Privacy Policy
We care about your privacy. Below you'll find information about what data we collect, why, and what you can do about it.
Who is the controller of your data?
What data do we collect and why?
Open Call forms (music, visual, volunteering)
We collect: first name / band name, phone number, email address, bio, photo, location, links to your work and social media, technical rider, date availability.
Purpose: to review your application and contact you about taking part in the festival.
Legal basis: your consent (Art. 6(1)(a) GDPR).
Newsletter
We collect: email address.
Purpose: sending information about the festival.
Legal basis: your consent (Art. 6(1)(a) GDPR).
Tickets
Tickets are sold through the stage24.pl platform. The data provided at purchase (first name, surname, email, payment details) is processed by stage24 as a separate controller. You'll find the details in their privacy policy.
Participants' image
During the festival we record the event (photos, videos). Your image may be used in the Foundation's promotional materials. Details are set out in the festival Regulations.
Legal basis: the controller's legitimate interest (Art. 6(1)(f) GDPR) — documentation and promotion of our statutory activity.
Analytics and cookies
We use Google Analytics 4 (GA4) to analyse website traffic. We also embed Google Maps on the site. Both tools may store cookies in your browser.
Purpose: website traffic analysis, displaying the directions map.
Legal basis: the controller's legitimate interest (Art. 6(1)(f) GDPR).
You can manage cookies in your browser settings — including blocking them entirely. The site will still work, but some features (e.g. the map) may not display correctly.
Who do we share data with?
Your data may be shared with entities that help us run the website and organise the festival:
- Google LLC (analytics, maps)
- Resend Inc. (email delivery)
- Vercel Inc. (website hosting)
- Sanity AS (content management system)
Some of these entities are based outside the European Economic Area. Data is transferred on the basis of standard contractual clauses or a European Commission adequacy decision.
How long do we keep data?
- Open Call applications — until the recruitment process for a given festival edition ends, unless we need them longer in connection with your participation.
- Newsletter — until you unsubscribe.
- Analytics cookies — in line with GA4 settings (14 months by default).
- Image — indefinitely as part of festival documentation and promotion, unless you object.
Your rights
You have the right to:
- access your data,
- rectify it,
- erase it,
- restrict processing,
- data portability,
- object to processing,
- withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).
To exercise any of these rights, write to us: kontakt@spokojfestiwal.pl
If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the President of the Personal Data Protection Office (uodo.gov.pl).
Do you have to provide data?
Providing data in the Open Call forms and when signing up for the newsletter is voluntary but necessary for us to review your application or send you messages.