This is an English translation provided for information. The Polish version of this notice is the binding one.
The controller of personal data related to the Symphonic Beats website is STOWARZYSZENIE WAVE, Al. Niepodległości 654A/7, 81-854 Sopot, Poland, KRS 0001104272, NIP (tax ID) 5851504588, REGON 528579280. Contact on data matters: kontakt@waveorchestra.pl.
The website presents the project and links to an external ticketing site. We do not accept payments or ticket orders here. The ticket seller is responsible for handling the purchase and for its own data processing rules.
The server hosting the website records technical information about each connection, which may include your IP address, the time of the request, the requested page address and error information. We use it to keep the service running, to diagnose failures and to protect against abuse. The legal basis is our legitimate interest in maintaining a working and secure website (Article 6(1)(f) GDPR). Hosting is provided by SEOHOST Sp. z o.o., based in Poznań.
How long logs are kept depends on the type of log, the hosting provider's rotation cycle and the time needed to diagnose a failure or investigate a security incident. Data secured in connection with a specific incident may be kept until the incident has been fully investigated and, to the extent necessary, to establish, pursue or defend legal claims. We do not use this data for marketing profiling of visitors.
If you write to kontakt@waveorchestra.pl, we process the data in your message to reply and to continue the correspondence. The mailbox is provided by SEOHOST. The data is available to the authorised people handling your matter. The legal basis is our legitimate interest in replying (Article 6(1)(f) GDPR) and, where the correspondence concerns entering into a contract at your request, taking steps before entering into it (Article 6(1)(b) GDPR). We keep the data for as long as it takes to handle your matter, and afterwards to the extent and for the period required by law or necessary to establish, pursue or defend legal claims. Providing data is voluntary; a contact address is needed if you expect a reply.
Privacy choices and measurement
Photos, fonts and the short trailer are loaded from our own server. We start Google Analytics 4 only after you consent to analytics, and Meta Pixel only after a separate marketing consent. Without the relevant consent, we do not load these tools or send them any measurement events, including cookieless ones. Saying no does not limit your use of the website or your access to the ticketing site.
The legal basis for our processing of data for these purposes is consent (Article 6(1)(a) GDPR); consent to storing and reading information on your device is collected in accordance with Article 399 of the Polish Electronic Communications Law (Prawo komunikacji elektronicznej). You can change or withdraw your choice at any time via “Privacy settings” in the footer. Withdrawal does not affect the lawfulness of processing carried out before it.
We store your choice locally in your browser's storage (sb_measurement_consent). It remains valid for 90 days from the last time you confirmed your settings; after that it is ignored until you make a new choice. You can delete it by clearing the site's data in your browser. The record contains the selected categories and the time and version of your decision; it does not assign you an advertising identifier. Its only purpose is to respect your consent or refusal. Once your choice expires, measurement stays off until you consent again. The WordPress editorial panel uses files that are necessary for logging in.
Google Analytics 4 — analytics
We use GA4 to see visits, where they come from and interest in ticket links. The recipient of the data is Google Ireland Limited, acting as a processor on our behalf for the Analytics service. Measurement covers page views (page_view), ticket clicks (ticket_click) and, in Magazine articles, reading progress and use of article features: scrolling through and finishing the text (read_progress, article_read), enlarging a photo (gallery_open), playing a reel (reel_play, reel_complete), quiz answers without any text typed by visitors (quiz_answer, quiz_complete), and clicks on further episodes and on links to our social media profiles (series_nav_click, series_next_click, social_click). It also covers technical information about the session and device, cookie identifiers, and information about the source of the visit and the campaign. Connecting to Google also involves transmitting your IP address. This data is not anonymous.
We do not use Google Signals, User-ID, user-provided data collection or Google ads personalisation. We have also switched off granular location and device data collection and enhanced measurement. We do not pass on the content of correspondence or any purchase data. A ticket click is not confirmation of a transaction. Information on roles and processing: Google Analytics terms: https://marketingplatform.google.com/about/analytics/terms/gb/ and Google's data processing terms: https://business.safety.google/adsprocessorterms/.
We set the _ga and _ga_* cookies for a maximum of 90 days from creation, without extending this period on later visits; your browser may shorten it. User and event data in GA4 is kept for 14 months. New activity does not renew this period for a user identifier; deletion follows Google's monthly cycle. This period is separate from cookie validity and does not apply to standard aggregated reports. GA4 cookie usage: https://support.google.com/analytics/answer/11397207 and GA4 data retention: https://support.google.com/analytics/answer/7667196.
Meta Pixel — marketing
With your marketing consent, we use Meta Pixel to measure how effective the project's promotion is, including visits to the website (PageView) and clicks leading to tickets (TicketClick). We do not send a purchase event (Purchase). We do not use advanced matching or the Conversions API.
Meta receives information about the event, the page address and the source of the visit, your IP address, information about your browser and device, and standard cookie and ad click identifiers. It may link this with other data, including your account in its services, and use it for measurement and ad targeting, including advertising profiling. Switching off advanced matching does not rule out such linking of data.
The recipient is Meta Platforms Ireland Limited. For the collection and transmission of event data to Meta, we act as joint controllers under the Controller Addendum: https://www.facebook.com/legal/controller_addendum. Meta is a separate controller responsible for any further processing for its own purposes. The addendum sets out how responsibilities are shared; within that scope, Meta is responsible for handling the rights under Articles 15–20 GDPR. You can contact Meta, or us at the address given at the beginning of this notice, about your rights. Meta's own purposes, legal bases and retention periods are described in its privacy policy: https://www.facebook.com/privacy/policy/.
The Pixel may use cookies such as _fbp and — when you arrive with the relevant click identifier — _fbc. Meta's official table gives a period of 90 days for _fbp and _fbc. Depending on how you use Meta's services and on your browser settings, other Meta cookies may also appear, e.g. fr (90 days) or datr (400 days). Not all of them appear on every visit. Meta cookie lifetimes may be renewed on later visits, and your browser may limit how long they persist. The validity period of the consent stored by us does not determine how long Meta keeps data it has already received. Meta cookies policy: https://www.facebook.com/privacy/policies/cookies/.
Withdrawing consent and data transfers
When you withdraw a consent, we stop the related measurement and delete the GA or Meta cookies that our website can access. This does not let us delete cookies set by other domains or recall data already passed to the service providers. Clearing your browser data also deletes the record of your choice.
Google and Meta may process data outside the European Economic Area, including in the USA. Google describes its use of adequacy decisions, including the EU–US Data Privacy Framework where applicable, and standard contractual clauses where required. Information and how to obtain a copy of the safeguards: Google's transfer frameworks: https://policies.google.com/privacy/frameworks. Meta relies on adequacy decisions, including the EU–US Data Privacy Framework for transfers to Meta Platforms, Inc. in the USA within the scope of its certification. In other cases it uses appropriate safeguards, including standard contractual clauses. Information: https://www.facebook.com/privacy/policy and https://www.facebook.com/privacy/policies/data_privacy_framework. Questions about transfers and requests for a copy of the clauses can be sent via https://help.meta.com/support/privacy/.
YouTube videos
YouTube videos are loaded only after you choose “Play from YouTube”. Until then we do not connect to YouTube. Once the player starts, YouTube receives technical data, including your IP address, and may use its own technologies for storing data. We use youtube-nocookie.com mode. The service is provided by Google Ireland Limited; processing may involve transferring data outside the EEA as described by Google: https://policies.google.com/privacy. Consent applies to starting a given player; closing the video removes it from the page. You can decline further playback at any time. This consent is independent of your analytics and marketing choices.
Your rights
You have the right to request access to your data, rectification, erasure or restriction of processing and — in cases provided for in the GDPR — data portability and to object. Where processing is based on consent, you can withdraw it without affecting earlier processing. You can lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, Poland). We do not make decisions about you based solely on automated processing that produce legal effects or similarly significantly affect you. Information about possible advertising profiling by Meta is given above.
Last updated: 13 October 2026. English translation: November 2026.
