Privacy Policy
Last updated: February 2026
This Privacy Policy explains how we collect, use, and protect your personal data when you participate in the PKP Train Ticket Registration program. We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR).
1. Data Controller
The data controller for this registration is [Organization Name], [Address]. For questions about your data, contact us at [email@example.com].
2. Data We Collect
We collect the following personal data when you register: email address, first name, last name, country (DE/PL), preferred language, and your answer to the registration question. We also collect a hashed fingerprint of your IP address for abuse prevention — your raw IP address is never stored.
3. Purpose & Legal Basis
Your data is processed for the purpose of administering the registration, selecting participants, and communicating results. The legal basis is your consent (Art. 6(1)(a) GDPR) given by submitting the registration form and accepting these terms. For abuse prevention, we rely on our legitimate interest (Art. 6(1)(f) GDPR).
4. Data Storage & Retention
Your data is stored on servers within the European Union (AWS eu-central-1 and Supabase). Personal data will be retained for the duration of the program and deleted within 12 months after the program concludes, unless a longer retention period is required by law.
5. Data Sharing
Your data is not sold or shared with third parties for marketing purposes. Data is processed by the following service providers under appropriate data processing agreements: Amazon Web Services (hosting), Supabase (database), Cloudflare (security), and Upstash (rate limiting).
6. Your Rights
Under the GDPR, you have the right to: access your personal data, rectify inaccurate data, request deletion of your data, restrict processing, data portability, and object to processing. To exercise any of these rights, contact us at [email@example.com]. You also have the right to lodge a complaint with your local data protection authority.
7. Cookies & Tracking
This website does not use tracking cookies or analytics. We use only essential cookies required for the functioning of the registration system (language preference and development mode settings).