GDPR
Controller:
The controller of personal data is Aroma Trend Sp. z o.o. (NIP: 5342408853; KRS: 0001082691). For GDPR-related matters please contact: rodo@aromatrend.pl.
The Competition Organiser (Komar Group Maciej Komarczuk, NIP: 526-259-76-80) processes personal data solely as a data processor on behalf of the Controller pursuant to a data processing agreement concluded in accordance with Article 28 of the GDPR.
Purposes and Legal Bases for Processing:
- Organisation and conduct of the Competition – legal basis: Article 6(1)(f) GDPR (legitimate interest of the Controller).
- Marketing and promotion of the Soleo brand – legal basis: Article 6(1)(a) GDPR (consent).
- Tax and accounting obligations – legal basis: Article 6(1)(c) GDPR (legal obligation).
- Establishment, exercise or defence of claims, complaint handling, and archival or statistical purposes – legal basis: Article 6(1)(f) GDPR (legitimate interest of the Controller).
Retention Period:
Personal data will be stored for the duration of the Programme and no longer than 5 years (in relation to tax documentation) or until consent is withdrawn (with respect to marketing content).
Data Recipients:
Entities supporting the organisation of the Competition (marketing agencies, technology providers, courier companies, travel agencies) solely to the extent necessary for the implementation of the Competition.
Due to the use of social media platforms (Instagram, TikTok, Facebook), personal data may be transferred outside the European Economic Area (e.g. to the United States). Such transfers are carried out on the basis of Standard Contractual Clauses approved by the European Commission in accordance with Article 46 GDPR.
Your Rights:
You have the right to access your data, rectify it, erase it, restrict processing, data portability, object to processing, and withdraw consent at any time, as well as the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) (ul. Stawki 2, Warsaw).
Voluntary Nature of Data Provision:
Providing personal data is voluntary, however it is necessary for participation in the Programme.