KS Toruń KS Toruń Tickets
Events Season passes Extras Cart Log in Register
PL | EN

Privacy Policy

This Policy describes how we process personal data in the KS Toruń ticket shop. The controller's registration details (full legal name, registered address, tax ID) and the data protection officer's contact must be verified and completed according to the club's legal status — see „Data controller".

1. Data controller

The controller of your personal data is KS Toruń (sports club). For matters concerning personal data protection, contact us at: bilety@ks-torun.pl or using the contact details in the site footer.

Note: the full legal name, registered address and tax ID should be completed in the shop settings and in this content.

2. Data we process

  • Account and purchase data: first name, surname, e-mail address, phone number (optional), tax ID (when an invoice is issued).
  • Transaction data: orders, tickets, season passes, add-ons (e.g. parking), amounts, payment status and method.
  • Technical and security data: IP address, device/browser information, event logs (login, printouts), necessary for security and accountability.

3. Purposes and legal bases (GDPR)

  • Purchase fulfilment and account service — Art. 6(1)(b) GDPR (performance of a contract).
  • Accounting and tax obligations (invoices, settlements) — Art. 6(1)(c) GDPR (legal obligation).
  • Service security (protection against abuse and bots, accountability) — Art. 6(1)(f) GDPR (legitimate interest).
  • Marketing newsletter — Art. 6(1)(a) GDPR (consent), which you may withdraw at any time.

4. Data recipients

We may entrust your data to trusted processors only to the extent necessary to provide services:

  • Online payment operator (processing payments for tickets and passes).
  • E-mail delivery provider (purchase confirmations, tickets, newsletter).
  • Infrastructure (hosting) provider — storage of the service data.
  • Anti-bot protection service on forms (verifying the request comes from a human).

We do not sell your data. Any transfer is based on data processing agreements and solely to provide the services.

5. Retention period

  • Transaction-related data is kept for the period required by accounting and tax law.
  • Account data — until the account is deleted; after deletion data is anonymised and transaction history retained to the extent required by law.
  • Event and security logs — for a limited time necessary for accountability.
  • Newsletter consent — until withdrawn.

6. Your rights

You have the right to: access your data, rectify it, erase it, restrict processing, data portability, and object to processing based on legitimate interest. You may withdraw consent (e.g. for the newsletter) at any time without affecting the lawfulness of processing before withdrawal.

You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, Poland.

To exercise your rights, contact us: bilety@ks-torun.pl.

7. Cookies

We use essential cookies for the shop to work (user session, cart, CSRF protection) and security cookies (anti-bot verification on forms). Essential cookies do not require consent. We currently do not use analytics or marketing cookies; should they be introduced, they will only run after you give consent. You can change your cookie consent at any time via the „Cookie settings" link in the footer.

8. Automated decision-making

We do not make decisions about you based solely on automated processing that would produce legal effects or similarly significantly affect you (profiling).

9. Changes to the Policy

We may update this Policy, e.g. due to changes in law or the scope of services. The current version is always available on this page.