Privacy policy
Information about responsible website use and protecting your rights.
Controller and contact
The controller of enquiry-related data is Stowarzyszenie “Pokolenia Wybrzeża Gdańskiego”, ul. Gdyńskich Kosynierów 11, 80-866 Gdańsk, Poland, KRS 0000333570. Contact: info@duracfilm.org, +48 514 777 769.
Data and processing purposes
Forms collect your name, email, subject, category, preferred language, message and an optional phone number and city. We record the enquiry date and consent confirmation. Data is used to handle contact, membership, volunteering and collaboration enquiries. Providing data is voluntary; required fields are necessary to accept a form. We do not make automated decisions or carry out profiling.
Legal bases
Voluntary enquiries are processed on the basis of consent (GDPR Article 6(1)(a)). Where the correspondence requires it, pre-contractual steps at your request (b), legal obligations (c), or legitimate interests in legal claims and security (f) may apply. Data is not used for marketing.
Storage, hosting and security
Messages are stored in Lovable Cloud and are not available to other visitors. Automated email notifications are not currently sent. Authorised personnel and hosting providers may have technical access. Data should be retained for handling the enquiry and, where necessary, legal obligations or claims. No automatic deletion period is configured; contact the controller to request deletion.
Cookie-free analytics
For visitors in the EU/EEA, the UK, Switzerland, all of Canada and locations that cannot be determined, clicks are recorded only after analytics consent. Elsewhere they are recorded unless the browser sends Global Privacy Control. With that signal, clicks are never recorded, even after acceptance. Page visits, visit duration, page speed and errors are recorded for every visitor, without cookies and without identifying anyone. Analytics records pages visited, referral source, country, browser, operating system, device type, visit duration, loading speed, errors and permitted clicks. Lovable does not retain IP addresses, store anything on visitors’ devices or recognise returning visitors. Detailed data is kept for 90 days and daily summaries for a year. Lovable collects this data for us. Lovable’s privacy policy (https://lovable.dev/privacy) explains how it handles it.
Preferences, recipients and transfers
Analytics answers are stored in browser storage for up to 12 months (refusal for 183 days). We do not use advertising, marketing pixels or embedded maps; the map link opens an external service only when clicked. Infrastructure providers may process data outside the EEA; the controller should verify processor agreements and appropriate safeguards, including standard contractual clauses where required. No unverified infrastructure location is asserted.
Your rights
Subject to GDPR conditions, you may request access, rectification, erasure, restriction and portability, and object to processing. You may withdraw consent at any time without affecting the lawfulness of prior processing. Complaints may be made to the President of Poland’s Personal Data Protection Office (uodo.gov.pl).
Document updates
This document describes the currently implemented website features. Before publication, the controller should approve retention practices, provider agreements and lawful bases matching the actual handling of correspondence. Last updated: 11 November 2026.