Last updated: 2026-05-15

1. Data controller

The controller of personal data processed through this website is: FolkWar Marcin Wójciuk

2. What data we may process

Depending on how you use the website, we may process the following categories of personal data:

• name and surname,
• email address,
• phone number, if provided,
• name of an organisation, company, travel agency or institution,
• content of a message submitted through a contact form,
• information related to a group booking enquiry, such as preferred date, number of participants or preferred language of the show,
• technical data related to website use, such as IP address, browser type, device information, cookies and similar technologies.

3. Purposes and legal bases of processing

a) Handling contact enquiries

We process data submitted through contact forms in order to respond to your message and conduct correspondence.

Legal basis: our legitimate interest in handling correspondence and responding to enquiries, Article 6(1)(f) GDPR.

b) Handling group booking enquiries

We process data submitted through the group booking form in order to respond to the enquiry, check availability, contact the organiser and, where applicable, prepare an individual proposal.

Legal basis: steps taken at the request of the data subject prior to entering into a contract, Article 6(1)(b) GDPR, and our legitimate interest in handling enquiries, Article 6(1)(f) GDPR.

c) Technical operation and website security

Technical data may be processed to ensure proper operation of the website, maintain security, protect against spam and abuse, and diagnose technical issues.

Legal basis: our legitimate interest in ensuring the security and proper functioning of the website, Article 6(1)(f) GDPR.

d) Analytics and website improvement

If analytics tools such as Google Analytics or Google Site Kit are enabled, data may be processed to analyse website traffic, understand visits and improve website content.

Legal basis: consent, where required by cookie or privacy regulations, Article 6(1)(a) GDPR, or our legitimate interest in basic website analytics where permitted by law, Article 6(1)(f) GDPR.

e) Establishing, pursuing or defending legal claims

We may also process data where necessary to establish, pursue or defend potential legal claims. Legal basis: our legitimate interest, Article 6(1)(f) GDPR.

4. Contact forms

The website may include contact forms, including a general contact form and a group booking enquiry form. Data submitted through these forms is used only to handle the enquiry and conduct correspondence. We do not use form data to send newsletters unless you give separate consent. Forms may use anti-spam mechanisms such as honeypot fields, technical restrictions or other protections against automated submissions.

5. Ticket sales

Ticket sales for PolkLore events may be handled through an external ticketing operator, such as Biletyna. When you click a ticket purchase link, you may be redirected to an external website. In that case, data provided during the purchase process is processed by the ticketing operator in accordance with its own terms and privacy policy. The controller of this website is not responsible for data processing rules applied by external services that you voluntarily access through links available on this website.

6. Embedded content and third-party services

The website may include embedded content from third-party services, especially YouTube videos. Embedded content from other websites may behave as if you visited the external website directly. These services may collect information about you, use cookies, apply additional tracking technologies and monitor your interaction with embedded content, especially if you are logged in to that service.

7. Cookies and similar technologies

The website may use cookies and similar technologies for the following purposes:

• ensuring proper operation of the website,
• remembering basic settings,
• protecting against spam and abuse,
• embedding external content, such as YouTube videos,
• running statistics and analytics, if such tools are enabled.

You may change cookie settings in your web browser. Restricting cookies may affect some website functions. If a cookie consent banner is implemented on the website, you will be able to manage consents through the available options.

8. Recipients of data

Personal data may be shared with entities supporting us in operating the website and handling enquiries, in particular:

• hosting provider,
• email service provider,
• contact form provider or plugin provider,
• technical and IT service providers,
• analytics providers, if enabled,
• ticketing operator, if you proceed to an external ticket purchase system,
• entities authorised under applicable law.

9. Transfers outside the European Economic Area

Some external tools, such as Google services, YouTube, analytics tools or anti-spam tools, may involve transferring data outside the European Economic Area. In such cases, service providers are required to use appropriate data protection mechanisms, such as standard contractual clauses or other safeguards provided by applicable law.

10. Data retention

We store personal data only for as long as necessary for the purposes for which it was collected:

• contact form data: for the time needed to handle correspondence and then for up to12 months, unless longer storage is justified by the need to protect against claims,
• group booking enquiry data: for the time needed to handle the enquiry, prepare an offer and, where applicable, perform cooperation, and then for the period required by law or justified by protection against claims,
• technical data and cookies: according to browser settings, cookie settings or third-party provider policies,
• data processed on the basis of consent: until the consent is withdrawn, unless another legal basis allows further processing.

11. Your rights

Subject to the conditions set out in applicable law, you have the right to:

• access your personal data,
• rectify inaccurate data,
• request deletion of data,
• request restriction of processing,
• data portability, where applicable,
• object to processing,
• withdraw consent at any time, where processing is based on consent,
• lodge a complaint with the President of the Personal Data Protection Office in Poland or another competent supervisory authority.

To exercise your rights, please contact us via Contact Form.

12. Data security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, destruction or disclosure. The website uses security measures available through hosting, WordPress, security plugins and anti-spam mechanisms.

13. Links to external websites

The website may contain links to external services, such as a ticketing operator, social media, YouTube or partner websites. After clicking an external link, you are subject to the privacy policies and terms of the external service. We recommend reading those documents before using external services.

14. Changes to this Privacy Policy

This Privacy Policy may be updated, especially if the website, tools, forms, ticketing system or applicable legal requirements change. The current version of this Privacy Policy is always available at: https://polklore.pl/privacy-policy/.