Privacy Policy
Privacy Policy
Last updated: 13 August 2026
1. Data Controller
The controller of personal data processed in connection with this website and its English-language section is:
Stowarzyszenie Sztuki Użytkowej TWÓR
Waleriana Łukasińskiego 26
58-100 Świdnica
Poland
KRS: 0001191580
NIP: 8842834773
REGON: 54257591000000
Email: kontakt@twor-stowarzyszenie.pl
This Privacy Policy primarily describes the processing of personal data in connection with the English-language showroom, general website use, professional enquiries and communication with TWÓR.
The Polish-language online shop is subject to the privacy information and terms applicable to the Polish section of the website.
2. Personal Data We Process
Depending on how you use the website, TWÓR may process the following categories of personal data:
Website and technical data, such as your IP address, date and time of the request, requested URL, browser and device information, and technical or security logs.
Contact and enquiry data, such as your name, email address, organisation or company name if voluntarily provided, subject of the enquiry, message content and any other information you choose to include in your correspondence.
Cookie and consent data, including information about your cookie preferences and consent choices.
Analytics or marketing data, where such technologies are enabled and you have provided the consent required by applicable law.
3. Purposes and Legal Bases for Processing
Website operation and security
Technical data may be processed in order to provide the website, maintain its security and stability, prevent abuse, identify technical problems and protect TWÓR’s legitimate interests in operating a secure and reliable website.
The legal basis is Article 6(1)(f) GDPR, namely the legitimate interest of TWÓR in ensuring the proper and secure operation of the website.
Contact, professional enquiries and portfolio requests
When you contact TWÓR, we process the information contained in your enquiry in order to respond to you, communicate about exhibitions, gallery representation, collections, projects or other forms of cooperation, and take steps requested by you in connection with possible cooperation.
Depending on the nature of the enquiry, the legal basis is:
Article 6(1)(f) GDPR, namely the legitimate interest of TWÓR in responding to enquiries and conducting professional communication, or
Article 6(1)(b) GDPR where the processing is necessary to take steps at your request before entering into a contract or other agreement.
Compliance with legal obligations
Where necessary, personal data may also be processed in order to comply with legal obligations applicable to TWÓR.
The legal basis is Article 6(1)(c) GDPR.
Establishment, exercise or defence of legal claims
Where necessary, personal data may be retained and processed for the establishment, exercise or defence of legal claims.
The legal basis is Article 6(1)(f) GDPR, namely TWÓR’s legitimate interest in protecting its rights.
Analytics and marketing technologies
Where analytics, advertising or other non-essential technologies involving personal data are used, such processing takes place only where the consent required by applicable law has been obtained.
The legal basis for the processing of personal data in this context is Article 6(1)(a) GDPR.
Further information is provided in the Cookie Policy.
4. Sources of Personal Data
Most personal data is obtained directly from you when you contact TWÓR or interact with the website.
Certain technical information is generated automatically when your browser or device communicates with the website.
5. Recipients of Personal Data
Personal data may be disclosed to entities supporting TWÓR in operating the website and conducting its activities, where this is necessary for the relevant purpose.
These may include providers of website hosting and technical infrastructure, website maintenance and security services, email and communication services, form-handling services, analytics or marketing services where these are enabled with the appropriate consent, as well as professional legal, accounting or IT advisers.
Personal data may also be disclosed to public authorities or other entities where disclosure is required by applicable law.
Where an external service provider processes personal data on behalf of TWÓR, such processing is carried out under appropriate data-processing arrangements required by the GDPR.
6. Transfers Outside the European Economic Area
Some third-party service providers used in connection with websites and online communication may process personal data outside the European Economic Area.
Where such a transfer occurs, TWÓR applies or relies on an appropriate transfer mechanism required by Chapter V of the GDPR, such as an adequacy decision adopted by the European Commission, the EU-U.S. Data Privacy Framework where applicable to a certified recipient, Standard Contractual Clauses approved by the European Commission, or another legally recognised safeguard.
Information concerning third-party technologies used on the website is also provided in the Cookie Policy.
7. Data Retention
Personal data is not retained for longer than necessary for the purposes for which it was collected.
Technical and security information is retained for the period necessary to maintain website security, diagnose technical problems and investigate security incidents, subject to periodic deletion in accordance with the technical configuration of the website and its service providers.
Data contained in enquiries and correspondence is retained until the relevant matter has been completed and, where necessary, afterwards for the period required to establish, exercise or defend legal claims or comply with legal obligations.
Where processing is based on consent, data is processed until consent is withdrawn or until the relevant purpose ceases to exist, subject to any retention necessary to demonstrate that consent was lawfully obtained or to comply with legal obligations.
Cookie retention periods are described in the Cookie Policy.
8. Your Rights
Subject to the conditions set out in the GDPR, you may have the right to:
request access to your personal data,
request correction of inaccurate or incomplete data,
request deletion of your personal data,
request restriction of processing,
receive your personal data in a structured, commonly used and machine-readable format where the right to data portability applies,
object to processing based on Article 6(1)(f) GDPR,
withdraw consent at any time where processing is based on consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Requests concerning personal data may be sent to:
kontakt@twor-stowarzyszenie.pl
9. Right to Lodge a Complaint
If you believe that your personal data is being processed in breach of applicable data-protection law, you have the right to lodge a complaint with the competent supervisory authority.
For TWÓR, the competent supervisory authority in Poland is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).
10. Is Providing Personal Data Mandatory?
Providing personal data through a contact form or by email is voluntary.
However, certain information, in particular a means of contacting you and information necessary to understand your enquiry, may be required in order for TWÓR to respond.
Consent to non-essential cookies and similar technologies is voluntary. Refusing or withdrawing consent does not prevent access to the basic content of the website, although some optional features may function differently.
11. Cookies and Similar Technologies
The website uses cookies and similar technologies for purposes including essential website functionality, preference management and, where enabled and consented to, analytics or marketing.
Detailed information about these technologies, their purposes and available consent choices is provided in the Cookie Policy.
12. Security
TWÓR applies appropriate technical and organisational measures intended to protect personal data against unauthorised access, loss, alteration, disclosure or destruction, taking into account the nature of the processing and the risks involved.
13. Changes to this Privacy Policy
This Privacy Policy may be updated where the way in which personal data is processed changes or where changes are required by applicable law.
The current version and the date of its most recent update are published on this website.
14. Contact
Questions concerning this Privacy Policy or the processing of personal data may be sent to:
Stowarzyszenie Sztuki Użytkowej TWÓR
Waleriana Łukasińskiego 26
58-100 Świdnica
Poland