the user can click "Accept all" on the pop-up that appears after entering the piecsmakow.pl website.

Alternatively, the user can choose to install only selected performance and/or advertising cookies. To do so, simply click "Manage cookies" on the pop-up and select the specific cookies the user wishes to agree to.

The user can withdraw the given consent at any time. To do so, the user should click on "Manage cookies" and select the option to withdraw consent.

Withdrawal of consent for the use of cookies is also possible via browser settings:

• Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac
• Google Chrome: https://support.google.com/chrome/answer/95647?hl=en&sjid=6946889798975837555-EU
• Mozilla Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
• Opera: https://help.opera.com/en/latest/web-preferences/
• Internet Explorer: https://support.microsoft.com/en-gb/windows/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d
• Safari: In Safari, go to "Preferences," then click on the "Privacy" tab. From there, you can manage your cookie settings and choose to block or delete cookies.
• Google Chrome: In Chrome, click on the menu icon (three dots) in the top-right corner, then select "Settings." Scroll down and click on "Advanced" to expand the settings, then under "Privacy and security," click on "Content settings." From there, you can manage your cookie settings and choose to block or delete cookies.
• Mozilla Firefox: In Firefox, click on the menu icon (three lines) in the top-right corner, then select "Options." In the left sidebar, click on "Privacy & Security." Under the "Cookies and Site Data" section, you can manage your cookie settings and choose to block or delete cookies.
• Opera: In Opera, click on the menu icon (three lines) in the top-left corner, then select "Settings." In the left sidebar, click on "Privacy & security." Under the "Cookies" section, you can manage your cookie settings and choose to block or delete cookies.
• Internet Explorer: In Internet Explorer, click on the gear icon in the top-right corner, then select "Internet options." In the "Privacy" tab, you can manage your cookie settings and choose to block or allow cookies.

If you do not give your consent or if you withdraw your consent to a particular type of cookie, cookies will not be installed on your device according to your browser settings.