Information clause for persons registering for webinars organized by Open Nexus sp. z o.o.
In accordance with Article 13 of Regulation (EU) 2016/679 (GDPR), we inform you about the rules for processing personal data in connection with registration and participation in webinars.
1. Data controller and contact with the DPO
The personal data controller is Open Nexus sp. z o.o. with its registered office in Poznań, ul. Bolesława Krzywoustego 3, 61-144 Poznań, e-mail: cwk@opennexus.com.
For matters concerning personal data protection, please contact the Data Protection Officer at: iod@opennexus.com.
2. Purposes and legal bases for data processing
We process personal data for the purpose of:
- Registration and organization of the webinar, including handling applications, sending confirmations, email reminders, and optional SMS, enabling participation in the event, providing the recording, and handling questions for the speakers, on the basis of Art. 6(1)(b) GDPR.
- Conducting marketing communication, including sending newsletters, service information, and invitations to subsequent events, solely on the basis of voluntary consent, in accordance with Art. 6(1)(a) GDPR.
- Analyzing the effectiveness of organized events, including registration sources, attendance, and communication effectiveness, on the basis of Art. 6(1)(f) GDPR, i.e., the legitimate interest of the Controller in improving organized events. If technologies require separate consent, their use occurs after obtaining it.
- Establishing, exercising, or defending legal claims, on the basis of Art. 6(1)(f) GDPR.
3. Scope of data and voluntary provision
In connection with registration and participation in the webinar, we may process:
- first name and email address, which are necessary for registration;
- phone number, whose provision is voluntary and enables receiving SMS reminders;
- questions for the speakers, if the participant chooses to provide them;
- information about registration, participation, and given consents, as well as the source of registration and interactions with emails, to the extent of the functionalities used.
Providing data other than first name and email address is voluntary. Lack of marketing consent does not affect the ability to participate in the webinar.
4. Recipients of data
Data may be transferred to service providers used for organizing webinars and electronic communication, in particular:
- MailingR sp. z o.o., provider of the Zanfia platform;
- ClickMeeting, provider of the webinar platform;
- SMS, hosting, email, and IT service providers;
- analytical and marketing tool providers, including Google and Meta, to the extent resulting from the technologies used and consents given.
Data may also be disclosed to entities authorized under law.
5. Transfer of data outside the EEA
In connection with the use of external IT services, data may be transferred outside the European Economic Area. In such cases, we apply appropriate safeguards provided for in the GDPR, in particular the European Commission's adequacy decisions or standard contractual clauses. Information on the safeguards used can be obtained by contacting the DPO.
6. Period of data retention
We store data related to participation in the webinar for a period of up to 90 days from its conclusion, unless there is a separate basis for further processing.
We store data used for marketing communication until the withdrawal of consent or the earlier cessation of the processing purpose.
Data necessary to prove the granting or withdrawal of consent and to pursue or defend claims may be stored for a period justified by these purposes.
After the appropriate period, the data is deleted or anonymised.
7. Rights of the data subject
With regard to the processing of personal data, you have the right, on the basis of the GDPR, to access, rectify, erase, restrict processing, transfer data, and object to processing based on the legitimate interests of the Controller.
If the processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of the processing based on consent before its withdrawal.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office.
8. Automated decision-making
Personal data will not be used for decision-making based solely on automated processing, which produces legal effects or similarly significantly affects the participants, as defined in Article 22 of the GDPR.
As part of organising webinars, we may analyse data regarding registration, attendance, and communication effectiveness. Detailed information on the analytical and marketing technologies used can be found in the cookie information (privacy policy, section 4).