privacy policy

PRIVACY POLICY

• 1. What does the Privacy Policy cover?

1. The Privacy Policy of the website www.unicobachata.com ("Website") explains what personal data we collect and use, why and for what purposes we process it, to whom we may transfer it, how long we store it and what rights data subjects have.
2. The Privacy Policy applies to you if:
   2.1. you use publicly available functionalities of the Website;
   2.2. you place an Order or purchase a Ticket for an Event;
   2.3. you are a Participant for whom the Ticket was purchased by another person;
   2.4. you participate in an Event, Social, workshop, class, competition or show;
   2.5. you subscribe to the Newsletter;
   2.6. you consent to receiving marketing information regarding the Administrator's activities;
   2.7. you participate in a survey, competition or promotion;
   2.8. you contact us via email, telephone, contact form or social media;
   2.9. you are recorded in a photograph or video taken during the Event;
   2.10. you report an incident, complaint, damage or violation of the Event rules;
   2.11. you are the statutory representative or Guardian of an underage Participant.
3. Terms such as Administrator, Website, Buyer, Participant, Ticket, Order, Event, Social, Newsletter and Guardian have the meaning given to them in the Regulations for the provision of electronic services, sale of Tickets and participation in Events.
4. The Website may contain links, references, embedded materials, and plug-ins from third-party providers. These providers may independently determine their personal data processing policies. Before using their services, we recommend that you review the privacy information they provide.

• 2. Who is the controller of your data?

1. The personal data administrator is:

ONDANCE EVENTS Sp. z o. o.
based in Warsaw
Szczęsna Street 26
02-454 Warsaw, Poland

KRS: 0000903415
Tax Identification Number: 5223203694
REGON: 389090680
Share capital: PLN 5,000.00

1. Hereinafter in the Privacy Policy ONDANCE EVENTS Sp. z o. o. is referred to as the "Administrator", "we" or "us".
2. You can contact us using the details indicated in § 14.

• 3. What data do we process?

1. The scope of data processed depends on how you use the Website and our services.
2. If you use the Website, we may process:
   2.1. IP address;
   2.2. information about your device, operating system and browser;
   2.3. device, browser or session identifiers;
   2.4. date and time of use of the Website;
   2.5. information about the subpages visited and actions taken;
   2.6. data regarding the source of entry to the Website;
   2.7. information about interactions with advertisements;
   2.8. data collected using cookies and similar technologies;
   2.9. information on granted, refused or withdrawn consent to cookies.
3. The scope of data collected using optional analytical and marketing tools depends on the consents you provide.
4. If you, as a Buyer, place an Order, we may process:
   4.1. name and surname;
   4.2. email address;
   4.3. telephone number;
   4.4. billing address;
   4.5. company name, tax identification number and other data necessary to issue an invoice, if you request an invoice;
   4.6. Order number;
   4.7. information about selected Tickets;
   4.8. information about the Discount Coupon used;
   4.9. payment status information;
   4.10. transaction identifier provided by the Payment Operator;
   4.11. content of correspondence regarding the Order;
   4.12. information about complaints, returns and changes to data on Tickets.
5. The Administrator does not receive full payment card details or online banking login information. This data is processed by the Payment Operator in accordance with its policies.
6. In relation to the person indicated as Participant, we may process:
   6.1. name and surname;
   6.2. type of Ticket assigned;
   6.3. dance role, level or chosen activity track, if required for the organisation of the programme;
   6.4. Ticket number or code;
   6.5. information about Ticket verification and entry to the Event;
   6.6. information on the issuance of a wristband or ID badge;
   6.7. information about changes to Participant data;
   6.8. other information necessary for the proper organization of participation in the Event.
7. If another person purchases the Ticket, we receive the Participant's data from the Buyer.
8. The Buyer is obliged to inform the Participant about the transfer of his or her data to the Administrator and make this Privacy Policy available to him or her.
9. If we have a Participant's direct contact details, we may provide them with information regarding data processing upon their first direct contact. This information is also available on the Website and may be shared during Event registration.
10. If you subscribe to the Newsletter or consent to marketing communications, we may process:
    10.1. email address;
    10.2. name and surname, if provided;
    10.3. date and source of recording;
    10.4. content and scope of consents granted;
    10.5. information about changes or withdrawal of consent;
    10.6. information about marketing preferences;
    10.7. information about assignment to a specific group or segment;
    10.8. information on unsubscribing from the Newsletter;
    10.9. information about the sending, delivery or non-delivery of a message;
    10.10. information about clicking on the link contained in the message;
    10.11. other technical and statistical information regarding your interaction with the message, to the extent permitted by law and your privacy settings.
11. If you contact us, we may process:
    11.1. name and surname;
    11.2. email address;
    11.3. telephone number;
    11.4. content of correspondence;
    11.5. information about the Order, Ticket or Event;
    11.6. other information voluntarily provided in connection with contact.
12. If you enter a competition, we may process:
    12.1. name and surname or nickname;
    12.2. contact details;
    12.3. type of Ticket held;
    12.4. competition category and dance role;
    12.5. starting number;
    12.6. information on fulfillment of the conditions of participation;
    12.7. results, grades, scores, placement and promotion information;
    12.8. information about warnings, point deductions or disqualifications;
    12.9. photographs and video recordings of the performance;
    12.10. information needed to transfer the prize and fulfill tax obligations.
13. If you attend a show, we may process:
    13.1. name and surname or nickname;
    13.2. name of the group or pair;
    13.3. organizational information regarding the performance;
    13.4. photographs and video recordings of the performance;
    13.5. information provided for the purpose of promoting the performance.
14. During Events, we may take photographs and video recordings of:
    14.1. course of the Event;
    14.2. classes and workshops;
    14.3. Socials and dance practices;
    14.4. competitions and shows;
    14.5. audience and groups of Participants;
    14.6. individual images of persons, if there is an appropriate legal basis.
15. If you indicate that you do not wish to be individually recorded or published, we may process your name, the content of your submission, and the information necessary to respect your preferences.
16. In connection with the security of the Event, we may process:
    16.1. information about violations of the Regulations;
    16.2. information about refusal of entry or removal from the Event;
    16.3. description of the incident;
    16.4. date, place and participants of the event;
    16.5. witness details;
    16.6. photographic or video documentation of the incident;
    16.7. information about the damage caused;
    16.8. information regarding the intervention of security, police, ambulance or other services;
    16.9. correspondence, reports, cost estimates, invoices and other documents related to the event.
17. We do not ask Participants to provide detailed health data unless this is genuinely necessary to ensure safety, provide assistance, accommodate special needs or comply with a legal obligation.
18. If you voluntarily provide us with health-related information, we request that you limit it to only what is necessary. Where required by law, we may ask for your explicit consent to process such information.
19. In relation to a minor Participant, we may additionally process:
    19.1. date of birth or age information;
    19.2. name and surname of the legal representative;
    19.3. contact details of the legal representative;
    19.4. content and date of consent to participate;
    19.5. name and surname of the Guardian;
    19.6. contact details of the Guardian;
    19.7. information on the authorisation of the Guardian by the legal representative;
    19.8. consents regarding the image of a minor Participant, if required.
20. If you use a survey or promotion, we may process the data provided in the form, responses, contact details, and information necessary to carry out the activity.

• 4. For what purposes and on what basis do we process data?

1. We process Buyer data for the purpose of:
   1.1. acceptance and execution of the Order;
   1.2. conclusion and performance of the contract;
   1.3. acceptance of payment;
   1.4. issuing and sending Tickets;
   1.5. handling data changes, complaints and returns;
   1.6. providing organizational information regarding the Event.
2. The basis for the processing of the data indicated in paragraph 1 is the necessity to conclude or perform a contract in accordance with Article 6 paragraph 1 letter b of the GDPR.
3. We process the data of a Participant who is not a Buyer for the following purposes:
   3.1. assigning a personal Ticket;
   3.2. verification of eligibility to participate;
   3.3. maintaining lists of Participants;
   3.4. issuing a wristband or ID badge;
   3.5. organization of individual parts of the program;
   3.6. ensuring security;
   3.7. performance of the contract concluded by the Buyer in favour of the Participant.
4. The basis for processing the Participant's data may be:
   4.1. performance of a contract to which the Participant is a party, or taking action at his request – Article 6, paragraph 1, letter b of the GDPR;
   4.2. the legitimate interest of the Administrator consisting in the performance of the contract concluded with the Buyer, proper organisation of the Event, verification of named Tickets and ensuring security – Article 6 paragraph 1 letter f of the GDPR.
5. We process data regarding payments, invoices, accounting documents and settlements in order to comply with the legal obligations incumbent on the Controller, pursuant to Article 6(1)(c) of the GDPR.
6. We process data regarding the Newsletter and marketing communications:
   6.1. based on consent – Article 6(1)(a) of the GDPR;
   6.2. to the extent necessary to protect against claims and document consents – based on the legitimate interest of the Controller, in accordance with Article 6(1)(f) of the GDPR.
7. We use email and other marketing communication channels after meeting the requirements of electronic communications regulations.
8. We process the data provided in connection with contact:
   8.1. in order to take steps before concluding a contract or to perform a contract – Article 6(1)(b) of the GDPR;
   8.2. in order to process other inquiries and conduct communication – based on the legitimate interest of the Controller, in accordance with Article 6 paragraph 1 letter f of the GDPR;
   8.3. based on consent, if it is an appropriate basis in a given situation – Article 6(1)(a) of the GDPR.
9. We process competition data for the following purposes:
   9.1. acceptance of the application;
   9.2. verification of the conditions of participation;
   9.3. conducting the competition;
   9.4. preparation of classifications and announcement of results;
   9.5. awarding and transferring prizes;
   9.6. handling complaints;
   9.7. documenting the course of the competition.
10. The basis for processing competition data is:
    10.1. performance of the contract regarding participation in the competition – Article 6, paragraph 1, letter b of the GDPR;
    10.2. compliance with legal obligations, in particular tax obligations – Article 6, paragraph 1, letter c of the GDPR;
    10.3. the legitimate interest of the Controller consisting in documenting the course of the competition, protecting against claims and maintaining an archive of results – Article 6 paragraph 1 letter f of the GDPR;
    10.4. consent – Article 6(1)(a) of the GDPR, if required in a specific case.
11. Photographs and video recordings may be processed for the following purposes:
    11.1. documenting the Event;
    11.2. preparing and publishing reports;
    11.3. providing information about the Administrator's activities;
    11.4. promotion of current and future Events;
    11.5. publishing materials from competitions and shows;
    11.6. ensuring safety and determining the course of the incident.
12. The basis for image processing may be:
    12.1. consent of the person presented – Article 6(1)(a) of the GDPR;
    12.2. performance of a contract regarding participation in a competition, show or production of ordered material – Article 6(1)(b) of the GDPR, if recording remains an essential element of the performance;
    12.3. the Controller's legitimate interest in documenting and reporting on the Event, promoting its own activities, ensuring security and protecting against claims – Article 6, paragraph 1, letter f of the GDPR;
    12.4. legal obligation – Article 6(1)(c) of the GDPR, if processing is required by law.
13. The dissemination of the image takes place in accordance with the regulations on image protection, in particular the rules regarding permission and statutory exceptions.
14. If a person is only a detail of a larger whole, such as the audience, a group of Participants, a room or the course of the Event, his or her image may be disseminated within the limits permitted by law.
15. If a person is the main and individually recognizable element of the material, we obtain permission to disseminate their image, unless a statutory exception applies.
16. We process data regarding security, violations of the Regulations, damages and interventions based on the legitimate interest of the Controller, in accordance with Article 6 paragraph 1 letter f of the GDPR, consisting in:
    16.1. ensuring the safety of Participants and persons implementing the Event;
    16.2. protection of property;
    16.3. enforcement of the Regulations;
    16.4. preventing abuse;
    16.5. determining the course of incidents;
    16.6. establishing, pursuing and defending against claims.
17. We process the data of underage Participants and their legal representatives and Guardians for the following purposes:
    17.1. verification of consent to participate;
    17.2. ensuring proper care;
    17.3. contact in case of organizational or emergency matters;
    17.4. ensuring security;
    17.5. performance of the contract regarding participation in the Event.
18. The basis for processing the data indicated in paragraph 17 may be the performance of a contract, compliance with a legal obligation, the legitimate interest of the Controller or consent – depending on the type of data and circumstances.
19. We only process health data where there is a basis under Article 9 of the GDPR, in particular the express consent of the data subject or the need to protect their vital interests where they are unable to consent.
20. We process technical data and information about the security of the Website based on the legitimate interest of the Controller, in accordance with Article 6 paragraph 1 letter f of the GDPR, consisting in:
    20.1. ensuring the proper functioning of the Website;
    20.2. preventing fraud and abuse;
    20.3. detecting unauthorized activities;
    20.4. securing systems, accounts and transactions;
    20.5. maintaining basic technical statistics.
21. We use optional analytical and advertising tools after obtaining the required consent. The basis for processing personal data in this case is Article 6(1)(a) of the GDPR.
22. We may process data to establish, pursue, and defend against claims related to the Website, Orders, Tickets, payments, and participation in Events. This is based on the Controller's legitimate interest in accordance with Article 6(1)(f) of the GDPR.
23. If you withdraw your consent, unsubscribe from the Newsletter or object to direct marketing, we may retain a limited amount of information needed to:
    23.1. documenting consent and its withdrawal;
    23.2. respecting your preferences;
    23.3. preventing you from being accidentally contacted again;
    23.4. protection against claims.
24. The basis for the limited processing indicated in paragraph 23 is the legitimate interest of the Controller in accordance with Article 6 paragraph 1 letter f of the GDPR.

• 5. Service providers and systems used

1. We use the assistance of entities providing services necessary to run the Website and organize Events.
2. These may include, in particular:
   2.1. hosting and IT infrastructure providers;
   2.2. email providers;
   2.3. Ticket sales and service system providers;
   2.4. Payment Operators;
   2.5. Newsletter and marketing communication system providers;
   2.6. providers of analytical and advertising tools;
   2.7. providers of accounting, legal and administrative services;
   2.8. owners or managers of facilities;
   2.9. entities providing security and safety;
   2.10. photographers, video operators and persons preparing materials from the Event;
   2.11. entities technically supporting the organization of the Event.
3. The website uses WordPress, WooCommerce, and FooEvents to manage content, orders, and tickets. Using these solutions does not necessarily involve transferring data to their creators, unless a specific service, integration, hosting, or technical support requires access to the data.
4. Electronic payments can be processed via Przelewy24. The Payment Operator processes payment data in accordance with its own legal obligations and privacy notices.
5. We may use the Kit and MailerLite platforms to manage the Newsletter and marketing communications.
6. The Kit and MailerLite platforms help us:
   6.1. maintain a subscriber database;
   6.2. send messages;
   6.3. process registrations and cancellations;
   6.4. maintain exclusion lists;
   6.5. segment your audience;
   6.6. handle communication automation;
   6.7. analyze message delivery and interactions.
7. Due to migration or parallel use of mailing systems, we may transfer data between Kit and MailerLite.
8. Transferring data between systems does not extend the scope of marketing consent or re-enroll a person who has previously withdrawn consent or unsubscribed from the Newsletter.
9. We may store the minimum information necessary to honor your opt-out in both systems, including your email address and opt-out status.
10. We share data with suppliers only to the extent necessary to perform the tasks entrusted to them.
11. Entities processing data on our behalf are obliged to properly secure it and process it in accordance with concluded agreements and our instructions.

• 6. Meta Pixel and Google Analytics 4

1. On the Website we use the Meta Pixel tool provided by Meta Platforms Ireland Limited.
2. Meta Pixel can allow you to:
   2.1. measuring advertising effectiveness;
   2.2. analyzing actions taken after entering the Website;
   2.3. creating advertising audiences;
   2.4. limiting the number of inappropriate advertisements;
   2.5. conducting remarketing;
   2.6. analyzing conversions, including moving to a shopping cart or completing a purchase.
3. In particular, the following can be processed using Meta Pixel:
   3.1. IP address;
   3.2. cookie identifiers;
   3.3. device and browser information;
   3.4. information about visited subpages;
   3.5. information about interactions with the Website;
   3.6. information about the input source;
   3.7. information regarding the performance of a specific event on the Website.
4. Meta Pixel is activated after obtaining the required consent for marketing cookies.
5. We may act jointly with Meta to collect data through the Meta Pixel and transmit it to Meta, as defined by that provider's terms and conditions. Meta may then process the data received as a separate controller in accordance with its own privacy policies.
6. We plan to implement Google Analytics 4 provided by Google Ireland Limited.
7. Google Analytics 4 can be used to:
   7.1. measuring the number of visits;
   7.2. analysis of how the Website is used;
   7.3. determining traffic sources;
   7.4. analysis of the performance of individual subpages;
   7.5. preparing statistics and reports;
   7.6. improving the functioning of the Website.
8. Google Analytics 4 will not be launched before its actual implementation or without obtaining the required consent for analytical cookies.
9. After implementing Google Analytics 4, the following data may be processed in particular:
   9.1. IP address within the scope resulting from the tool configuration;
   9.2. Device, browser and cookie identifiers;
   9.3. technical data of the device;
   9.4. information about visited subpages;
   9.5. time and manner of using the Website;
   9.6. information about the input source;
   9.7. information about your approximate location;
   9.8. events configured on the Website.
10. You can manage your Meta Pixel and Google Analytics 4 preferences using the cookie consent management tool available on the Website.

• 7. How long do we store data?

1. We process data no longer than necessary to achieve the purpose for which it was collected, taking into account legal obligations and limitation periods for claims.
2. We store data regarding Orders, Tickets and contract performance for the duration of the contract and then until the expiry of the applicable limitation period for claims.
3. Depending on the nature of the claim, the limitation period may be, in particular, 3 or 6 years and may end on the last day of the calendar year.
4. We retain tax and accounting documents for the period required by applicable regulations, generally for 5 years calculated in accordance with the applicable tax or accounting regulations.
5. We process Participant data for the time needed to manage the Event, and then for the period necessary to process complaints and protect against claims.
6. We process competition data for the duration of the competition, the announcement of results, the distribution of prizes, and the processing of complaints. Results and information about winners may be retained longer for documentation and archival purposes, based on the Controller's legitimate interest.
7. We process data regarding incidents, refusal of entry, damages and interventions until the matter is clarified, the obligations related to the event are fulfilled and the limitation period for claims related to it expires.
8. We process photographic and video materials for a period corresponding to the purpose of their production and publication, and then for the period necessary to protect against claims or maintain the Administrator's legitimate archive.
9. If the basis for the use of an individual image is consent, we process the material until the consent is withdrawn or the purpose ceases to exist, unless there is another legal basis for further storage.
10. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
11. We process Newsletter data until:
    11.1. withdrawal of consent;
    11.2. unsubscribing from the Newsletter;
    11.3. objecting to direct marketing;
    11.4. termination of the Newsletter.
12. After opting out, we may retain a minimum amount of data on an exclusion list for the period necessary to honor your opt-out and protect you against claims.
13. We store data processed on the basis of a legitimate interest until the purpose ceases to exist or an effective objection is taken into account, unless there are overriding legitimate grounds for further processing.
14. We store data collected using cookies for the duration of the cookie's validity period or until you withdraw your consent or delete the cookies. Detailed time periods can be viewed in the consent management tool.
15. We may retain information about granted or rejected cookie consents for the period necessary to demonstrate compliance with regulations and respect user preferences.

• 8. What rights do you have?

1. In connection with data processing, you may, under the terms set out in the GDPR, use:
   1.1. data access rights;
   1.2. the right to obtain a copy of the data;
   1.3. the right to rectify data;
   1.4. the right to delete data;
   1.5. the right to restrict processing;
   1.6. right to data portability;
   1.7. the right to object to processing based on legitimate interests;
   1.8. the right to object to direct marketing, including related profiling;
   1.9. the right to withdraw consent;
   1.10. the right to lodge a complaint with the supervisory authority.
2. The right to data portability exists if the processing is based on consent or a contract and is carried out in an automated manner.
3. If we process your data based on legitimate interests, you may object for reasons relating to your particular situation.
4. If you object to direct marketing, we will cease processing your data for this purpose.
5. If we process your data based on consent, you can withdraw it at any time.
6. Withdrawal of consent does not affect the lawfulness of previous processing.
7. A complaint regarding data processing may be submitted to the President of the Personal Data Protection Office.
8. To exercise your rights, you can contact us using the details provided in § 14.

• 9. Who can we transfer data to?

1. Data may be shared:
   1.1. hosting and IT infrastructure providers;
   1.2. email providers;
   1.3. entities providing technical support for the Website;
   1.4. Payment Operators;
   1.5. Newsletter and marketing system providers, including Kit and MailerLite;
   1.6. providers of analytical and advertising tools, including Meta and – after implementation – Google;
   1.7. accounting offices;
   1.8. law firms;
   1.9. photographers and videographers acting under our authority;
   1.10. entities supporting the organization and security of the Event;
   1.11. owners and managers of facilities, if necessary to organize the Event or clarify the incident;
   1.12. insurers, if necessary for the settlement of the loss;
   1.13. suppliers of competition prizes, if this is necessary for the delivery of the prize and the Participant has been informed thereof;
   1.14. Police, prosecutors, courts, tax authorities and other entities authorized under the law.
2. We only provide entities processing data on our behalf with the data necessary to perform a specific task.
3. We do not sell databases of Buyers, Participants or subscribers to third parties for the purpose of conducting their own marketing.
4. If an Event partner were to receive data for its own marketing purposes, this would only be done on the basis of a separate legal basis and after providing the person with appropriate information.

• 10. Monitoring carried out by the facility

1. Depending on the location of the Event, its area may be subject to video surveillance operated by the owner, manager or operator of the facility.
2. ONDANCE EVENTS Sp. z o. o. is not the administrator of monitoring conducted independently by the owner or manager of the facility.
3. Information regarding the administrator of the monitoring, its purposes, legal basis, scope and period of storage of recordings should be made available by the entity conducting the monitoring, in particular on markings located in the facility or in its Privacy Policy.
4. In the event of an incident, we may ask the venue operator to secure or provide access to specific footage if there is an appropriate legal basis for doing so.
5. If we receive a copy of the recording, we will only process it for the purposes of investigating the incident, ensuring security and establishing, pursuing or defending against legal claims.
6. We do not conduct continuous sound monitoring during Events.
7. Video recordings made by authorized persons for the purpose of preparing coverage of the Event may contain sound that is an integral part of the material.

• 11. Data transfer outside the EEA

1. Our suppliers are primarily based in the European Economic Area („EEA”).
2. Some suppliers, including Kit, Google, Meta or their subcontractors, may be located or use infrastructure located outside the EEA, including in the United States.
3. In the case of data transfer outside the EEA, we use or require the use of mechanisms provided for in the GDPR, in particular:
   3.1. European Commission decision establishing an adequate level of protection;
   3.2. EU–US Data Privacy Framework, if the recipient is covered by this mechanism;
   3.3. standard contractual clauses approved by the European Commission;
   3.4. additional security measures required due to the nature of the transfer;
   3.5. other legally permissible mechanisms.
4. The specific transfer mechanism depends on the provider, their current status and the service used.
5. You may contact us for information about the safeguards applied to specific data transfers outside the EEA.

• 12. Information security

1. We use appropriate technical and organizational measures to protect data against:
   1.1. unauthorized access;
   1.2. unauthorized disclosure;
   1.3. loss;
   1.4. destruction;
   1.5. accidental change;
   1.6. use incompatible with the purpose of processing.
2. The scope of security measures used is adapted to the type of data, the method of processing and the level of risk.
3. Access to data is only granted to persons and entities who need it to perform their duties.
4. Persons with access to the data are obliged to maintain confidentiality or are subject to an appropriate statutory obligation.
5. We regularly review the security measures we use and update them as necessary.

• 13. Cookies

1. Cookies are small files saved on your device when you use the Website.
2. Cookies may contain:
   2.1. Browser, device or session identifier;
   2.2. information about selected settings;
   2.3. information about the contents of the shopping cart;
   2.4. information about consents granted;
   2.5. technical information required for the operation of the Website;
   2.6. analytical or marketing data, if the User has given appropriate consent.
3. The following may be used on the Website:
   3.1. necessary cookies;
   3.2. functional cookies;
   3.3. analytical cookies;
   3.4. marketing and advertising cookies.
4. Essential cookies are used in particular to:
   4.1. ensuring safety;
   4.2. maintaining the session;
   4.3. basket management;
   4.4. processing the Order;
   4.5. remembering your privacy choices;
   4.6. ensuring the proper functioning of the Website.
5. Necessary cookies may be used without additional consent to the extent permitted by law.
6. Functional cookies allow us to remember certain user preferences and settings.
7. Analytical cookies help us analyze how the Website is used and improve its performance.
8. Once Google Analytics 4 is implemented, the associated analytical cookies will be enabled upon consent.
9. Marketing and advertising cookies may be used to:
   9.1. measuring the effectiveness of advertising;
   9.2. analyzing conversions;
   9.3. conducting remarketing;
   9.4. creating audiences;
   9.5. tailoring advertising;
   9.6. limiting the frequency of their display.
10. Meta Pixel and related technologies are activated after consent to marketing cookies is obtained.
11. When you first visit the Website, a tool is displayed that allows you to:
    11.1. accept all optional cookies;
    11.2. reject all optional cookies;
    11.3. select individual categories;
    11.4. obtain information about cookie providers and operating periods.
12. Refusing optional cookies should be as easy as accepting them.
13. No action, further browsing of the Website or default browser settings are not treated as consent to optional cookies.
14. Consent can be withdrawn or changed using the consent management tool available on the Website.
15. Withdrawal of consent does not affect the lawfulness of previous processing.
16. The user can also manage cookies in their browser settings, in particular by deleting, blocking or restricting them.
17. Blocking necessary cookies may result in incorrect operation of the shopping cart, ordering process, payment or other functionalities of the Website.
18. Cookies can be session or persistent:
    18.1. Session cookies are stored until the session ends or the browser is closed;
    18.2. Persistent cookies are stored for a specified period of time or until deleted earlier.
19. Third-party cookies may come in particular from:
    19.1. Payment Operator;
    19.2. Finish line;
    19.3. Google – after implementing Google Analytics 4;
    19.4. suppliers of embedded materials;
    19.5. other providers of functionalities used on the Website.
20. An up-to-date list of cookies used, their providers, purposes and operating periods should be available in the consent management tool.

• 14. Contact us

1. If you have any questions regarding data processing, wish to exercise your rights, withdraw your consent or object, you can contact us:

Email address:
contact@unicobachata.com

Phone number:
+48 733 809 816

Correspondence address:
ONDANCE EVENTS Sp. z o. o.
Szczęsna Street 26
02-454 Warsaw
Poland

1. Please do not provide more information in your report than is necessary to process your case.
2. We may request information needed to confirm the identity of the person making the request if this is necessary to protect the data against disclosure to an unauthorized person.

• 15. Changes to the Privacy Policy

1. We may update the Privacy Policy, in particular in the event of:
   1.1. changes to applicable regulations;
   1.2. changes to the way the Website operates;
   1.3. introducing new services;
   1.4. changes to the scope or method of data processing;
   1.5. changes in the technologies used;
   1.6. changing or adding service providers;
   1.7. implementation of new analytical or advertising tools.
2. The current version of the Privacy Policy is published on the website www.unicobachata.com.
3. If the change requires obtaining new consent, we will ask for it before processing the data in the new scope.