Privacy policy
Information about personal data and cookies
Updated: 19 September 2026
1. Data controller and contact
The controller of personal data is Towarzystwo Śpiewacze „Lira” im. Stefana Wasiaka w Warszawie (the Stefan Wasiak Lira Singing Society in Warsaw), ul. Domaniewska 17/19/133, 02-663 Warszawa, Poland, KRS 0000115159, NIP 5212744280.
For privacy enquiries or to exercise your rights, email mail@lira.waw.pl or write to the postal address above. This policy applies to use of the Society’s website and contact with us.
2. What data we process and why
Correspondence and contact. When you email or call us, we process the contact details, name and information you provide. We use these to respond, organise concerts, cooperate with others and handle enquiries about joining the choir. Our legal basis is our legitimate interest in handling correspondence and carrying out the Society’s activities — Article 6(1)(f) of the GDPR. Where your enquiry concerns steps taken at your request before entering into a contract, Article 6(1)(b) applies.
Website operation and security. When you connect to the website, technical data is processed, including your IP address, request time, the page visited and browser information. This is used to display the website, diagnose problems and prevent misuse. The legal basis is Article 6(1)(f) of the GDPR — ensuring that the website operates effectively and securely.
Settings and consent. The website remembers your language choice and cookie preferences. Processing through optional features that require consent is based on Article 6(1)(a) of the GDPR. Data necessary to remember and demonstrate your choice is processed to manage privacy settings.
3. Cookies and privacy settings
Cookies are small files stored by your browser. The website uses Elementor’s Cookiez panel to manage preferences. You can return to the panel using the ‘Cookie settings’ link in the footer. You can also delete or block cookies in your browser settings, although this may affect how your preferences are remembered.
The website configuration includes pll_language, which remembers the selected language for approximately one year. Elementor services may also use __cf_bm cookies for bot protection, lasting approximately 30 minutes. Details of cookies detected by the tool are available in the cookie panel. Consent to optional cookies is voluntary and can be withdrawn by changing your settings.
4. Service providers and external connections
Providers of hosting, email, technical support and website tools access data to the extent necessary to provide their services. Technical maintenance is provided by Soland-IT Andrzej Kuska. Data may also be disclosed to authorised public bodies where required by law.
The website uses Elementor services, including cookie and accessibility tools and external technical resources. Your browser connects to their servers and sends the technical data needed for communication. See Elementor’s privacy policy.
Some fonts are loaded from Google Fonts. This connects your browser to Google’s servers and sends technical data, including your IP address. See Google’s privacy policy.
External service providers may process data outside the European Economic Area. Their documentation describes data locations and transfer safeguards, such as adequacy decisions or standard contractual clauses. You can contact us for information about safeguards relating to processing by the Society.
5. Facebook and external links
The Facebook icon in the footer is a standard link to the Society’s profile. The link itself does not embed Facebook or its pixel on our website. After following the link, Facebook’s rules apply. See Meta’s privacy policy for information about its data processing. Other external links similarly lead to websites managed by their respective owners.
6. How long we retain data
We retain correspondence for as long as necessary to handle the matter and any essential follow-up. Where it documents a contract or may be relevant to legal claims, retention takes account of applicable statutory periods and limitation periods.
Technical data is retained for as long as needed for diagnostics and website security, in line with providers’ log and backup retention cycles. Data relating to an incident may be retained while it is investigated. Cookies expire after their specified duration or when deleted. Contact us by email for details about data relating to your enquiry.
7. Your rights
To the extent provided by the GDPR, you may request access to your data, rectification, erasure or restriction of processing. You may object to processing based on our legitimate interests on grounds relating to your particular situation. The right to data portability applies in the circumstances specified by the GDPR, particularly automated processing based on consent or a contract.
Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing. You may lodge a complaint with the President of Poland’s Personal Data Protection Office: uodo.gov.pl.
Providing data in correspondence is voluntary, but without sufficient contact information we may be unable to handle your enquiry. The Society does not make decisions about visitors that have legal or similarly significant effects based solely on automated processing, including profiling.
8. Changes to this policy
We update this policy when website features or data processing practices change. The current version is available through the ‘Privacy policy’ link in the footer.