1. GENERAL PROVISIONS

1.1. The Organizer of the Blanche Club is Blanche sp. z o.o. based in Warsaw at Rondo Daszynskiego 1, 00-843 Warsaw, registered in the District Court for the City of Warsaw, XII Economic Department of the National Court Register under the number KRS 0001084387, NIP 7011186526, REGON 527566417, whose share capital is PLN 5,000 paid in full (hereinafter the “Organizer“).

1.2. This Policy is addressed both to persons interested in joining the Blanche Club as well as to persons whose candidacy has been accepted by the Organizer (hereinafter referred to as “Members“), and who have signed an appropriate membership agreement with the Organizer.

2. BLANCHE CLUB MOBILE APPLICATION

2.1. In order to provide seamless ticketing services, we collect the following types of information:

a) Identity & Contact Data: Your name, email address, and phone number provided during registration or checkout.

b) Transaction Data: Details about the tickets you purchase, including purchase amounts and transaction dates.

c) Technical Data: Information about your device (IP address, browser type) and how you interact with our app to help us troubleshoot and improve the experience.

2.2. To process payments in the Blanche Club App, we use the services of Stripe (Stripe Payments Europe, Ltd.). Stripe processes data necessary to complete transactions, in particular: identification and contact details, order-related data, and payment and transaction information. Payment card data is processed directly by Stripe and is not stored by Blanche Club. The legal basis for processing is the necessity to perform the contract (Article 6(1)(b) GDPR) and, with regard to accounting obligations, compliance with a legal obligation (Article 6(1)(c) GDPR). Stripe may transfer data outside the European Economic Area in accordance with applicable laws.

2.3. To automate selected operational processes and system integrations, we may use Zapier (Zapier Inc.). As part of such automation, Zapier may process selected user data to the extent necessary to perform a given operation (e.g., name and surname, email address, membership-related information, or transaction details). The legal basis for processing is the necessity to perform the contract (Article 6(1)(b) GDPR) or the controller’s legitimate interest (Article 6(1)(f) GDPR). Zapier may transfer data outside the European Economic Area in accordance with applicable laws.

3. INFORMATION ABOUT THE PROCESSING OF PERSONAL DATA

3.1. The Organizer is the controller of personal data processed for the purpose of providing the services of Blanche Club and for marketing activities.

3.2. The Organizer processes your personal data to the extent that it was obtained directly from the Member in connection with the execution of the Membership Agreement, acceptance of the Terms and Conditions or participation in Blanche Club events. These include, in particular: first name, last name, contact information, including email address and telephone number (or others as the case may be), and history of participation in Blanche Club events.

3.3. Provision of data is voluntary, but necessary to execute the Membership Agreement and enable Members to participate in events organized by Blanche Club.

3.4. We process your personal data for the following purposes:

a) provision by the Organizer of services related to Blanche Club;

b) accountants in terms of issuing invoices, processing transfers and archiving documents in accordance with applicable tax and accounting laws;

c) to improve the quality of the Organizer’s website and for analytical purposes (i.e., to better tailor services to Members’ needs, optimize customer service processes, etc.);

d) direct marketing of our services or products, including: (i) presenting offers of our own or Blanche Club Partners’ products or services to Members for the purpose of selling them using telecommunications terminal equipment (if you agree); (ii) sending commercial information to Members via email;

e) to respond to your inquiries via email or contact form, including handling complaints and responding to inquiries regarding our processing of your personal data;

f) to assert or defend against possible claims that may arise in the future in connection with Blanche Club Membership.

3.5. Personal data is processed on the basis of:

a) contract to which the Member becomes a party upon acceptance of the Terms and Conditions or signing of the Membership Agreement;

b) legitimate interest of the Organizer i.e.: conduct direct marketing of its own products and services; investigation and defense against claims; to improve the quality and security of the Website and the services provided through it.

c) legislation, to the extent that the Organizer is required to process your data for accounting, bookkeeping and tax purposes;

d) consent, to the extent that your data is transferred to Partners of Blanche Club, co-organizing events.

3.6. To the extent that the processing of data for marketing purposes is not permitted based on our legitimate interest, we may collect additional consents to process personal data for the aforementioned purpose.

3.7. Regardless of the legal basis for data processing under the GDPR, we also collect consent for marketing communications via electronic communication means (required by the Electronic Services Act) and consent for telephone contact for marketing purposes (required by the Telecommunications Law).

3.8. To the extent that the Organizer’s Partners conduct marketing activities promoting their products or services on their own (without the intermediation of the Organizer), the Organizer’s Partners are solely responsible for the legality of the marketing activities conducted, as well as for the content of the messages sent. Any comments or complaints in this regard should be addressed directly to the Organizer Partner responsible for the specific marketing activities.

3.9. Any consent given by the Member is fully voluntary and may be withdrawn by the Member at any time, which will not affect the legality of data processing carried out prior to the withdrawal of consent.

3.10. Members’ personal data is processed only for as long as it is necessary for us for the purposes for which it was collected. In determining how long personal data is retained, depending on the category of data, we take into account the following criteria, among others: (i) limitation periods for possible business or consumer claims (3 to 6 years) (ii) mandatory retention periods under accounting and tax law (5 years from the end of the calendar year in which the tax or accounting obligation arose).

3.11. We entrust the processing of personal data to entities that, when providing services to us, process personal data on our behalf and solely based on our instructions and guidelines (data processors or otherwise “processors”). In particular, we use data processors that are hosting providers, selected by us with due diligence, who store data on secure servers located within the EU, and other carefully selected entities that provide maintenance and IT services, accounting or bookkeeping services, customer service or other legal or advisory services.

3.12. We do not share personal data with third parties, other than Organizer Partners, co-organizing events in which the Member participates. In that case, personal data is transferred on the basis of the legitimate interest of the Organizer and the Organizer’s Partners, which is to enable offering the services of the Organizer’s Partners to the Blanche Club Members, which is the key object of the Blanche Club activity. The legal basis for the transfer of personal data to the Organizer’s Partners is also the contract (these Regulations), concluded between the Member and the Organizer, on the basis of which the Organizer undertakes to enable Members to access services and luxury goods offered by the Organizer’s Partners.

3.13. There is also a possibility that we will be required to share your personal data with the relevant state authorities (in particular, the police or the prosecutor’s office) if we receive an appropriate request from them, provided that there is a legal basis for sharing your personal data with them (e.g., a court order).

3.14. The Member has the right to access the data and obtain a copy of the data we process about him/her and, among other things, the following information: for what purposes we process the data, to whom we transfer the data, how long we process the data, and what rights the Member has. All this information is contained in these Terms and Conditions. In case of any doubt, the Member may exercise his/her right of access by contacting us at: members@blanche.club. All information will be provided within a maximum period of 30 days. The right to obtain a copy of the data may be restricted under certain circumstances if it would adversely affect the rights and freedoms of others.

3.15. If a Member finds that his/her data has become outdated or is for any other reason incorrect, he/she has the right to request that we correct it. In such a case, please contact us and we will promptly make the appropriate changes.

3.16. A Member has the right to request that we delete his/her data if, among other things, it is no longer necessary for us for the purposes for which it was collected, or if he/she objects to its processing, or withdraws consent. In this case, we will delete the data immediately, no later than 30 days after the request. We will confirm the deletion of the data by email within the aforementioned period. In legally justified circumstances (when it results from an obligation imposed by law or is necessary for the investigation or defense against claims), we will process the data despite the request for deletion.

3.17. If we process data on the basis of a legitimate interest (in particular for marketing purposes), the Member has the right to object to the processing. As with other rights, we will respond to the request within a maximum period of 30 days.

3.18. In addition, under the DPA, a Member has the right to request a restriction of processing (e.g.: if the Member questions the lawfulness of the processing we carry out), as well as the right to transfer data to another controller. If you have any comments about how we process your data, we encourage you to contact us at: members@blanche.club.

3.19. The member also has the right to file a complaint with the President of the Office for Personal Data Protection.

4. FINAL PROVISIONS

4.1. These Regulations shall be governed by the laws of Poland. Any disputes or conflicts that may arise out of or in connection with these Regulations shall be resolved amicably by the parties. If the Member is acting as a consumer, the Member has the option of using the European Commission’s Online Dispute Resolution system, available at https://ec.europa.eu/consumers/odr/main/index.cfm?event=main.home.show&lng=PL. For more information, please visit the website of the Office of Competition and Consumer Protection. At the same time, we would like to inform you that the Member is entitled to file a complaint with either the Municipal Consumer Ombudsman or the District Consumer Ombudsman, whose details can be found at: https://uokik.gov.pl/pomoc.php.

4.2. Any disputes arising in connection with these Regulations shall be considered by the competent common courts of the Republic of Poland.

4.5. In the event of any discrepancy between the language versions, the Polish version of the Privacy Policy shall be decisive.

Last updated on 26/01/2026.