Ladies and Gentlemen,
In relation to new regulations on personal data protection, we hereby fulfil our duty of informing you on the way we process your data. Below you will find explanation of the most important topics.
Should you have any questions, you are encouraged to contact our Data Protection Officer from Monday to Friday 8.00–16.00.
Narodowa Orkiestra Symfoniczna Polskiego Radia z siedzibą w Katowicach, Plac W.Kilara 1, 40 – 202 Katowice
Where do we get your data from?
We have obtained your data from you. You have deposited your data with us while signing up for our evnts during a phone call or on our website.
Who controls your data?
The controller of your data is Narodowa Orkiestra Symfoniczna Polskiego Radia z siedzibą w Katowicach, Plac W.Kilara 1, 40 – 202 Katowice
How do we use your data?
Your data will be used for marketing our products and services and, if you express (or have already expressed) your consent, also for market research (exclusively to the extent you agree or have agreed for). Since this information concerns personal data processing in relation to marketing, it is not excluded that we process your data for other purposes as well, e.g. to perform an agreement (should you enter or have entered into one) or to perform a legal obligation (e.g. to issue an invoice). Such processing shall always be compliant with relevent laws and regulations.
How to withdraw your consent or to object?
You may withdraw your consent given to NOSPR in relation to processing of personal data at any time without any negative consequences. All you need to do is to send an email to email@example.com or to send traditional mail to: Narodowa Orkiestra Symfoniczna Polskiego Radia z siedzibą w Katowicach, Plac W.Kilara 1, 40 – 202 Katowice. Your withdrawal of consent does not affect the legality of processing the data prior to the withdrawal, i.e. the processing of your data by NOSPR is legal up to the point of you withdrawing your consent.
How to contact our Data Protection Officer?
You can do it by sending an email to firstname.lastname@example.org
On what basis will we process your personal data?
The basis for processing your personal data is NOSPR’s legally justified interest, i.e. direct marketing of its products and services. In the case of other goals mentioned in this information. the basis for processing is your consent.
When and with whom may we share your data, and with whom will we certainly not share them?
Should you express such consent, we will share your data with our partners, with whom NOSPR cooperates (“NOSPR partners”), so that they are able to use it for market research. We shall not share your data with third countries (outside the European Economic Area).
What can you do with the personal data you give us?
You may request from NOSPR access to, amending, deleting, or limiting the processing of your data, as well as moving it to a different data controller. As far as processing data for marketing NOSPR’s own products or services is concerned, you may object.
For how long will we store your data?
Data processed on the basis of your consent will be stored until the consent is withdrawn. Data processed on the basis of the controller’s legally justified interest (i.e. marketing of NOSPR’s own products and services) will be processed until you object.
Where can you complain about NOSPR’s processing of your data?
Data is processed for the purpose of rendering services, including performance of agreements, and for the purpose of the sale of products, as well as in cases when it is necessary for meeting the data Controller’s legally justified goals, especially for the purpose of direct marketing of its own products or services, or for other purposes, for which the user expresses their consent, if such consent is required by laws and regulations. In particular, this might be consent for receiving correspondence and trade information concerning the Controller’s and its cooperating partners’ own products and services, delivered by electronic means and on telephone. The person whom the data concerns has the right to withdraw their consent at any time.
The Controller processes the data in compliance with relevant laws and regulations and collects the data for specified and lawful purposes. The data is not further processed except for these purposes. The data is collected only to the extent relevant and necessary for the purposes of its processing. The Controller does not process specific categories of personal data. Sharing your data with the Controller is voluntary, yet necessary for rendering the Controller’s services.
The Controller shall make every effort to protect customers’ and users’ personal data from unauthorised access by third parties, and applies advanced organisational and technical safety measures to this end. The Controller does not share the personal data with any unauthorised recepients. The Controller may entrust, by way of an agreement made in writing, the processing of personal data on behalf of the Controller to a different body. The data may only be shared with bodies authorised to receive it by virtue of mandatory laws and regulations.
The Controller stores the data for a period necessary for the performance of agreement or for a period specified by relevant laws and regulations and no longer than it is necessary for purposes arising from legally justified interests pursued by the Controller or by a third party, e.g. for the purpose of pursuing claims related to the party’s operations. When a person has expressed their consent to processing their personal data for particular purposes, such data is stored until the consent is withdrawn.
The person whom the data concerns has the right to accessing, amending, deleting, or limiting the processing of their data, as well as the right to file a complaint in cases prescribed in statutory law and move their data. Furthermore, the person whom the data concerns also has the right to file a complaint with a supervisory authority, should they observe unlawful processing of their data.
If a person whom the data concerns has expressed consent to their data being processed for one or more specified purposes, they have the right to withdraw such consent at any time. Such a withdrawal does not void the legality of data processing performed before it.
Providing data is voluntary, yet not doing so in case of data marked as required precludes Registration or placing an Order. If processing data is necessary for performing an agreement to which the person whom the data concerns is a party, or for undertaking actions requested by the person whom the data concerns, prior to concluding an agreement, providing a specified and necessary set of data is required.