Privacy Policy

This Privacy Policy explains how personal data is collected, used, stored, and protected in connection with the Software and Services.

1. Data Controller

The controller of personal data within the meaning of Regulation (EU) 2016/679 (“GDPR”) is:

SZYMON DUKLA
ul. Jagiellońska 32/36
03-719 Warszawa
Poland
NIP: 6692544511
REGON: 369688789
Email: privacy@getfestivo.com

2. Categories of Personal Data

We may process the following categories of personal data:

Identification data (name, email address);
Account and authentication data;
Billing and tax data (company name, address, Tax ID, payment information);
Usage, telemetry, and log data;
IP addresses and device information;
Any personal data voluntarily submitted by the user.

3. Sources of Data

Personal data is collected directly from you when you:

register for an account or use the Services;
enter billing or tax information;
contact us or provide feedback;
use the Services, APIs, or website;
interact with the Services through cookies or similar technologies.

4. Purposes and Legal Bases of Processing

Personal data is processed for the following purposes and on the following legal bases:

Performance of a contract (Article 6(1)(b) GDPR):account creation, service delivery, billing, customer support.
Legal obligation (Article 6(1)(c) GDPR):accounting, tax, and compliance obligations.
Legitimate interests (Article 6(1)(f) GDPR):service security, fraud prevention, analytics, and service improvement.
Consent (Article 6(1)(a) GDPR):marketing communications where required by law.

Where required by consumer protection laws, we process consent-related data (including timestamps and technical records) in order to document the withdrawal of the right of withdrawal.

5. Marketing Communications

We may send information about our own products and services based on your consent or our legitimate interest, where permitted by law. You may opt out of marketing communications at any time by using the unsubscribe link or contacting us.

6. Data Recipients

Personal data may be disclosed to trusted service providers acting as processors, including hosting, infrastructure, email delivery, and payment service providers. Such providers process data solely on our instructions and under appropriate data protection agreements.

7. International Data Transfers

Personal data is primarily processed within the European Economic Area (EEA). Where data is transferred outside the EEA, appropriate safeguards such as Standard Contractual Clauses approved by the European Commission are applied.

8. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable law. Retention periods depend on the type of data and legal obligations.

9. Data Subject Rights

You have the following rights under GDPR:

right of access;
right to rectification;
right to erasure;
right to restriction of processing;
right to object to processing;
right to data portability;
right to withdraw consent at any time.

Requests may be submitted to: privacy@getfestivo.com

10. Right to Lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority. In Poland, this is:

President of the Personal Data Protection Office (PUODO)
https://uodo.gov.pl

11. Cookies

Cookies and similar technologies are used to ensure proper operation of the Services and improve user experience. You may manage cookie preferences through your browser settings.

12. Security

We implement appropriate technical and organizational measures to protect personal data, as described in our Security Policy.

13. Changes to This Policy

This Privacy Policy may be updated from time to time. The current version will always be available on this page.

14. Contact

For privacy-related inquiries, contact: privacy@getfestivo.com

2. Categories of Personal Data

We may process the following categories of personal data:

Identification data (name, email address);

Account and authentication data;

Billing and tax data (company name, address, Tax ID, payment information);

Usage, telemetry, and log data;

IP addresses and device information;

Any personal data voluntarily submitted by the user.

4. Purposes and Legal Bases of Processing

Personal data is processed for the following purposes and on the following legal bases:

Performance of a contract (Article 6(1)(b) GDPR):account creation, service delivery, billing, customer support.

Legal obligation (Article 6(1)(c) GDPR):accounting, tax, and compliance obligations.

Legitimate interests (Article 6(1)(f) GDPR):service security, fraud prevention, analytics, and service improvement.

Consent (Article 6(1)(a) GDPR):marketing communications where required by law.

Where required by consumer protection laws, we process consent-related data (including timestamps and technical records) in order to document the withdrawal of the right of withdrawal.