Retail4Earth is a research initiative led by AGH University of Krakow focused on sustainable retail. We act as the data controller for personal data processed via this website (https://retail4earth.agh.edu.pl).
Contact for privacy matters:
Email: retail4e@agh.edu.pl
Postal address: Wydział Zarządzania, Akademia Górniczo-Hutnicza, ul. Gramatyka 10, 30-067 Kraków, Poland
This policy explains what we collect, why, how long we keep it, who we share it with, and your rights.
Contact for privacy matters:
Email: retail4e@agh.edu.pl
Postal address: Wydział Zarządzania, Akademia Górniczo-Hutnicza, ul. Gramatyka 10, 30-067 Kraków, Poland
This policy explains what we collect, why, how long we keep it, who we share it with, and your rights.
We apply data minimisation.
Categories of data:
- Website usage data: IP address (shortened/anonymised where possible), device/browser info, pages viewed, timestamps, referrers, error logs.
- Cookie and consent preferences: your choices for optional cookies.
- Contact form data: name, email, organisation, message content and metadata necessary to respond.
- Event participation: registration details (e.g., name, email, affiliation, role), attendance records where relevant.
- Publications access: basic download logs to ensure availability and impact reporting (aggregate statistics only when feasible).
- Communications: emails you send us and our replies.
Categories of data:
- Website usage data: IP address (shortened/anonymised where possible), device/browser info, pages viewed, timestamps, referrers, error logs.
- Cookie and consent preferences: your choices for optional cookies.
- Contact form data: name, email, organisation, message content and metadata necessary to respond.
- Event participation: registration details (e.g., name, email, affiliation, role), attendance records where relevant.
- Publications access: basic download logs to ensure availability and impact reporting (aggregate statistics only when feasible).
- Communications: emails you send us and our replies.
We do not sell your personal data. We share data only as needed with:
- Service providers (processors): hosting, security, and data analytics tools operating under written contracts and instructions.
- Academic and project partners: when necessary to coordinate events, research dissemination, or impact reporting.
International transfers: If data is transferred outside the EEA, we implement safeguards such as Standard Contractual Clauses and, where relevant, supplementary measures. We assess local laws and minimise data transferred.
- Service providers (processors): hosting, security, and data analytics tools operating under written contracts and instructions.
- Academic and project partners: when necessary to coordinate events, research dissemination, or impact reporting.
International transfers: If data is transferred outside the EEA, we implement safeguards such as Standard Contractual Clauses and, where relevant, supplementary measures. We assess local laws and minimise data transferred.
Retention:
- Contact enquiries: up to 12 months after resolution, unless a longer period is required for accountability.
- Event records: up to 24 months after the event unless legal or funding rules require longer.
- Technical logs and security data: typically 90 days, unless needed to investigate incidents.
- Analytics and cookies: per cookie lifetime; see the Cookies page for details.
Security: We use layered protections (encryption in transit, hardened hosting, access controls, least-privilege, regular updates, and backups). We train staff and maintain incident response procedures. If legally required, we will notify you and authorities of certain breaches.
- Contact enquiries: up to 12 months after resolution, unless a longer period is required for accountability.
- Event records: up to 24 months after the event unless legal or funding rules require longer.
- Technical logs and security data: typically 90 days, unless needed to investigate incidents.
- Analytics and cookies: per cookie lifetime; see the Cookies page for details.
Security: We use layered protections (encryption in transit, hardened hosting, access controls, least-privilege, regular updates, and backups). We train staff and maintain incident response procedures. If legally required, we will notify you and authorities of certain breaches.
Under GDPR, you can request: access, rectification, erasure, restriction, data portability, and objection to processing (including profiling where applicable). You can also withdraw consent at any time without affecting prior lawful processing.
To exercise your rights, email retail4e@agh.edu.pl. We may verify your identity to protect your data. We aim to respond within one month, extendable by two months for complex requests.
To exercise your rights, email retail4e@agh.edu.pl. We may verify your identity to protect your data. We aim to respond within one month, extendable by two months for complex requests.
We use strictly necessary cookies to run the site and, with your consent, optional analytics to improve content and accessibility. You can change or withdraw your choices at any time via the cookie banner or browser settings.
For details on cookie categories, retention, and vendors, see the Cookies page.
For details on cookie categories, retention, and vendors, see the Cookies page.
If you have questions or requests about your personal data, contact us at retail4e@agh.edu.pl or by post at the address listed above. You can also use the form on our Contact page.
You have the right to lodge a complaint with a data protection authority. In Poland, this is the President of the Personal Data Protection Office (UODO). You may also contact your local authority if you reside in another EEA country.
You have the right to lodge a complaint with a data protection authority. In Poland, this is the President of the Personal Data Protection Office (UODO). You may also contact your local authority if you reside in another EEA country.