Privacy and cookies policy
1. Data controller
The controller of your personal data is FORZA Michał Grzanka, tax ID (NIP) 6372084433, operating forzaevents.pl. For data protection enquiries, email wspolpraca@forzaevents.pl.
2. Data and purposes
The form allows you to enquire about an event. We process your chosen contact details, your optional first name and any event information you provide: date, location, guest numbers, services, budget and description.
- Preparing a proposal at your request for a contract with you: Article 6(1)(b) GDPR.
- Other correspondence and contact with company representatives: Article 6(1)(f) GDPR. Our legitimate interest is handling enquiries and business relationships.
- Protecting the form and website against misuse, and establishing, exercising or defending legal claims: Article 6(1)(f) GDPR.
- If we enter into a contract: performance of that contract with you, Article 6(1)(b) GDPR; mandatory tax records, Article 6(1)(c) GDPR in conjunction with applicable tax rules.
Providing data is voluntary. Without a phone number or email address, we cannot reply. Do not include health data, identity document numbers or personal details of event guests.
3. Recipients
Hosting, email, IT, accounting and legal service providers may process data as necessary for their tasks and on an appropriate basis. Website hosting is provided by MSERWIS. If delivering an event requires a service provider, we share only the information needed for their task. Public authorities may receive data where authorised by law.
The form sends your enquiry to wspolpraca@forzaevents.pl. It does not subscribe you to a newsletter or automatically share your contact details with marketing databases.
4. Retention
Enquiries that do not lead to a contract are retained while the matter is handled and then for no longer than 12 months after it closes, unless particular circumstances justify retaining necessary data for legal claims. Contract documents are kept for the applicable limitation period and tax documents for the period required by law.
The form session lasts up to 30 minutes. Infrastructure logs and backups are managed as part of hosting and email services, for periods needed for security and recovery. Contact the controller for retention information relating to a specific matter.
5. Your rights
Where the GDPR provides, you may request access, rectification, erasure, restriction and portability of your data. Where processing relies on legitimate interests, you may object on grounds relating to your particular situation. An objection to direct marketing does not require such grounds. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.
You may lodge a complaint with the President of the Polish Personal Data Protection Office (UODO). The rights available depend on the basis and purpose of processing. Erasure is not always possible, for example when a legal obligation requires a document to be retained.
6. Website technologies
This website does not use Google Analytics, Meta Pixel or automatically loaded social media embeds. Images, scripts and the font are served from the website’s hosting. Visiting the page does not start a form session; the session starts when you begin using the form.
FORZA_SESSION is a first-party cookie used to protect the form against forged requests and duplicate submissions, not for advertising. It lasts up to 30 minutes and may be renewed during continued use of the form.
The session is necessary for the secure operation of the form you use. You can manage cookies in your browser; blocking this mechanism may prevent submission. You can still email us directly.
The server may log technical data, including IP address, request date and browser details, to operate and secure the connection. Form entries are not stored in localStorage.
Language selection uses an ordinary link and is not saved in cookies. Social links open external services only when clicked. Those services explain further processing in their own privacy policies.
7. Transfers and automated decisions
The website code does not send data to external advertising or analytics tools. Email and IT providers may require a separate assessment of international transfers. Any transfer outside the European Economic Area must have an appropriate basis under Chapter V GDPR, such as an adequacy decision or standard contractual clauses with the required safeguards. Information about safeguards is available from the controller.
We do not make solely automated decisions that produce legal or similarly significant effects concerning you.
8. Updates
We update this notice when the website’s operation changes. Any technology requiring consent will require an appropriate consent mechanism before it is activated.