GDPR information clause

The controller of your personal data is CLOUT Sp. z o.o. with its registered office at ul. Rynek 6, 43-400 Cieszyn, Poland, entered into the National Court Register under KRS no. 0000822011, Tax ID (NIP): 5482728925, REGON: 385300554.

For matters related to data protection, you can contact the Controller at the correspondence address above or via email: get@clout.pl. For operational media accreditation matters, contact media@clout.pl. The Controller has not appointed a Data Protection Officer.

The accreditation form collects personal data provided by the applicant: full name, email address, phone number, country, selected event, media outlet, editorial office or profile name, accreditation type, preferred communication language, Instagram, TikTok or other social profile link, portfolio, publication or outlet website links, and reach information.

We also process technical data necessary for form security, including a hashed IP address used for rate limiting.

Your personal data will be processed to receive and review the accreditation application for CLOUT Festival 2026, communicate the application status, potentially grant accreditation and organize media operations during the event taking place on 10-11 July 2026 in Warsaw.

The legal basis for processing is the necessity to perform a contract or take steps at the request of the data subject prior to entering into a contract, i.e. Article 6(1)(b) GDPR. For form security, press operations, abuse prevention and establishing or defending potential claims, the legal basis is the Controller's legitimate interest, i.e. Article 6(1)(f) GDPR.

If you voluntarily consent to marketing communication, your data may also be processed to send marketing content related to CLOUT Festival and the Controller's activities via electronic and telephone channels. The legal basis for such processing is the consent of the data subject, i.e. Article 6(1)(a) GDPR. This consent may be withdrawn at any time.

Marketing consent is not required to submit an application or receive accreditation. Confirmation, approval and denial emails are operational messages related to the accreditation process.

Your data may be disclosed to authorized employees and collaborators of the Controller involved in the organization of CLOUT Festival and in media and accreditation handling.

Data may be processed by entities supporting the Controller in IT infrastructure and communication, in particular Supabase as the database provider in the eu-west-1 region, Vercel as the application hosting provider, Resend as the transactional email provider, and Google Workspace for email and communication tools.

Data of approved applicants may be transferred to ACCRED Sp. z o.o. (KRS: 0000937595, NIP: 7123427751) with its registered office at ul. Sadowa 2/11, 20-027 Lublin, Poland, or another badge/IDENTI system operator only to the extent necessary to handle accreditation and issue an event credential: full name, phone, email, outlet or profile name and social profile.

Data may be disclosed to public authorities entitled to receive it under legal provisions, if such an obligation arises.

Some technology providers may process data outside the European Economic Area. Where this happens, transfers are based on appropriate legal safeguards, in particular data processing agreements and standard contractual clauses.

Data processed for accreditation purposes will be stored for the period necessary to conduct the accreditation process and facilitate participation in CLOUT Festival 2026, and then for up to 12 months after the event. After that period, the data will be deleted or anonymized, unless longer retention is required by law or necessary to establish, exercise or defend legal claims.

Data processed for marketing communication purposes will be stored until you withdraw your consent for its processing or until the Controller terminates marketing activities, if this occurs earlier.

Technical rate-limiting data, including IP hashes, is deleted cyclically after 30 days.

You have the right to access the content of your personal data and receive a copy, rectify your data, erase your data, restrict processing, data portability and object to data processing to the extent that the legal basis for processing is the Controller's legitimate interest.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office competent in Poland, ul. Stawki 2, 00-193 Warsaw, if you believe that the data processing violates data protection regulations.

Providing personal data in the accreditation form is voluntary, but necessary to review the application and obtain accreditation. Failure to provide the required data will make it impossible to grant accreditation for CLOUT Festival.

Consent to receive marketing content is voluntary, and refusal to provide it does not affect the accreditation process or the possibility of receiving accreditation.

Your personal data will not be subject to automated decision-making, including profiling.