In accordance with Article 13(1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter "GDPR", we inform you that:
1. Personal Data Controller
The controller of your personal data is Percatech Arkadiusz Okoń, with its registered office at 43-100 Tychy street Żarnowiecka 12, NIP (Tax ID): PL9542578680, REGON (Business ID): 365784102, email: arkadiusz.okon@gmail.com.
2. Purposes and Legal Bases for Processing
Your personal data will be processed for the following purposes:
- To provide services electronically, including enabling account registration and maintenance in the application, based on Article 6(1)(b) of the GDPR (necessity for the performance of a contract).
- To enable participation in competitions, including registration for selected events, payment processing, and presentation on start lists and in results, based on Article 6(1)(b) of the GDPR (necessity for the performance of a contract) and Article 6(1)(a) of the GDPR (consent, e.g., for the publication of your image).
- To handle your participation in dance school classes, including enrollment in courses and individual classes, keeping attendance records (including registering entries with an individual QR code at the reception), handling passes and partner cards (e.g., Multisport, Medicover Sport — including card number verification), exams, and learning progress, based on Article 6(1)(b) of the GDPR (necessity for the performance of a contract).
- To process payments for registration fees, tickets, passes, and purchases in the school shop, based on Article 6(1)(b) of the GDPR and Article 6(1)(c) of the GDPR (tax and accounting obligations).
- To communicate with you, including sending system and transactional notifications, as well as announcements regarding competitions, events, schools, and courses you are registered for, and handling messages exchanged with a school in the application, based on Article 6(1)(b) of the GDPR (performance of a contract) and Article 6(1)(f) of the GDPR (legitimate interest of the controller).
- To handle voluntarily submitted school reviews and completed surveys, based on Article 6(1)(a) of the GDPR (consent) and Article 6(1)(f) of the GDPR.
- To fulfill legal obligations incumbent on the controller, e.g., for tax and accounting purposes, based on Article 6(1)(c) of the GDPR.
- To establish, pursue, or defend against claims, which constitutes a legitimate interest of the controller, based on Article 6(1)(f) of the GDPR.
3. Recipients of Data
Your personal data may be shared with the following categories of recipients:
- Competition Organizers for which you register. The organizers become separate controllers of your data for the purpose of conducting the competition.
- Dance schools in which you enroll in courses or classes, or from which you purchase passes or products. Schools become separate controllers of your data with regard to running classes, attendance records, and settlements.
- Technical and hosting service providers (e.g., Google Firebase, Microsoft Azure) who process data on our behalf.
- Payment operators (e.g., Tpay) to handle registration fees, passes, and purchases.
- Sports card program operators (e.g., Benefit Systems — Multisport, Medicover Sport), solely to the extent necessary to verify the card and settle class entries, if you use a partner card.
- Entities authorized to obtain data under applicable law (e.g., courts, law enforcement agencies).
4. Data Retention Period
Your personal data will be stored for the period necessary to achieve the purposes for which it was collected:
- Account data: for the entire duration of your account in the application, and after its deletion, for the period required by law or until the statute of limitations for claims expires.
- Data related to competition participation: for the period necessary to organize and settle the competition and for the period required by law (e.g., for tax purposes).
- Data related to participation in dance school classes (enrollments, attendance, passes, purchases): for the period of using the given school's services, and after its end — until the statute of limitations for claims expires and for the period required by law (e.g., tax and accounting regulations).
5. Rights of the Data Subject
You have the right to:
- access the content of your data,
- rectify (correct) your data,
- erase your data,
- restrict the processing of your data,
- data portability,
- object to the processing of your data,
- withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal (if processing is based on consent).
6. Right to Lodge a Complaint
You have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO) in Poland if you believe that the processing of your personal data violates the provisions of the GDPR.
7. Information on the Voluntary Nature of Data Provision
Providing data is voluntary but necessary to create an account, participate in competitions, and enroll in dance school courses and classes through the application. Providing a partner card number is voluntary and required only if you wish to attend classes using such a card.