# Privacy Policy for Cebula Camp 2025

This policy applies to websites operating under the following URLs: [cebula.camp](https://cebula.camp), [cfp.cebula.camp](https://cfp.cebula.camp), [tickets.cebula.camp](https://tickets.cebula.camp), and [news.cebula.camp](https://news.cebula.camp).

The Administrator and Operator of personal data is **Stowarzyszenie Hackerspace Wrocław** (KRS: 0000531222) with its registered office at ul. Wróblewskiego 38, 51-627 Wrocław.

For inquiries regarding personal data, contact us at: [kontakt@hswro.org](mailto:kontakt@hswro.org).

---

## User Rights

Providing personal data is voluntary but necessary for service provision.

By contacting the data administrator, users can request:
- Access to their personal data,
- Correction,
- Deletion,
- Data transfer,
- Restriction of processing,
- Objection to further processing.

Users have the right to file a complaint regarding data processing by the Operator with the supervisory authority: **Personal Data Protection Office**. Contact details can be found at: [https://uodo.gov.pl/](https://uodo.gov.pl/).

---

## Collected Data

Websites collect personal data for the following purposes:
- Provision of ordered services,
- Newsletter distribution,
- Collecting talk proposals.

Data collection methods include:
- Voluntarily entered data in forms, stored in the Operator’s systems,
- Storing cookies on users' devices.

---

## Ticket Sales

When selling tickets, we collect the following personal data:
1. **Purchaser’s email address** (for identification and ticket-related contact),
2. **Participant’s name and preferred pronouns** (if provided, for communication),
3. **Payer’s full name, address, and bank account number** (for order processing).

Cookies are used to facilitate purchases and maintain cart status. We do not use tracking or marketing cookies.

For bank transfer payments, our bank and authorized accounting personnel will have access to the sender’s transaction details. These details will be processed and stored solely for accounting documentation purposes.

---

## Newsletter

For newsletter management, we collect:
1. **Subscriber’s email address**,
2. **Subscriber’s name or nickname** (if provided).

The email and name (if provided) will be transmitted in an unencrypted form to the subscriber's email server. No personal data is shared with third parties.

Sent emails contain an embedded remote image ('tracking pixel'). This is used to analyze the approximate deliverability of sent messages. Images do not individually identify subscribers, and no metadata about the subscriber is collected.

---

## CFP (Call for Papers)

For collecting talk proposals, we gather:
1. **Submitter’s email address**,
2. **Submitter’s name or nickname**.

---

## Logs

To ensure technical reliability, server logs are maintained. These may include:
- URLs of requested resources (pages, files),
- Request timestamps,
- Client station name (HTTP protocol identification),
- Error information from HTTP transactions,
- User browser details,
- IP address information,
- Diagnostic data related to self-service order processing,
- Email correspondence related to the Operator.

---

## Data Processing Methods

In certain cases, the Administrator may share personal data with other recipients when necessary to fulfill a contract or comply with legal obligations. Recipients may include:
- Hosting service providers (data processing agreement),
- Authorized employees and collaborators using the data for specific purposes.

Personal data is processed only as long as necessary for purposes defined by legal regulations (e.g., accounting). After this period, all data is anonymized.

Personal data **is not transferred to third countries** under data protection regulations, meaning it is not sent outside the European Union.

Login and personal data entry areas are protected with SSL encryption. This ensures that personal data and login credentials entered on the website are encrypted on the user’s device and can only be read by the target server.



Return to the [homepage](/en/)
