§1. Data Controller
The data controller is Fundacja Centrum Fotografii, based in Bielsko-Biała, ul. Stefana Batorego 5, 43-300 Bielsko-Biała, registered in the Register of Associations, Other Social and Professional Organizations and Foundations maintained by the District Court in Bielsko-Biała, VIII Commercial Division of the National Court Register under KRS number 0000223157, NIP: 5472015804, REGON: 07293196900000.

§2. Scope of Processed Data
The Foundation processes personal data of Customers, such as: full name, email address, correspondence address, phone number, and other data necessary for order fulfillment and communication.

These data are collected during order placement and while using the online store.

§3. Purpose and Legal Basis for Data Processing
Personal data are processed for the purposes of fulfilling orders, customer service, tax settlements, and compliance with legal obligations.

The legal basis for data processing is Art. 6(1)(b) and (c) GDPR – processing is necessary for the performance of a contract and for compliance with legal obligations incumbent on the Foundation.

§4. Data Sharing
The Foundation may share personal data with cooperating entities (e.g., payment service providers, accounting firms) only to the extent necessary to provide services and fulfill orders.

§5. Data Retention Period
Personal data will be stored for the period required by law, in particular during the fulfillment of an order and in accordance with tax and accounting obligations.

§6. Rights of Data Subjects
Customers have the right to access their data, correct it, delete it, or restrict its processing.

They also have the right to data portability and to object to its processing.

Consent to data processing can be withdrawn at any time, if the processing is based on consent.

In case of rights violations, Customers have the right to file a complaint with the President of the Personal Data Protection Office.

§7. Data Security
The Foundation implements appropriate technical and organizational measures to protect personal data from unauthorized access, loss, or damage.

§8. Cookies
The store uses cookies and similar technologies to improve the website’s functionality and analyze traffic. Details about cookies are provided in a separate Cookies Policy available on the store’s website.

§9. Contact for Data Protection Matters
Any questions regarding personal data processing can be directed to: info@fotoartfestival.com