Information about processing of personal data.

The processing of your personal data is carried out in accordance with the provisions of the Regulation of the European Parliament and of the Council of the EU 2016/679 of April 27, 2016 on the protection of individuals in connection with processing of personal data and on the free flow of such data and the repeal of Directive 95/46/EC (hereinafter referred to as the General Regulation on data protection or RODO), the Act of of May 10, 2018 on protection of personal data (Journal of Laws 2018.1000 of as amended), the Act of of May 30, 2014 on provision of services by electronic means  and other generally applicable laws.

Where do we get your data from?

Your data we were able to obtain:

1. directly from you,
2. from an entity that has entered into a contract with Lechia Gdańsk S.A. for the provision of services to you.
3. from a partner/third party cooperating with Lechia Gdańsk S.A., who provided your personal data based on your consent, a provision of law or an agreement, e.g. for the purpose of purchasing match tickets.

Who is the controller of your data?

The administrator of the data is Lechia Gdańsk S.A. with headquarters in Gdańsk, at address ul. Pokoleń Lechii Gdańsk 1, 80-560 Gdańsk, KRS: 0000325053, NIP: 9571015123, REGON number: 220743305, tel: +48 58 76 88 410, e-mail: rodo@lechia.pl.

In case of purchase of assortment in our online store on website https://sklep.lechia.pl/ and in New Balance Lechia Fan Store , located at Polsat Plus Arena Gdańsk Stadium, ul. Pokoleń Lechii Gdańsk 1, the co-administrators of your data are the partners of “LWY PÓŁNOCY” civil partnership with located in Gdańsk (postal code: 80-844) at Podwale Staromiejskie 93, conducted under NIP: 583-315-14-93, REGON: 221629706, viz:

Tomasz Szamotulski, running a business activity under company “PROMOACTIVE Tomasz Szamotulski” with address of the main place of business at address: 80-844 Gdańsk, ul. Podwale Staromiejskie 93, on the basis of entry to Central Registration and Information on Economic Activity number NIP: 583-256-43-07, REGON: 220519418, and

Lechia Gdańsk Supporters Association “Lwy Północy” with headquarters in Gdańsk (postal code:

80-844) at Podwale Staromiejskie 93, registered in Register of Entrepreneurs

of the National Court Register kept by District Court Gdańsk – North in Gdańsk, VII Economic Division of the National Court Register under KRS number: 0000331786 NIP:583-307-43-44, REGON: 220831713

For more information on this processing of your data in the case of purchase of assortment in our stores, you will find at the end of the Policy in point “ Data processing when selling Lechia Gdansk souvenirs”.

What will we use your personal information for ?

We will process your personal data for the following purposes:

1. Execution of the contract for the sale of a ticket/pass and the opportunity to participate in the matches covered by the pass,
2. to conclude and execute other agreements, including contracts necessary for the operation of the Club,
3. complete an order of souvenirs related to the operation of the Club through our store on https://sklep.lechia.pl/ and in the Fan Store Lechia New Balance , located at the Polsat Plus Arena Gdansk, ul. Generations of Lechia Gdansk 1,
4. to fulfill the legal obligations incumbent on the Club, strictly related to our sports activities, as well as to fulfill the obligations incumbent on Lechia Gdańsk S.A as a business entity and organizer of mass events, in particular the monitoring of the stadium during matches,
5. possible investigation of claims identifying them and defending against them,
6. to conduct marketing activities regarding products and services offered by Lechia Gdańsk S.A. and the Club’s partners and sponsors, as well as units and entities affiliated with the Club.

Are you required to provide personal information?

To the extent that the processing of your data takes place for the purpose of concluding and executing an agreement with Lechia Gdańsk S.A., e.g. buying a ticket or a pass and also buying a souvenir/gift in Lechia’s store,  providing your data is a condition for concluding this agreement. Provision of data is voluntary, but is necessary for conclusion and execution of the contract or fulfillment of the order. In case of failure to provide personal data, the contract will not be concluded.

In the remaining scope, i.e. if providing data is not a statutory or contractual requirement and is not a condition for concluding a contract, providing personal data is voluntary and takes place on the basis of the consent given, e.g. consent to join Academy, consent to receive a newsletter, consent to marketing activities.

On what basis will we process your personal data?

The basis for the processing of personal data is, in depending on the activities performed:

1. Conclusion and implementation of the agreement with Lechia Gdańsk S.A.,
2. Implementation of the order, for example, the purchase of souvenirs,
3. Fulfillment of a legal obligation incumbent on Lechia Gdańsk S.A. in connection with its business activities (e.g. issuance, posting and archiving of an invoice),
4. Fulfillment of the legal obligation incumbent on Lechia Gdańsk S.A. in connection with its sports activities, especially in the organization of matches under the Act of March 20, 2009. On security of mass events,
5. Legally legitimate interest of Lechia Gdańsk S.A.(e.g. direct marketing, performance of a contract concluded with Lechia Gdańsk S.A. for your benefit as a third party, when another entity is a party to the contract or when you are the contact person for the purpose of the contract),
6. Your consent (e.g., to join the Academy, to use your image, to receive newsletters, for marketing activities including the use of cookies and web-push tools, to show proof of vaccination in case of purchasing tickets for vaccinated persons /processing of special category data/).

What can you do with the personal information you provide to us?

Based on the provisions of RODO, you have the right to request Lechia Gdańsk S.A. to access your personal data, rectify, delete or restrict its processing, and also to object to its processing especially in relation to our marketing activities. Upon your request, we may also transfer your data to another data controller (right to portability).  If you believe that your data are processed in violation of applicable regulations, you have the right to file a complaint with the supervisory authority, which is the President of the Office for Personal Data Protection.

How to revoke consent?

At any time you may withdraw any consent given to Lechia Gdańsk S.A.in connection with processing of personal data. Just email, call or send a snail mail message to contact information indicated above. The will to withdraw consent can be expressed in any way, the only condition is that it must reach our message. Regarding the consent given to operation of cookies and “web push” tool, please refer to section “Cookies”  and “Web-push tool” respectively.

To when will we store your data?

Your personal data will be stored as follows as long as it is necessary for performance of the contract connecting you with Lechia Gdańsk S.A. or an agreement concluded by other entity on Your benefit, a at at that time by period corresponding to the statute of limitations for claims that Lechia Gdańsk S.A. may raise and that may be raised against Lechia Gdańsk S.A. If your personal data will be processed in in order to comply with the legal obligation incumbent on administrator, the personal data will be stored for time required for fulfill this obligation, for example, your data, necessary for purchase of a ticket for match, will be kept for a period of 2 years from the date of purchase of the last ticket.  Data processed on on the basis of consent, we will process until the time you withdraw that consent or until the purpose of the processing ceases, e.g. resignation from membership in Academy.

If your personal data will be processed on the basis of a legitimate interest of the controller, in connection with performance of a contract concluded with Lechia Gdańsk S.A. for your benefit, or if you are provided as a contact person for contact for performance of this contract, the data will be processed until the fulfillment of the legitimate interest constituting the basis for such processing. If your personal data will be processed on the basis of a legitimate interest of the controller, in connection with direct marketing activities, your personal data will be processed until the time when you raise an objection or the purpose of the processing ceases (termination of marketing activities).

Where can you file a complaint about processing of personal data by Lechia Gdańsk S.A. if you believe that data is processed in violation of regulations?

Currently, such complaints can be addressed to President of the Office of Personal Data Protection, 2 Stawki Street, 00-193 Warsaw, e-mail: kancelaria@uodo.gov.pl.

How will we not process personal data?

Your personal information is not subject to automated decision-making that would produce legal effects on you or in a similar way materially affect you, however we do use cookies and other systems that record traffic on our websites. For more information, you can visit under “Cookies”.

As to principle, we do not transfer any personal data to third countries.

It may happen that personal data provided to us in email correspondence are stored on Microsoft servers e.g. in the United States, in such case Lechia Gdańsk S.A. shall ensure that an appropriate agreement is entered into with Microsoft, with Microsoft in turn, within the framework of the applicable regulations, ensuring that processing is carried out, in accordance with applicable regulations and with compliance with the highest security standards.

Cookies

Website www.lechia.pl uses cookies. They are are small text files sent by web server and stored by browser computer software. When the browser reconnects to , the site recognizes the type of device from whose you are connecting to. The parameters allow to read the information in them only to the server that created them.  Cookies thus facilitate use of previously visited sites.

The information collected includes IP address, type of browser used, language, type of operating system, ISP, time and date information, location, and information sent to site via contact form, etc.

The data collected is used to monitor and check how users are using our website, in order to improve the website’s functioning, providing a more efficient and seamless navigation. We monitor information about users using , a Google Analytics tool that records user behavior on .

Cookies identify the user, which allows to tailor the content of the site that uses to its needs. By remembering his preferences, they make it possible to tailor targeted ads to him accordingly. We use cookies to guarantee the highest standard of convenience of our service, and collected data are used only in to optimize these activities.

We use the following cookies on our website:

1. Internal cookies – files placed and read from the User’s Device by the Service’s data communications system,
2. External cookies – files placed and read from the User’s Device by data communications systems of external Services,
3. Session cookies – files placed and read from the User’s Device by the Service or External Services during a single session of a given Device. When the session ends, the files are deleted from the User’s Device,
4. Persistent cookies – files placed and read from the User’s Device by the Service or External Services until they are manually deleted. Cookies are not deleted automatically after the end of the Device session, unless the configuration of the User’s Device is set to delete cookies after the end of the Device session.

The user at any time has the ability to disable or restore the option of collecting cookies by changing the settings in web browser.

By default, most web browsers available on the market accept the storage of cookies. Everyone has the ability to determine the conditions of use of cookies via the settings of their own web browser. This means that can, for example, partially restrict (e.g. temporarily) or completely disable the ability to store cookies – in the latter case, however, this may affect some of the functionality of the Website.

The settings of your web browser regarding cookies are relevant to your consent to the use of cookies by our Service – in accordance with regulations, such consent can also be given through your web browser settings. In absence of such consent, you should change your browser settings accordingly in for cookies.

Detailed information on on how to change the settings for cookies and on how to delete them yourself in the most popular web browsers is available in the help section of your web browser and on the following pages (just click on the given link):

in Chrome browser
in Firefox browser
in Internet Explorer
in browser Opera
in Safari browser
in Microsoft Edge browser

Each User has the ability at any time to delete their data from our database in Analytics using plug-in: https://tools.google.com/dlpage/gaoptout. Each User has the ability at any time to change the settings on his Google account to limit the emission of advertisements that are displayed to him on the https://myaccount.google.com/privacy#ads under Ad Settings.

Service www.lechia.pl uses Google Ads services,  to attract attention to our attractive offers via advertising materials (called Google Ads) on external websites. From data collected during advertising campaigns, we can assess how successful the advertising measures used were. The advertising materials are provided by Google via using the so-called. “Ad Servers. For this purpose, we use server cookies, through which certain parameters of the success of reaching audiences, such as ad placement or user clicks can be measured. If you access our website via Google Ads, Google Ads will store a cookie on your device. These cookies usually expire after 30 days and do not serve to identify visitors. For these cookies, for value analysis purposes, there are typically stored: unique cookie ID, number of impressions per one ad placement (frequency), last display (relevant to conversion after display), and opt-out information (indication which user does not wish to be considered further).

These cookies allow Google to recognize your web browser. If he or she visits specific pages on our domain and stored cookies have not yet expired on his or her device, we can conclude that user clicked on advertisement and was redirected to that page. We do not collect or process any personal data on the basis of the above advertising measures. We only get statistical analysis from Google. On the basis of these evaluations we are able to assess which advertising means used are particularly effective. We do not receive any other data regarding the use of advertising materials; in particular, we cannot identify users based on this information.

We also use remarketing features in Google Ads services. The remarketing function allows us to present users of our website and with advertisements based on their interests from other websites belonging to Google’s advertising network (on Google’s search engine or on YouTube, so-called. “Google ads” or on other websites). For this purpose, user interaction on our website is analyzed, e.g. which offers interested the user, in order to be able to display ads targeted to users even in case they visit our website on other sites. To achieve this , Google stores cookies in the browsers of users who visit certain Google services or websites on the Google Display Network.

For more information about purposes and scope of data collection and processing by Google, please refer to their privacy policy. There you will find further information about your rights and setting options to protect your privacy:

https://www.google.pl/intl/pl/policies/privacy;

It is possible to transfer data to third countries. Standard contractual clauses apply as adequate security in accordance with Art. 46 RODO. More information on this topic can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_en

Alternatively, you will find more information at Network Advertising Initiative (NAI) website http://www.networkadvertising.org.

You can prevent yourself from participating in the tracking process in various ways:

1. by setting your browser accordingly, in particular by withholding third-party cookies, this way you will not receive any advertising from third parties,
2. by deactivating cookies for conversion tracking, by setting your browser to block cookies by domain www.googleadservice.com; https://www.google.pl/settings/ads – this setting will be removed when you delete your cookies,
3. by deactivating vendor ads, based on interests, which are part of the “About Ads” self-regulatory campaign available at http://www.aboutads.info/choices,– this setting will be removed when you delete your cookies,
4. by permanently deactivating ads in Firefox, Internet Explorer or Google Chrome in your browsers using the link http://www.google.com/settings/ads/plugin.

Web Push Tool

The lechia.pl website uses Web Push tool, which allows sending short information to browser, which you are using, so called. notifications. They are are  small notifications,  through which we inform you about our new products, services, promotions, etc. encouraging you to go to the corresponding page of our website.

Web Push notifications are sent to your web browser only after you have given your consent to receive them.

This consent can be revoked at any time by changing your browser settings.

When using the above marketing tool, Lechia Gdańsk does not process any personal data of Users using notifications, they are identified solely on the basis of information that is stored by their Internet browsers, to which Lechia Gdańsk S.A. does not have access.

 Other profiling activities

As part of our marketing activities, we may also undertake other  profiling activities, in order to best match our offer to the needs of Fans, Customers and other  Users of our website.

Based on transactional data and also contact data, we tailor the content of our marketing communications, sent by email or text message, to you in order to most accurately present our products, services and promotions to you.

We may also address your messages reminding you, e.g. about unfinished purchases of a ticket to a match or a gadget in our online store.

Please be advised that at any time you may object to our marketing activities, including profiling by clicking on the appropriate link provided in the content of our messages or by sending us information to   rodo@lechia.pl.

Recipients of data

Your data may be transferred to third parties that are cooperators of Lechia Gdańsk S.A.. These are entities providing us with services in the field of IT, video monitoring, entities cooperating in the field of ticket distribution, entities providing services in the field of marketing activities in including taking photographs or video recordings. All processors of transferred personal data are verified by Lechia Gdańsk S.A. in data protection security and obliged on the basis of an appropriate agreement to use personal data only and exclusively for purposes designated by Lechia Gdańsk S.A..

Recipients of data of persons participating in matches organized by us are also entities authorized to receive such data on the basis of regulations in including, in particular, the Law on security of mass events.

The recipients of the Academy participants’ data are additionally the Pomeranian and Polish Football Association, these data are transferred in based on expressed consents.

Final provisions

Lechia Gdańsk S.A. as the Administrator of your personal data makes every effort to provide all means of physical, technical and organizational protection of personal data against their accidental or intentional destruction, accidental loss, alteration, unauthorized disclosure, use or access in accordance with all applicable laws.

For this specific purpose, Lechia Gdańsk S.A. engaged specialists in RODO and ISO 27001:2015 and made a full adaptation to the aforementioned. sets of standards in for personal data processing.

If you have any questions about data protection, please contact us by email at   rodo@lechia.pl or by phone:

Data Protection Supervisor – Pawel Modrzejewski tel. 544 544 001,

Deputy Data Protection Officer – Izabela Walczak  tel. 791 543 400.

Data processing in the sale of Lechia Gdansk souvenirs

If you purchase an assortment of products from our online store at   https://sklep.lechia.pl/ and at New Balance Lechia Fan Store, located at the Polsat Plus Arena Gdańsk Stadium, Pokoleń Lechii Gdańsk 1 Street, the co-administrators of your data are:

• Lechia Gdańsk S.A. with registered office in Gdańsk, at ul. Pokoleń Lechii Gdańsk 1, 80-560 Gdańsk, KRS: 0000325053, NIP: 9571015123, REGON number: 220743305, phone: +48 58 76 88 410.

and the partners of “LWY PÓŁNOCY” civil partnership with located in Gdańsk (postal code: 80-844) at Podwale Staromiejskie 93 Street, (hereinafter Lwy), conducted under NIP number: 583-315-14-93, REGON: 221629706, namely:

• Tomasz Szamotulski, conducting business activity under the name “PROMOACTIVE Tomasz Szamotulski” with the address of the main place of business at the address: 80-844 Gdańsk, ul. Podwale Staromiejskie 93, on the basis of an entry in the Central Registration and Information on Business Activity number NIP: 583-256-43-07, REGON: 220519418,
• Association of Supporters of Lechia Gdańsk “Lwy Północy” with its registered office in Gdańsk (postal code: 80-844) at ul. Podwale Staromiejskie 93, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court Gdańsk – North in Gdańsk, VII Economic Division of the National Court Register under KRS number: 0000331786 NIP:583-307-43-44, REGON: 220831713

If you have any questions about data protection, you can contact us at the addresses listed above or via via email at : sklep@lechia.pl  or the address of the Data Protection Officer at Lechia Gdansk:  rodo@lechia.pl and no. tel. 791 543 400.  

Data is processed for purpose:

• complete an order for the purchase of souvenirs related to the operation of the Lechia Gdańsk Club through our store on https://sklep.lechia.pl/ and in the Lechia New Balance Fan Store , located at the Polsat Plus Arena Gdańsk Stadium, ul. Generations of Lechia Gdansk 1 – legal basis art. 6(1)(b) RODO.
• Fulfillment of legal obligations incumbent on the Joint Administrators related to the operation of the store, including tax, fiscal and accounting settlements – legal basis Art. 6(1)(c) RODO
• possible investigation, identification and defense of claims – legal basis 6 (1). (f) RODO,
• conduct marketing activities concerning products offered by the Joint Administrators – legal basis Art. 6 paragraph. 1(f) RODO.

Pursuant to the provisions of the RODO, you have the right to request  any of the Joint Administrators  to access your personal data, to rectify, erase or restrict its processing, and also to object to its processing especially with respect to our marketing activities. Upon your request, we may also transfer your data to another data controller (right to portability).  If you believe that your data are processed in violation of applicable regulations, you have the right to file a complaint with the supervisory authority, which is the President of the Office for Personal Data Protection.

Your data will be transferred only to entities entitled to receive them on the basis of legal regulations, e.g. tax office, and to entities with with which the Joint Administrators have entered into appropriate contracts for entrustment of data processing in the scope of IT support, including hosting services and accounting or marketing services.

As to principle, we do not transfer personal data to third countries. It may happen that personal data provided to us in email correspondence are stored on Microsoft servers e.g. in the United States, in such case Lechia Gdańsk S.A. shall ensure that an appropriate agreement is entered into with Microsoft, with Microsoft in turn, within the framework of the applicable regulations, ensuring that processing takes place, in accordance with applicable regulations and with compliance with the highest security standards.

Data of persons placing an order in our store will be stored until the time of order processing and then for the period necessary to assert possible claims, and in case of requesting an invoice for the period required by the provisions of the law on accounting (which to as a rule 5 years ).

According to art. 26(2) of the RODO, Joint Controllers, hereby make available the essential part of the data co-management arrangements:

 The following table sets forth the responsibilities of each Joint Controller for fulfillment of its obligations under RODO, in particular, in relation to exercise by Customers of their rights and obligations of the Joint Controller in relation to providing information referred to in art. 13 and 14 RODO:

Scope of obligation	Responsible entity
Uses appropriate technical and organizational measures in order to secure Customers’ personal data  from unauthorized or unlawful processing, accidental loss or destruction or damage.	Lechia, Lions
It uses its own personnel (qualified, trained, committed to confidentiality) to perform the entirety of the Customer’s personal data processing activities that result from the scope of the Cooperation.	Lechia, Lions
Ensures the reliability of information systems and personal data security systems, in including System	Lechia
Ensures proper documentation of the compliance of the processing of Customers’ personal data with the RODO regulation, in which implements appropriate data protection security policies.	Lechia, Lions
Performs on behalf of the Joint Administrators the information obligations and performs actions related to rectification and deletion of Customers’ personal data, in accordance with provisions of Article. 13-22 RODO.	Lechia
Carries out on behalf of the Joint Administrators the obligations under provisions of Art. 32-36 RODO.	Lechia, Lions
Ensures that entrustment agreements are in place with processors for the processing of Customers’ personal data and that all employees are given appropriate authorizations to process Patients’ personal data. Maintains a register of authorizations granted.	Lechia, Lions
Provides appropriate systems for monitoring the security status of customer data protection	Lechia, Lions
It shall consider all requests, applications, petitions, comments submitted to in connection with processing of Customers’ personal data, directed to any of Joint Administrators.	Lechia

According to art. 26 para. 3 RODO, notwithstanding the division of responsibilities indicated in the table above, the person to whom personal data pertains may exercise his or her rights under RODO, against any of the Co-administratorsstrators.

The Joint Administrators declare that will not transfer personal data covered by the Agreement to a third country or an international organization (outside the European Economic Area), with the exception that the transfer of data results from Lechia’s cooperation with subcontractors of IT services.

Notwithstanding the above provisions, each Joint Controller undertakes to process Customers’ personal data in accordance with the provisions of the RODO, the provisions of national law on personal data protection, with special care.

Customers’ personal data will be co-administered for the duration of the cooperation in the scope of  sales and distribution of clothing and utilitarian and commemorative items, marked with Lechia Gdańsk Trademarks.    

In matters not regulated by the Agreement, the provisions of the RODO and other legal acts on personal data protection and also the Civil Code shall apply.