Privacy Policy
Artistic League
Effective date: 8 September 2026
Last updated: 8 September 2026
- Privacy Policy
- 1. Who we are
- 2. Our principles
- 3. What data we collect
- 4. Legal basis for processing
- 5. How we use data
- 6. Who we share data with
- 7. Transfers outside the EEA
- 8. Retention
- 9. Your rights
- 10. Cookies and analytics
- 11. Children’s privacy
- 12. Security
- 13. Extra notes (EEA, UK, California)
- 14. Complaints
- 15. Changes to this policy
- 16. Contact
1. Who we are
Artistic League is operated by MAGOWIE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, a company incorporated in Poland, with its registered office at:
DRUŻYKOWA 15
42-445 DRUŻYKOWA
Poland
NIP: 6492323159, KRS: 0000919853
Share capital: 5 023,00 zł
For the EU General Data Protection Regulation (GDPR/RODO) we are the controller of personal data processed in connection with the Artistic League waitlist, account, and website.
Privacy contact: waitlist@artisticleague.org
We have not appointed a Data Protection Officer. Questions about our processing should go to the address above.
2. Our principles
- Minimisation. We collect only what we need to keep your place in line, create an account, and run the site.
- Transparency. We explain why we hold data and who receives it.
- Control. You can withdraw marketing and analytics consent and ask us to delete your data.
3. What data we collect
3.1 Waitlist and account
| Data | Purpose | Required? |
|---|---|---|
| Email address | Waitlist, account activation, transactional mail | Yes |
| Consents (privacy policy, terms, marketing, analytics) with version and time | Proof of consent, mail, analytics after you accept | Privacy and terms — yes; marketing and analytics — no |
| Language preference | Interface and messages | Yes (detected or chosen) |
| Session identifier | Keep the browser session and attach consents to the account after activation | Yes (technical) |
An account is not created when you type your email. We first send an activation message. The account is created after you confirm the address.
3.2 Data we do not collect yet
At the waitlist stage we do not collect portfolios, recordings, Golden Rating results, or payments. When rating and the League launch, we will update this policy before we process that data.
3.3 Technical data
The server and browser may store IP address, browser type, request time, and basic error logs as needed for security and to keep the site running.
4. Legal basis for processing
| Purpose | GDPR basis |
|---|---|
| Waitlist sign-up and account creation after email confirmation | Art. 6(1)(b) — contract / steps prior to contract |
| Activation mail and account operation messages | Art. 6(1)(b) and (f) — legitimate interest (running the service) |
| Marketing about the League and Early Ticket | Art. 6(1)(a) — consent (you may withdraw it) |
| Site-usage analytics | Art. 6(1)(a) — consent |
| Security, abuse prevention, legal duties | Art. 6(1)© and (f) |
5. How we use data
- we keep your waitlist place and bind consents to the session, then to the account after activation,
- we send an activation email (code and link),
- after confirmation we create a user account,
- if you consent — we tell you when rating, the League, and Early Ticket open,
- without analytics consent — PostHog (EU) records anonymous, cookieless usage events that are not linked to a person profile,
- if you consent to analytics — PostHog may use cookies and we may link usage to your account,
- we reply to mail sent to waitlist@artisticleague.org.
We do not sell data. Early Ticket, a place in line, and status badges are not equity, a share, or a token, and we do not need financial data from you at this stage.
6. Who we share data with
Only processors we need to run the service may handle data:
- hosting and server infrastructure,
- email delivery (activation and transactional mail),
- PostHog (EU region,
eu.i.posthog.com) for product analytics: cookieless and anonymous until you accept; cookies and account linking after you accept.
They act on our instructions, limited to the service we asked for.
7. Transfers outside the EEA
The main place of processing is Poland / the European Economic Area. If a vendor (for example mail or hosting) processes data outside the EEA, we use GDPR tools: an adequacy decision or standard contractual clauses.
8. Retention
| Data | Period |
|---|---|
| Waitlist email and account | Until you ask us to delete the account, or until the waitlist / account is no longer needed for the League |
| Consents | For the life of the account and longer if we must prove consent |
| Technical logs | Typically up to 90 days, unless security or a dispute requires longer |
| Analytics (PostHog, EU) | Cookieless anonymous events until you accept; cookies and identified profile only after consent; after withdrawal we stop cookie-based collection |
9. Your rights
You have the right of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent (withdrawal does not affect processing that was lawful before).
To use these rights, write to waitlist@artisticleague.org. We respond within 30 days.
10. Cookies and analytics
We use necessary cookies / session storage to keep you signed in, remember language, and store consents.
We use PostHog hosted in the EU (https://eu.i.posthog.com). Without analytics consent, PostHog runs in cookieless anonymous mode: events are not linked to a person profile and we do not set PostHog cookies. After you accept, PostHog may use cookies and we may link events to your account. Rejecting analytics does not block waitlist sign-up.
The banner lets you accept, reject, or open settings.
11. Children’s privacy
The service is for people who can enter a contract (generally 18 years). We do not knowingly collect children’s data. If you think a child gave us an email, write to waitlist@artisticleague.org and we will delete it.
12. Security
We use HTTPS, restricted server access, and hashing / tokens where authentication requires it. No system is perfectly secure; we will notify you of an incident that may affect you as required by GDPR.
13. Extra notes (EEA, UK, California)
We are a Polish company. People in the EEA and the UK have the rights in section 9. California residents (CCPA/CPRA) may ask what we hold and to delete it — we do not sell personal information and we do not share it for money.
14. Complaints
You may complain to the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl. Please write to us first — we can usually resolve the matter faster.
15. Changes to this policy
We may update this document. The date at the top always shows the current version. A material change of purpose may require a new consent.
16. Contact
Email: waitlist@artisticleague.org
Postal address:
MAGOWIE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
DRUŻYKOWA 15
42-445 DRUŻYKOWA, Poland
NIP: 6492323159, KRS: 0000919853
We aim to reply within 5 business days and to handle rights requests within 30 days.
This Privacy Policy is written with GDPR in mind. It is not personal legal advice.