Privacy policy

Controller

The controller is Stakkato Art Space, ul. Berka Joselewicza 23, 31-031 Kraków, email: welcome@stakkato.pl, phone +48 501 829 139. [Full legal name and registration numbers — to be added.]

What we collect and why

Event sign-ups: name, email, phone (optional), number of people — to handle your registration and tell you about changes (Art. 6(1)(b) GDPR).

Room requests: contact details, event description, time — to prepare and conclude a rental agreement (Art. 6(1)(b) GDPR).

Contact forms: contact details and your message — to reply (Art. 6(1)(a) and (f) GDPR).

Payments and support: amount, email, payment status — for settlement and accounting duties (Art. 6(1)(b) and (c) GDPR). We never process card data; Stripe does.

Recipients

Our hosting and database provider, email provider, the payment operator Stripe and Google (the team’s calendar: date, room and first name, no contact details) — only as needed to provide the service, under data processing agreements.

How long

Sign-ups and room requests are kept for 12 months after the event or booking date, contact-form messages for 12 months after they arrive. After that the system automatically removes names, e-mails and phone numbers (only numbers for statistics remain). Copies of sent e-mails are deleted after 90 days. Payment records are kept for 5 years from the end of the tax year, as tax law requires. Visit statistics (no personal data) for up to 25 months.

Your rights

You can access, correct, delete, restrict, port and object to processing of your data, and withdraw consent. You may complain to the Polish supervisory authority (PUODO).

Visit statistics

We count page visits without cookies and without storing IP addresses or device identifiers. We record only the page address, where the visit came from (e.g. Instagram, Google, a campaign link) and whether it was a phone or a computer. This cannot be linked to a person. We use it to see which pages and channels work (Art. 6(1)(f) GDPR).

With a sign-up or room request we also note where the visit came from, phone or computer, and your answer to the optional question “How did you hear about us?”. Reports show totals only, never people.

Cookies

We only use essential cookies: remembering your language and the team’s login session. No advertising or analytics cookies. The Google map on the Contact page loads only when you click “Show the map”; Google may then set its own cookies (see Google’s privacy policy).