Privacy Policy

Data controller

The data controller is Team Knocknock Sp. z o.o., ul. Rekreacyjna 29B/2, 05-500 Józefosław, Poland, NIP: 1182194995. Contact: marketing@internationalfoodfestival.pl.

What data we collect

Data submitted via our forms (contact, vendor, partner, newsletter): name, email, phone, company name, message content and uploaded files. Plus technical data (IP address, cookies) for site operation, security and — with consent — analytics.

Vendor Zone (account)

Vendors receive an account in the Vendor Zone. In it we process: company details (name, NIP/tax ID, address), contact person, email and phone, description of the offer and cuisine, logo, social media profiles, stall type and size, power needs and the list of electrical devices, the regions the vendor can travel to, photos, festival applications and their status, and fees due, invoices and payment status. Passwords are stored only as an encrypted hash — we cannot see them.

Purposes & legal bases

Handling enquiries and applications, running the vendor account and festival participation — Art. 6(1)(b) GDPR (contract and pre-contract steps). Billing, invoices and accounting — (c) (legal obligation). Planning future editions, organisational contact, promoting vendors on the festival website and channels, security and legal claims — (f) (legitimate interest). Newsletter, analytics and marketing — (a) (consent).

Emails

We send vendors organisational emails related to their account and participation (invitations, account activation, password reset, application status, fees, reminders). The newsletter is sent only with consent — every issue contains an unsubscribe link.

Recipients

Data may be shared with providers that support us technically: hosting and email providers, our accounting office and — with your consent — analytics and advertising tools (Google, Meta, TikTok). Payments are made by bank transfer to the organiser’s account — we do not process card data. We never sell personal data.

Retention

Application and vendor account data — for the duration of our cooperation and then until claims become time-barred. Accounting documents — 5 years from the end of the tax year. Marketing consents — until withdrawn. On request we delete the account unless the law requires us to keep the data.

Your rights

You have the right to access and rectify your data (most of it you can correct yourself under “Company profile”), to erasure, restriction, portability, to object, to withdraw consent at any time, and to lodge a complaint with the supervisory authority (UODO).

Security

The site runs only over encrypted HTTPS. Only authorised members of the organiser’s team can access the admin panel, and financial data is visible only to designated people.

Contact

For data protection matters: marketing@internationalfoodfestival.pl.