This Privacy Policy describes how Gdańsk Cocktail Week (hereinafter — "Festival", "Organizer", "we", "us") collects, uses, and protects personal data of website users, festival participants, partners, and subscribers.
By using the festival website, purchasing a ticket, registering for events, or interacting with Gdańsk Cocktail Week services, you agree to this Privacy Policy.
01 Who is the Data Controller
- JDG Andrei Lesnitsky
- Tandeta 1, 80-835 Gdańsk, Poland
- NIP 5842826482; REGON 523680151
- [email protected]
02 What data we collect
We may collect the following categories of data:
2.1. Contact details
- first name and last name;
- email;
- phone number.
2.2. Data related to ticket purchase
- order information;
- ticket type;
- payment status;
- transaction ID.
The Organizer does not store full bank card details.
2.3. Technical data
- IP address;
- device type;
- browser;
- cookies;
- analytical data;
- website visit data.
2.4. Marketing data
- newsletter subscription;
- interaction with email newsletters;
- advertising preferences.
2.5. Media materials
During the festival, the following may be created:
- photographs;
- video recordings;
- livestream;
- interviews;
- aftermovie.
Your image may be captured during your attendance of the festival.
2.6. Industry Day and hackathon registration data
- selected registration format and venue affiliation;
- workplace venue and job position, where applicable;
- whether the participant can bring a laptop;
- availability of paid Claude and/or ChatGPT subscriptions.
We use these answers to organize Industry Day, confirm eligibility, and plan equipment and software access for the hackathon.
03 Purposes of data processing
We use data for:
- selling tickets and registering participants;
- communication regarding festival matters;
- sending organizational information;
- user support;
- analytics and website improvement;
- marketing and PR purposes;
- ensuring festival security;
- fulfilling legal obligations.
- organizing Industry Day and planning hackathon equipment and software access;
04 Legal bases for processing
Data processing is carried out on the basis of:
- user consent;
- performance of a contract;
- legitimate interests of the Organizer;
- requirements of European Union and Republic of Poland legislation.
05 Email newsletters and marketing
5.1. The user may subscribe to informational and marketing newsletters of the festival.
5.2. The user has the right to unsubscribe at any time via:
an unsubscribe link;
a request by email.
5.3. We do not sell personal data to third parties.
06 Cookies and analytics
The website may use:
- cookies;
- Mixpanel (analytics);
- analytics tools;
- embedded content services.
Cookies help to:
- analyze traffic;
- improve user experience;
- ensure website functionality;
- show relevant advertising.
Detailed information is contained in the Cookie Policy. Analytics cookies (including Mixpanel) run only after you give consent, which you can change at any time in the cookie settings.
07 Bot protection (Cloudflare Turnstile)
We use Cloudflare Turnstile on our forms (ticket claim, waitlist, newsletter, bar applications, Industry Day registration, sign-in) to prevent automated abuse. Turnstile runs an invisible browser challenge in the background, without traditional captchas.
- Turnstile may collect: IP address, browser headers, basic device characteristics, and limited interaction signals;
- data is processed by Cloudflare on our behalf and is not used to display advertising;
- no personal account or user input is required to pass the challenge.
For details on what data Cloudflare processes, see the Cloudflare Turnstile Privacy Addendum: https://www.cloudflare.com/turnstile-privacy-policy/
08 Data transfer to third parties
We may transfer data to:
- ticketing platforms;
- payment systems;
- email services;
- analytics platforms;
- festival contractors;
- state authorities in cases provided by law.
All contractors are required to comply with GDPR.
09 Data retention
Personal data is stored:
- for the period necessary for processing purposes;
- within the time limits provided by law;
- until the user withdraws consent.
- Industry Day and hackathon readiness answers only for as long as needed to organize and administer the event, unless a longer period is required by law;
10 User rights
In accordance with GDPR, the user has the right to:
- request access to data;
- rectify data;
- erase data;
- restrict processing;
- port data;
- withdraw consent;
- lodge a complaint with a supervisory authority.
11 Data security
Photos and recordings may be made at the event. Attendance is not blanket consent to advertising use of your image. The organizer should provide information about the specific use, legal basis and your rights; where consent is required, it is requested separately.
12 Photo and video recording
During the festival, photo and video recording may take place for:
- social media;
- aftermovie;
- PR;
- festival advertising;
- partner publications.
By attending the festival, the user agrees to the possible use of materials featuring their image without additional notice or compensation.
13 Links to external services
The festival website may contain links to:
- Instagram;
- Facebook;
- ticketing platforms;
- partner websites.
The Organizer is not responsible for the privacy policies of third-party services.
14 Changes to the policy
- [email protected]
- +48451017322
- https://gdanskcocktailweek.com
15 GDPR notice
This notice explains how data is processed. Using the site does not constitute consent to marketing or analytics. Optional consent is requested separately and can be withdrawn. Processing necessary for an order or a legal obligation does not depend on marketing consent.
16 GDPR Notice
By using the website and participating in Gdańsk Cocktail Week, you acknowledge and agree to this Privacy Policy and the processing of personal data in accordance with GDPR regulations.
17 Stripe payments and tickets
To fulfill an order we process your email, ticket type and price, order and payment identifiers, payment status and accepted offer/terms version (GDPR Article 6(1)(b)). Records required by law are retained for legal obligations (Article 6(1)(c)); data needed for fraud prevention and legal claims is processed for legitimate interests (Article 6(1)(f)).
Stripe processes payments. We send Stripe your email and order information to process the payment. You enter card or other payment instrument details directly in Stripe's form; we do not store full card details. Stripe also processes device and transaction data for security, fraud prevention and its own legal obligations under https://stripe.com/privacy. Information about transfers outside the EEA and safeguards is available at https://stripe.com/legal/dpa.
Ticket records are stored using Cloudflare infrastructure and sent to our email service for delivery. Your ticket link and QR code are confidential and grant access to the ticket. Paying does not subscribe you to marketing. Mixpanel remains disabled without analytics consent; the Stripe payment form loads on the pass checkout page.
When a venue checks your pass, we record its reference, the venue and visit time to validate admission and operate the festival. Venue staff see their own venue’s visits; authorized organizer administrators can associate visits with the pass delivery email. These records are not sent to Mixpanel.
If you use a promotion code, we record the code, promotion category, associated venue (if any), buyer email and order status to apply the correct price, enforce its use limit and account for the promotion. Authorized organizer administrators can review these records; a venue sees only its own code and use count, without buyer emails.
We retain order data for pass fulfillment and complaint handling, and afterwards to the extent and for the period required by tax and accounting laws or necessary to establish, exercise or defend legal claims. Once those grounds cease, we delete or anonymize the data. Contact [email protected] about the retention period for a specific order.