.png)
1. Data controller
The controller of your personal data is “WORK GROUP” Sp. z o.o., registered office: ul. Klecińska 125/B0.21, 54-413 Wrocław, Poland, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court for Wrocław-Fabryczna in Wrocław, 6th Commercial Division of the National Court Register, under KRS number 0000248727, NIP (tax ID) 8992555744, REGON 020206513, share capital PLN 50,000 (the “Controller” or “we”).
For any matters relating to personal data you can contact us by e-mail at biuro@workgroupevents.pl, by phone at +48 71 786 87 88 or by post at our registered office address.
This Policy applies to the website https://www.workgroupevents.pl (the “Website”) and to contacting us in connection with our services.
2. Purposes, legal bases and retention periods
Responding to your enquiry (contact form, e-mail, phone) and preparing an offer – data: name, company, e-mail, phone number, event details and the content of your message. Legal basis: Article 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) and Article 6(1)(f) GDPR (our legitimate interest in handling correspondence, including with company representatives). Retention: until the correspondence ends and, if no contract is concluded, no longer than 12 months from the last contact.
Concluding and performing a contract – legal basis: Article 6(1)(b) GDPR (where you are a party to the contract) or Article 6(1)(f) GDPR (contact with persons representing our clients and partners). Retention: for the term of the contract and then until the limitation period for claims expires.
Legal obligations, including tax and accounting – legal basis: Article 6(1)(c) GDPR. Retention: as required by law, as a rule 5 years from the end of the year in which the tax obligation arose.
Establishing, pursuing or defending legal claims – legal basis: Article 6(1)(f) GDPR. Retention: until the limitation period for claims expires.
Direct marketing of our services – legal basis: Article 6(1)(f) GDPR. We send commercial information by e-mail or contact you by phone for marketing purposes only with your separate consent, as required by the Polish Electronic Communications Law. Retention: until you withdraw your consent or object.
Statistics and online advertising (analytics and marketing cookies) – legal basis: your consent (Article 6(1)(a) GDPR) given in the cookie banner. Retention: until you withdraw consent or the cookies expire.
Ensuring the operation and security of the Website (strictly necessary cookies, server logs) – legal basis: Article 6(1)(f) GDPR. Retention: as described in the Cookie Policy.
Running our social media profiles (Facebook, Instagram, LinkedIn, TikTok) – legal basis: Article 6(1)(f) GDPR. In this respect we are a joint controller together with the operator of the relevant platform, which also processes data under its own terms.
3. Providing data is voluntary
Providing your data is voluntary. However, without contact details we cannot respond to your enquiry, and without the data required by law we cannot conclude a contract or issue an invoice. Marketing consents are entirely optional and do not affect our response to your enquiry.
4. Recipients of data
Your data may be disclosed only to entities that help us run our business, under data processing agreements or as independent controllers:
Wix.com Ltd. – provider of the platform the Website runs on, including forms and the content database,
Usercentrics GmbH – provider of the cookie consent management tool,
Google Ireland Ltd. – Google Analytics, Google Ads, Google Tag Manager (only after you give consent),
Meta Platforms Ireland Ltd. – Meta Pixel (only after you give consent),
providers of e-mail, IT and hosting services,
accounting firms, law firms and advisers,
subcontractors and partners involved in delivering an event – to the extent necessary to organise it,
public authorities – where required by law.
5. Transfers outside the European Economic Area
Some providers (e.g. Wix.com Ltd., based in Israel, and Google and Meta group companies in the USA) may process data outside the EEA. Such transfers are based on European Commission adequacy decisions (including for Israel and for entities certified under the EU-US Data Privacy Framework) or on standard contractual clauses approved by the European Commission. You can obtain a copy of these safeguards by contacting us.
6. Your rights
You have the right to:
access your data and obtain a copy of it,
rectify your data,
have your data erased,
restrict processing,
data portability – where we process data on the basis of consent or a contract by automated means,
object to processing based on our legitimate interest, including objecting to direct marketing,
withdraw your consent at any time – without affecting the lawfulness of processing carried out before withdrawal; you can change your cookie consents by clicking the privacy settings icon in the bottom left corner of the Website,
lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
To exercise your rights, write to biuro@workgroupevents.pl.
7. Automated decision-making and profiling
We do not make decisions about you based solely on automated processing that produce legal effects or similarly significantly affect you. With your consent, Google and Meta advertising tools may create audience groups for displaying ads.
8. Cookies
The Website uses cookies. Details, including the list of tools and how to change your consents, can be found in the Cookie Policy.
9. Data security
We apply technical and organisational measures appropriate to the risk, including an encrypted connection (HTTPS), limiting access to data to authorised persons and data processing agreements with our providers.
10. Changes to this Privacy Policy
This Policy may be updated, for example when the law or the tools we use change. The current version is always available on the Website. In the event of any discrepancy, the Polish version prevails.
Last updated: 18 October 2026.