Privacy Policy

01Data controller

The controller of your personal data is WE GROUP sp. z o.o., with its registered office in Warsaw, at ul. Marszałkowska 83/57, 00-683 Warsaw, entered in the Register of Entrepreneurs of the National Court Register under KRS number 0000664185, NIP 7010667258, REGON 366580330 (hereinafter: the "Controller").

Under the WE EVENT brand, the Controller operates a venue in the Zebra Tower building at Mokotowska 1, 00-640 Warsaw (Śródmieście district), on the 12th floor — this is the venue to which enquiries submitted through this website relate.

For matters relating to personal data, you may contact us by email at [email protected], by telephone on +48 731 001 716, or via WhatsApp on +48 730 001 062. We have not appointed a data protection officer — all requests are handled at the email address given above.

02What data we collect and why

Enquiry and quote form (Contact Form 7). When you submit an enquiry via the form on the home page or the pricing page, we process the data you provide: your full name, email address, telephone number, the planned date of the event, the number of guests, the event format and the content of your message. We use this data solely in order to respond to your enquiry, prepare a hire quote and conduct further correspondence on the matter. The legal basis is the taking of steps at your request prior to entering into a contract (Article 6(1)(b) of the GDPR) and our legitimate interest in handling correspondence (Article 6(1)(f) of the GDPR). The form is operated by the Contact Form 7 plugin installed on our website; the content of your enquiry is delivered to our mailbox, and you receive an automatic confirmation at the email address provided, together with an individual enquiry number.

Contact by telephone, email and WhatsApp. If you contact us directly, we process the data you provide to us in order to handle your enquiry (Article 6(1)(b) and (f) of the GDPR). In the case of WhatsApp, the transmission of messages itself takes place within the infrastructure of that application's provider, on the terms set out in its own privacy policy.

Technical data. While you browse the website, the server and intermediary services (hosting, Cloudflare) automatically record standard technical data, such as your IP address, browser type and the subpages you visit — in order to ensure the security and proper functioning of the website (Article 6(1)(f) of the GDPR).

Visitor statistics (Google Analytics via Google Site Kit). With your consent, given via the Usercentrics privacy settings banner, we use Google Analytics connected through the Google Site Kit plugin in order to understand how visitors use the website (for example, which subpages they view and where they arrived from). The data is collected in aggregated form and is not used by us to identify individual persons. The legal basis is your consent (Article 6(1)(a) of the GDPR), which you may withdraw at any time by returning to the privacy settings available on the website. Until consent has been given, no statistics scripts are executed.

Providing your data is voluntary, but without your contact details we will not be able to respond to your enquiry or prepare a quote.

03How long we retain data

We retain data from enquiries for the duration of the correspondence, and subsequently for the period necessary to establish or defend any potential claims — for no longer than 3 years from the last contact. If a contract is concluded, we retain the data relating to its performance and settlement for the periods required by law (in particular by tax regulations — 5 years from the end of the tax year). Data processed on the basis of your consent is retained until that consent is withdrawn, and technical data from server logs is retained for the period resulting from our hosting provider's policy, as a rule for no longer than 12 months.

04To whom we disclose data

Your data may be entrusted to entities that support our website and our communications: hosting and email providers, IT and website maintenance providers and — with regard to technical data — Cloudflare, which routes traffic to the website and protects it against attacks. If you consent to statistics, data concerning your visit is also transmitted to Google as the provider of Google Analytics. All these entities process data on the basis of data processing agreements and exclusively on our behalf, or on the terms set out in their own policies. We do not sell your data, nor do we share it with third parties for marketing purposes.

05Your rights

You have the right to: access your data and obtain a copy of it, have it rectified or erased, restrict its processing, data portability, and object to processing based on a legitimate interest. Where we process data on the basis of consent, you may withdraw that consent at any time, without affecting the lawfulness of processing carried out before its withdrawal. To exercise these rights, please write to [email protected] — we respond within one month of receiving your request.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, www.uodo.gov.pl).

06Cookies

The website uses two types of cookies: essential cookies, which ensure that the site functions correctly (including Cloudflare security cookies and the storing of your choice in the Usercentrics consent banner), and — only where you have given consent — statistics cookies (Google Analytics via Google Site Kit). On your first visit we display a privacy settings banner in which you decide about statistics cookies; you may change your choice at any time by returning to the privacy settings on the website. We do not operate comments or user accounts, and we do not use advertising cookies or profiling. You may also manage cookies directly in your browser settings — please bear in mind, however, that blocking essential cookies may make the website more difficult to use.

07Embedded content from other websites

The website contains embedded external content which loads only once you interact with it or when the relevant section is displayed:

• YouTube videos — played in enhanced privacy mode (youtube-nocookie.com); until you click on the thumbnail you see only a static image, and the video together with the associated Google mechanisms starts only after that click. Policy: policies.google.com/privacy.
• Google Maps — the contact section contains an embedded Google Maps map showing directions to Zebra Tower at Mokotowska 1; Google's privacy policy applies to the map.
• Google Fonts — the Space Grotesk and Karla typefaces are loaded from Google's servers; in the process, your browser transmits standard technical data (your IP address).
• Cloudflare — traffic to the website passes through the Cloudflare network, which stores technical security cookies and basic connection data.

The providers of these services may collect data about your interaction with the embedded content in accordance with their own privacy policies.

08Data transfers outside the EEA

In connection with the use of Google services (Analytics via Site Kit, YouTube, Maps, Fonts) and Cloudflare, technical data may be transferred to third countries, including the United States. These providers state that they apply mechanisms legitimising such transfers — in particular the standard contractual clauses approved by the European Commission and participation in the Data Privacy Framework.

09Changes to this policy

This policy may be updated, for example where the scope of our services, our analytics tools or the applicable legislation changes. The current version is always available at sala-konferencyjna-warszawa.pl/en/privacy-policy/. The Polish version is available at /polityka-prywatnosci/.