RESONIKA / PRIVACY
Privacy and cookies
We create space for people to meet — online as well as offline. Here we explain who is responsible for your data, what happens when you visit Resonika.art and how you choose which external services to allow.
01 / Controller and contact
The controller of personal data processed in connection with Resonika.art is Stowarzyszenie Inicjatyw Kulturalnych „Dwie Wieże”, ul. Piastowska 13, 66-620 Gubin, Poland; KRS 0001074998, NIP 9261691829, REGON 527212116.
For privacy matters and rights requests, write to info.arpluswear@gmail.com or to the registered address. The association determines the purposes and means of processing. OVHcloud supplies the domain and hosting; it is not the editorial operator of this website.
02 / Browsing and website security
During a visit, the server receives technical data needed to deliver the website: IP address, request time, requested resource, browser and operating system details, and server response code. Depending on browser settings, a referring page address may also be transmitted. This information may be included in hosting and security logs.
We use it to operate the website, diagnose errors and prevent abuse. The legal basis is our legitimate interest in website availability and security under Article 6(1)(f) GDPR.
03 / Messages and collaboration
Contacting us is voluntary. The email button opens your email application; it does not send a message automatically. We process the information you include, in particular your email address, name, subject, message and any attachments. Please do not send data that is unnecessary for your enquiry.
We handle general enquiries under Article 6(1)(f) GDPR — our legitimate interest in managing correspondence. If the enquiry concerns a contract with you or steps at your request before a contract, Article 6(1)(b) applies; where a legal obligation applies, Article 6(1)(c). Sending a message is not consent to marketing.
04 / Cookies and browser storage
Cookies and similar technologies can store or read information on your device. We distinguish necessary technical functions from optional YouTube videos. Optional consent is not a condition of access to other content. Consent relies on Article 6(1)(a) GDPR; device storage and access are also subject to Article 399 of the Polish Electronic Communications Law.
rsk_privacy_v1 is a localStorage entry in your browser, not a cookie sent with every request. It contains your YouTube choice, the type of decision, the rules version, language, and storage and expiry timestamps. It does not contain your name, email address, IP address or advertising ID. The choice is valid for up to 180 days, after which we ask again on your next visit. The physical entry may remain until you reopen the website or clear browser storage.
PL / DE / EN is determined by the URL, without a language cookie. WordPress may use technical cookies for administrator login, such as wordpress_logged_in_*, wordpress_sec_* and wordpress_test_cookie. These are not advertising consents. Security tools may also use mechanisms needed to protect login.
05 / YouTube videos — your decision
Instead of loading a video automatically, we display a local placeholder. The YouTube player connects only after you consent to “YouTube videos” and click Play. Scrolling, closing settings or opening a page does not give consent.
The service provider in the EEA is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use youtube-nocookie.com, but this does not mean no data is processed. Once started, Google receives information including IP address, device details and playback activity, may use cookies or local storage and may associate activity with a Google account. See the Google privacy policy and Google cookie technologies.
“Necessary only” declines consent. “Privacy settings” lets you change your choice. On withdrawal, we remove players from open pages using this mechanism and block reloading. Withdrawal does not affect the lawfulness of earlier processing and cannot erase data or cookies already held by Google. You can also manage these in your browser and with the provider.
06 / External links, fonts and analytics
Facebook icons, partner websites and AR+ Wear are ordinary links, not embedded social widgets. External websites operate under their own terms and privacy rules. “Open on YouTube” takes you directly to that external service.
This theme version does not retrieve Google Fonts from Google servers and installs neither Google Analytics nor Meta Pixel. The panel does not activate analytics, advertising or a newsletter. We do not use it for automated decisions with legal effects or advertising profiling. New services require a separate assessment, updated information and, where necessary, separate consent.
07 / Recipients and processing outside the EEA
Recipients may include authorised people working for the association and technical maintenance, hosting and email providers to the extent needed for their services. OVHcloud provides hosting. The contracting entity, infrastructure location and processing terms are determined by the association’s agreement. The published email address uses Gmail/Google. Google also receives data as the YouTube provider after video consent. Public authorities receive data where required by law.
Google services may involve processing outside the European Economic Area, including in the USA. Google describes the use of adequacy decisions, including applicable US transfer frameworks, and standard contractual clauses where required. Information and how to obtain copies of safeguards: Google data transfer frameworks. You may also contact us about safeguards used by our providers. Hosting information: OVHcloud data protection.
Wordfence security: This installation uses Wordfence by Defiant Inc. to help protect against attacks and abuse. Depending on configuration, it processes technical details, IP addresses, login attempts and suspicious requests, and may use technical security cookies. Data may be sent to the provider in the USA. The scope and retention depend on the enabled functions. See the Wordfence privacy policy and cookie notice. Website security relies on our legitimate interest under Article 6(1)(f) GDPR, not on YouTube consent.
08 / Retention
The consent panel choice remains valid for 180 days unless you change it sooner or clear browser storage. It is stored locally; this panel does not maintain a central consent register containing visitor IP addresses.
We retain correspondence while responding and resolving the matter, and afterwards only to the extent and for the time justified by legal duties or establishing, exercising or defending claims. Technical logs and backups rotate according to hosting and security configuration. Incident-related data may be kept until the incident is resolved. Retention depends on the purpose, service settings and applicable law, not on YouTube consent.
09 / Your rights
Subject to the GDPR, you can request access and a copy of your data, rectification, erasure or restriction. You can object to processing based on legitimate interests on grounds relating to your particular situation. Data portability applies in the circumstances provided by the GDPR, in particular to automated processing based on consent or a contract.
You can withdraw consent in Privacy settings; contact the controller for other requests. You may complain to the President of the Polish Personal Data Protection Office (UODO) or the competent supervisory authority. Providing contact details is voluntary, but without a return address we cannot reply. Declining YouTube disables the embedded player, not access to the rest of the website.
10 / Updates and scope
This policy covers Resonika.art. Registration forms, ticket sales or other separate services, if introduced, require information appropriate to their operation. We will reflect changes to services and processing in this policy. A new consent category will not be automatically enabled on the strength of an earlier choice.