Privacy Policy

The administrator of your personal data is Forklore Sp. z o.o., address: Głogowska 251A, 60-111 Poznań, tax number: 7792508099, REGON 384042475.

The administrator of your personal data is Forklore Sp. z o.o., address: Głogowska 251A, 60-111 Poznań, tax number: 7792508099, REGON 384042475.

The purposes, legal basis and period of personal data processing are indicated separately for each purpose of data processing (see description of individual purposes of personal data processing below).

Permissions. The GDPR grants you the following potential rights related to the processing of your personal data:

  1. the right to access your data and receive a copy of it,
  2. the right to rectify (amend) your data,
  3. the right to delete data (if you think there are no grounds for us to process your data, you can request that we delete it),
  4. The right to limit data processing (you can request that we limit the processing of data only to their storage or performance of activities agreed with you, if in your opinion we have incorrect data or we process it unreasonably),
  5. The right to object to data processing (you have the right to object to data processing on the basis of a legitimate interest; you should indicate the specific situation that you believe justifies our cessation of the objection processing. We will stop processing your data for these purposes, unless we show that the grounds for our data processing prevail over your rights or that your data is necessary for us to determine, assert or defend claims),
  6. the right to transfer data (you have the right to receive from us in a structured, commonly used machine-readable format personal data that you provided to us under a contract or your consent; you can order us to send this data directly to another entity),
  7. the right to lodge a complaint with the supervisory body (if you find that we are processing data unlawfully, you can file a complaint to the President of the Office for Personal Data Protection or other competent supervisory body).

The rules related to the implementation of the abovementioned rights are described in detail in art. 16 – 21 GDPR. We encourage you to read these regulations. For our part, we consider it necessary to explain to you that the above-mentioned rights are not absolute and you will not be entitled to all the processing of your personal data.

We emphasize that you always have one of the rights indicated above – if you believe that during the processing of your personal data we have violated the provisions on the protection of personal data, you have the opportunity to lodge a complaint to the supervisory body (the President of the Office for Personal Data Protection).

You can also always ask us to provide you with information about what data we have about you and for what purposes we process it. All you have to do is send a message to contact@forkloretour.com.

However, we have made every effort to ensure that the information you are interested in is comprehensively presented in this privacy policy. The e-mail address provided above can also be used if you have any questions related to the processing of your personal data.

Security. We ensure the confidentiality of all personal data provided to us. We ensure that appropriate security measures and personal data protection required by the provisions on the protection of personal data are taken. Personal data is collected with due diligence and adequately protected against access by unauthorized persons.

Data recipients. Your personal data may be processed by entities whose services we use and whose services involve or may involve the processing of personal data. These are in particular the following entities:

1.host – your personal data is stored on the server,

2. email service provider – your personal data is processed as part of electronic mail,

3. cloud software providers, such as mailing, invoice, accounting and CRM systems – your personal data is processed as part of the software,

4. virtual cloud service provider – files containing your personal data may be stored in the cloud,

5. accounting office – the office processes your personal data contained on invoices and other accounting documents,

6. law firm – the law firm may gain access to your personal data if it is necessary to provide legal services to us,

7. entity providing website maintenance services – this entity may access your data in connection with technical work in those areas in which data is processed,

8. entity providing marketing services – this entity may gain access to your personal data to the extent necessary to implement the marketing activities entrusted to it,

9. other subcontractors – we work with various subcontractors who may have access to your personal data if they provide services to the extent related to such access.

Your personal data may also be transferred to tax offices to the extent necessary to fulfill tax, accounting and accounting obligations. In particular, all declarations, reports, reports and other accounting documents that contain your personal data.

In addition, if necessary, your personal data may be disclosed to entities, bodies or institutions authorized to gain access to data on the basis of legal provisions, such as police, security services, courts, prosecutors.

Transfer of personal data to third countries. We transfer your personal data to third countries in connection with the use of tools that store personal data on servers located in third countries, in particular in the USA. The suppliers of these tools guarantee an adequate level of personal data protection through appropriate compliance mechanisms provided for by the GDPR, in particular by joining the Privacy Shield program or using standard contractual clauses.

Personal data is stored on servers located in third countries as part of the following tools:

MailChimp mailing system, whose provider is Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA – regarding your name and email address provided when subscribing to the newsletter,

Google services as part of the G-Suite package, whose provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – in the scope of all data processed as part of Google services, including those data that are contained in files synchronized with Google Drive.

Both Rocket Science Group LLC and Google Ireland Limited provide an adequate level of protection of personal data through the use of compliance mechanisms provided by the GDPR, in particular by joining the Privacy Shield program. Below are links to confirmations of participation in the Privacy Shield program, where you can read information about the processing of personal data by these entities.

• Google: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI,

• MailChimp: https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG.

Profiling and behavioral advertising. We do not make decisions based on automated processing, including profiling, that would have legal effects on you or similarly significantly affect you. Yes, we use tools that can take specific actions depending on the information collected as part of the tracking mechanisms, but we believe that these actions do not have a significant impact on you, because they do not differentiate your situation as a customer, they do not affect the terms of the contract that you can conclude with us.

By using certain tools, we can, for example, direct to you personalized ads based on previous actions taken by you on our site or suggest products that may interest you. We are talking here about behavioral advertising. We encourage you to deepen your knowledge of behavioral advertising, in particular regarding privacy issues. Detailed information, along with the ability to manage settings for behavioral advertising, can be found here: http://www.youronlinechoices.com.

We emphasize that as part of the tools we use, we do not have access to information that would allow your identification. The information we are talking about here is, in particular:

• information about the operating system and the web browser you are using,

• viewed bystander,

• time spent on the site,

• transitions between individual subpages,

• the source from which you go to our site,

• the age range you’re in,

• your gender,

• Your approximate location limited to the city,

• Your interests determined on the basis of online activity.

We do not combine the information indicated above with your personal data, which are in our databases. This information is anonymous and does not allow us to identify you. This information is stored on the servers of the suppliers of individual tools, and these servers can most often be located all over the world.

Purposes and activities of personal data processing

Orders. When placing an order, i.e. when buying access to our service (booking a trip or event), you must provide the data necessary to complete the order, such as name, e-mail address, telephone number, country of origin. Providing data is voluntary, but necessary to place an order. In addition, we recommend that you provide nutrition restrictions.

The data provided to us in connection with the order is processed in order to perform the contract concluded by submitting the order (Article 6 (1) (b) of the GDPR), issuing an invoice (Article 6 (1) (c) of the GDPR), including the invoice in the documentation accounting (art.6 par.1 lit.c GDPR) and for archival and statistical purposes (art.6 par.1 lit.f GDPR).

Transaction data, in that personal data, can be transferred for the benefit of PayLane Sp. z o.o. located in Gdańsk at Norwida 4, zip code: 80-280, KRS: 0000227278, on the terms that it will beneficial on in service connected to order payments. A client has the right to see the content of his data and any corrections made to it.

Data on orders will be processed for the time necessary to complete the order, and then until the expiry of the limitation period for claims under the contract. In addition, after this deadline, the data may still be processed by us for statistical archival purposes, in particular to identify a returning customer. Also remember that we have an obligation to store invoices with your personal data for a period of 5 years from the end of the tax year in which the tax obligation arose.

In the case of order data, you cannot rectify this data after the order has been processed. You also can not object to data processing and demand the deletion of data until the expiry of the limitation period for claims under the contract. Similarly, you cannot oppose the processing of data and demand the deletion of data contained in invoices. After the expiry of the limitation period for claims arising from the concluded contract, you may object to the processing of your data by us for statistical purposes, as well as demand the removal of your data from the database.

Complaints and withdrawal from the contract. If you make a complaint or withdraw from the contract, you provide personal data contained in the content of the complaint or statement of withdrawal from the contract, which includes your name, address, telephone number, e-mail address, bank account number. Providing data is voluntary, but necessary to make a complaint or withdraw from the contract.

The data provided in connection with the submission of a complaint or withdrawal from the contract are used to implement the complaint procedure or the procedure for withdrawal from the contract (art.6 par.1 lit.c GDPR), and then for archival purposes, which is our legitimate interest (art. 6 para. 1 lit.f GDPR).

The data will be processed for the time necessary to complete the complaint or withdrawal procedure. Complaints and statements of withdrawal from the contract may also be archived in order to be able to demonstrate in the future the course of the complaint process or withdrawal from the contract

In the case of data contained in complaints and declarations of withdrawal from the contract, you are not able to rectify this data. You also can not object to data processing and demand the deletion of data until the expiry of the limitation period for claims under the contract. After the expiry of the limitation period for claims arising from the concluded contract, you may, however, object to the processing of your data by us, as well as demand the removal of your data from the database.

Newsletter. By subscribing to the newsletter, you provide us your e-mail address.

Providing an e-mail address is voluntary, but necessary to subscribe to the newsletter.

The data provided to us during the subscription to the newsletter are used to send you the newsletter, and the legal basis for their processing is your consent (art.6 par.1 lit.a GDPR) expressed when subscribing to the newsletter.

You can unsubscribe from the newsletter at any time by clicking on the dedicated link found in each message sent as part of the newsletter or simply by contacting us. Despite unsubscribing to the newsletter, your data will still be stored in our database in order to defend any claims related to sending you the newsletter, in particular for the purpose of demonstrating the fact that you consented to receiving the newsletter and the moment of its withdrawal, which is our legitimate interest, referred to in art. 6 clause 1 lit. f GDPR.

You can correct your data saved in the newsletter database at any time. In a situation where you object to the processing of your personal data, while demanding the removal of your data from our database, we will be forced to inform you that due to our legitimate interest referred to in the previous paragraph, we will not delete your data from the database. Deleting such data would prevent us from demonstrating, if necessary, that you have consented to receive the newsletter in the past.

The mailing system we use tracks your actions taken in relation to messages sent to you. Therefore, we have information about which messages you opened, under which messages you clicked links, etc.

Comments. By adding a comment on our site, you use the Disqus system in this regard. Using the Disqus system is based on the Disqus regulations, which you accept as its user. As part of the Disqus system, we do not have access to your personal data, with the exception of your nickname defined in the Disqus system and image if it is available as part of your user account in the Disqus system. The Disqus system provider is an independent administrator of your personal data processed as part of the Disqus system.

Contact. By contacting us, you naturally provide us with your personal data contained in the content of the correspondence, in particular the email address and name. Providing data is voluntary, but necessary to make contact.

In this case, your data is processed in order to contact you, and the basis for processing is art. 6 clause 1 lit. f GDPR, i.e. our legitimate interest. The legal basis for processing after the contact is also our justified purpose in the form of archiving correspondence for internal needs (Article 6 paragraph 1 letter f of the GDPR).

The content of correspondence may be archived and we are not able to clearly determine when it will be deleted. You have the right to request the history of correspondence with you (if it has been archived), as well as to request its removal, unless its archiving is justified due to our overriding interests, e.g. defense against potential claims on your part.

Cookies and other tracking technologies. Our website, like almost all other websites, uses cookies.

Cookies are small text information stored on your end device (e.g. computer, tablet, smartphone) that can be read by our ICT system (own cookies) or the ICT system of third parties (third party cookies).

Some of the cookies we use are deleted after the end of the web browser session, i.e. after closing it (so-called session cookies). Other cookies are stored on your end device and allow us to recognize your browser the next time you visit the site (persistent cookies).

If you want to learn more about cookies as such, you can read, for example, this material: https://pl.wikipedia.org/wiki/HTTP_cookie.

However, below you will find detailed information about cookies functioning as part of our website.

Consent to cookies. During your first visit to the website, you are shown information on the use of cookies with a question about consent to the use of these files.

Thanks to a special tool you have the ability to manage cookies from the page, disabling individual cookies.

In addition, you can always change your cookie settings from your browser or delete cookies at all. Browsers manage cookie settings in different ways. In the auxiliary menu of the web browser you will find explanations about changing cookie settings.

You can also manage cookie settings by installing special add-ons that allow you to control cookies, such as Ghostery (https://www.ghostery.com).

Remember that disabling or limiting the use of cookies may cause difficulties in using our website, as well as from many other websites that use cookies.

Own cookies. We use our own cookies to ensure the proper functioning of the website. Own cookies also store information about your consent to the use of cookies and information about the cookie settings you have defined on our site. Own cookies are also used by the script responsible for the mechanism of recovering abandoned baskets. This means that cookies may contain information about the contents of your basket, recently viewed products, etc.

Third party cookies. Our website, like most modern websites, uses functions provided by third parties, which involves the use of cookies from third parties. The use of this type of cookies is described below.

Google Analytics. We use the Google Analytics tool provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. We implement activities in this area, based on our legitimate interest, consisting in the production of statistics and their analysis in order to optimize our websites.

Google Analytics automatically collects information about your use of our site. The information collected in this way is usually transmitted to a Google server in the United States and stored there.

Due to the IP anonymization that we have activated, your IP address is shortened before forwarding. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and shortened there. The anonymized IP address provided by your browser as part of Google Analytics is generally not combined with other Google data.

We emphasize that as part of Google Analytics, we do not collect any data that would allow you to be identified. Therefore, the data collected as part of Google Analytics is not personal data. The information we have access to as part of Google Analytics is, in particular:

● information about the operating system and the web browser you are using,

● subpages that you browse as part of our website,

● time spent on our website and its subpages,

● transitions between individual subpages as part of our website,

● source from which you go to our website.

In addition, we use the following Advertising Functions as part of Google Analytics:

● demographic and interest reports,

● Remarketing

● ad reporting functions, user-ID.

As part of Advertising Features, we also do not collect personal data. The information we have access to is in particular:

● the age range you’re in,

● your gender,

● Your approximate location limited to the city,

● Your interests based on your web activity.

In order to use Google Analytics, we have implemented a special Google Analytics tracking code in the code of our website. The tracking code uses Google LLC cookies for the Google Analytics service. From the level of our website, using the mechanism for managing cookies, you can disable the Google Analytics tracking code. You can also block Google Analytics tracking code at any time by installing the browser add-on provided by Google: https://tools.google.com/dlpage/gaoptout.

Google Analytics and Google Analytics 360 services have obtained the certification of the independent security standard ISO 27001. ISO 27001 is one of the most recognized standards in the world and confirms the fulfillment of relevant requirements by systems supporting Google Analytics and Google Analytics 360.

If you are interested in details related to data processing within Google Analytics, we encourage you to read the explanations prepared by Google: https://support.google.com/analytics/answer/6004245.

Google Ads. We use the Google Ads advertising program operated by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA to run advertising campaigns, including remarketing. We implement activities in this area based on our legitimate interest, consisting in marketing our own products or services.

When you visit our website, a Google cookie remarketing file is automatically left on your device, which, with the help of a pseudonymous identifier (ID) and based on the pages you visit, allows you to display interest-based advertising.

Further processing of information only takes place if you have consented to Google to combine the browsing history and use of the application with your account and to use the information from your Google account to personalize the ads that are displayed on websites. If in this case you will be logged in when visiting my website on Google, Google will use your data together with Google Analytics data to create and define lists of target groups for remarketing on different devices. To this end, Google temporarily combines the information collected with Google Analytics data to create target groups.

We emphasize that we, when using Google Ads, do not collect any data that would allow your identification. The possible compilation of data in such a way that they acquire the nature of personal data can be made by Google, but in this respect we are no longer responsible, because Google performs these activities on the basis of a contract concluded with you as a user of Google services.

We, using Google Ads, are only able to define the target groups to which we would like our ads to reach. On this basis, Google decides when and how it will present our advertisement to you.

In order to use Google Ads, we have implemented a special Google Ads conversion pixel in the code of our website. The pixel uses Google LLC cookies for the Google Ads service. From our site, using the mechanism for managing cookies, you can disable these cookies. You can manage your ad settings directly on Google: https://adssettings.google.com/.

If you are interested in details related to data processing as part of Google Ads, we encourage you to read the Google privacy policy: https://policies.google.com/privacy.

Facebook Ads and Insights. We use marketing and analytical tools available as part of Facebook. The provider of these tools is Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA. We implement activities in this area based on our legitimate interest, consisting in marketing our own products or services as well as analysis and statistics.

In order to target you personalized ads in terms of your behavior on our website, we have implemented Facebook Pixel as part of our website, which automatically collects information about your use of our website in terms of pages viewed. The information collected in this way is usually transmitted to a Facebook server in the United States and stored there.

The information collected as part of Facebook Pixel is anonymous, i.e. it does not allow us to identify you. We only know what actions you have taken on our site. We can also check your age range, gender, where you are connecting to the Internet. Facebook Insights can also provide us with more information about you, but it is never information that would allow us to identify you.

However, we inform you that Facebook may combine the information collected with other information about you collected as part of your use of Facebook and use for its own purposes, including marketing. Such Facebook actions are no longer dependent on us, and you can search for information directly in Facebook’s privacy policy: https://www.facebook.com/privacy/explanation. You can also manage your privacy settings from your Facebook account. Here you will find useful information in this regard: https://www.facebook.com/help/568137493302217.

From our site, using the mechanism for managing cookies, you can disable Facebook Pixel.

Content from external websites. We embed content from external websites, in particular videos from YouTube. Therefore, Google LLC cookies related to the YouTube service are used, including DoubleClick cookies.

When playing a video or reading other embedded material, Google receives information about it, even if you do not have a profile with a given service provider or are not currently logged in. This information (along with your IP address) is sent by your browser directly to the server of the given service provider (some servers are located in the USA) and stored there.

If you have logged in to the website of a given service provider, then the service provider will be able to directly assign a visit to our website to your profile in a given social network. The purpose and scope of data collection and their further processing and use by service providers, as well as the possibility of contact and your rights in this regard and the ability to make settings that protect your privacy are described in the privacy policy of individual service providers.

If you do not want service providers to assign the data collected during video playback or to read other content on our website directly to your profile on a given website, then before visiting our website you must log out of this website. You can also completely prevent the plugins from loading on the page using the appropriate extensions for your browser, e.g. script blocking.

YouTube-related cookies are only loaded when the video is played, so if you do not want this to happen, refrain from watching the video.

Social Tools. Our website uses plugins and other social networking tools provided by social networking sites such as Facebook and Instagram.

By displaying our website containing such a plug-in, your browser will establish a direct connection to the servers of social network administrators (service providers). The content of the plugin is transmitted by the respective service provider directly to your browser and integrated with the website. Thanks to this integration, service providers receive information that your browser has viewed our website, even if you do not have a profile with a given service provider or are not currently logged in to it. This information (along with your IP address) is sent by your browser directly to the server of the given service provider (some servers are located in the USA) and stored there.

If you have logged in to one of the social networking sites, then this service provider will be able to directly assign a visit to my site to your profile on the given social networking site.

If you use a given plugin, e.g. by clicking on the “Like” or “Share” button, the relevant information will also be sent directly to the server of the given service provider and stored there.

In addition, this information will be published on the respective social network and will appear to people added as your contacts. The purpose and scope of data collection and their further processing and use by service providers, as well as the possibility of contact and your rights in this regard and the ability to make settings that protect your privacy are described in the privacy policy of individual service providers.

● Facebook – https://www.facebook.com/legal/FB_Work_Privacy,

● Instagram – https://help.instagram.com/155833707900388.

If you do not want social networking sites to match the data collected during visits to our website directly to your profile on a given website, then before visiting our website you must log out of this website. You can also completely prevent the plugins from loading on the page using the appropriate extensions for your browser, e.g. script blocking.

Server logs. Using the website involves sending queries to the server on which the website is stored. Each query directed to the server is saved in the server’s logs.

Logs include, among others Your IP address, server date and time, information about the web browser and operating system you use. Logs are saved and stored on the server.

The data saved in the server logs are not associated with specific people using the site and are not used by us to identify you.

Server logs are only auxiliary material used to administer the site, and their content is not disclosed to anyone except those authorized to administer the server.

The purposes, legal basis and period of personal data processing are indicated separately for each purpose of data processing (see description of individual purposes of personal data processing below).

Permissions. The GDPR grants you the following potential rights related to the processing of your personal data:

  1. the right to access your data and receive a copy of it,
  2. the right to rectify (amend) your data,
  3. the right to delete data (if you think there are no grounds for us to process your data, you can request that we delete it),
  4. The right to limit data processing (you can request that we limit the processing of data only to their storage or performance of activities agreed with you, if in your opinion we have incorrect data or we process it unreasonably),
  5. The right to object to data processing (you have the right to object to data processing on the basis of a legitimate interest; you should indicate the specific situation that you believe justifies our cessation of the objection processing. We will stop processing your data for these purposes, unless we show that the grounds for our data processing prevail over your rights or that your data is necessary for us to determine, assert or defend claims),
  6. the right to transfer data (you have the right to receive from us in a structured, commonly used machine-readable format personal data that you provided to us under a contract or your consent; you can order us to send this data directly to another entity),
  7. the right to lodge a complaint with the supervisory body (if you find that we are processing data unlawfully, you can file a complaint to the President of the Office for Personal Data Protection or other competent supervisory body).

The rules related to the implementation of the abovementioned rights are described in detail in art. 16 – 21 GDPR. We encourage you to read these regulations. For our part, we consider it necessary to explain to you that the above-mentioned rights are not absolute and you will not be entitled to all the processing of your personal data.

We emphasize that you always have one of the rights indicated above – if you believe that during the processing of your personal data we have violated the provisions on the protection of personal data, you have the opportunity to lodge a complaint to the supervisory body (the President of the Office for Personal Data Protection).

You can also always ask us to provide you with information about what data we have about you and for what purposes we process it. All you have to do is send a message to contact@forkloretour.com.

However, we have made every effort to ensure that the information you are interested in is comprehensively presented in this privacy policy. The e-mail address provided above can also be used if you have any questions related to the processing of your personal data.

Security. We ensure the confidentiality of all personal data provided to us. We ensure that appropriate security measures and personal data protection required by the provisions on the protection of personal data are taken. Personal data is collected with due diligence and adequately protected against access by unauthorized persons.

Data recipients. Your personal data may be processed by entities whose services we use and whose services involve or may involve the processing of personal data. These are in particular the following entities:

1.host – your personal data is stored on the server,

2. email service provider – your personal data is processed as part of electronic mail,

3. cloud software providers, such as mailing, invoice, accounting and CRM systems – your personal data is processed as part of the software,

4. virtual cloud service provider – files containing your personal data may be stored in the cloud,

5. accounting office – the office processes your personal data contained on invoices and other accounting documents,

6. law firm – the law firm may gain access to your personal data if it is necessary to provide legal services to us,

7. entity providing website maintenance services – this entity may access your data in connection with technical work in those areas in which data is processed,

8. entity providing marketing services – this entity may gain access to your personal data to the extent necessary to implement the marketing activities entrusted to it,

9. other subcontractors – we work with various subcontractors who may have access to your personal data if they provide services to the extent related to such access.

Your personal data may also be transferred to tax offices to the extent necessary to fulfill tax, accounting and accounting obligations. In particular, all declarations, reports, reports and other accounting documents that contain your personal data.

In addition, if necessary, your personal data may be disclosed to entities, bodies or institutions authorized to gain access to data on the basis of legal provisions, such as police, security services, courts, prosecutors.

Transfer of personal data to third countries. We transfer your personal data to third countries in connection with the use of tools that store personal data on servers located in third countries, in particular in the USA. The suppliers of these tools guarantee an adequate level of personal data protection through appropriate compliance mechanisms provided for by the GDPR, in particular by joining the Privacy Shield program or using standard contractual clauses.

Personal data is stored on servers located in third countries as part of the following tools:

MailChimp mailing system, whose provider is Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA – regarding your name and email address provided when subscribing to the newsletter,

Google services as part of the G-Suite package, whose provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – in the scope of all data processed as part of Google services, including those data that are contained in files synchronized with Google Drive.

Both Rocket Science Group LLC and Google Ireland Limited provide an adequate level of protection of personal data through the use of compliance mechanisms provided by the GDPR, in particular by joining the Privacy Shield program. Below are links to confirmations of participation in the Privacy Shield program, where you can read information about the processing of personal data by these entities.

• Google: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI,

• MailChimp: https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG.

Profiling and behavioral advertising. We do not make decisions based on automated processing, including profiling, that would have legal effects on you or similarly significantly affect you. Yes, we use tools that can take specific actions depending on the information collected as part of the tracking mechanisms, but we believe that these actions do not have a significant impact on you, because they do not differentiate your situation as a customer, they do not affect the terms of the contract that you can conclude with us.

By using certain tools, we can, for example, direct to you personalized ads based on previous actions taken by you on our site or suggest products that may interest you. We are talking here about behavioral advertising. We encourage you to deepen your knowledge of behavioral advertising, in particular regarding privacy issues. Detailed information, along with the ability to manage settings for behavioral advertising, can be found here: http://www.youronlinechoices.com.

We emphasize that as part of the tools we use, we do not have access to information that would allow your identification. The information we are talking about here is, in particular:

• information about the operating system and the web browser you are using,

• viewed bystander,

• time spent on the site,

• transitions between individual subpages,

• the source from which you go to our site,

• the age range you’re in,

• your gender,

• Your approximate location limited to the city,

• Your interests determined on the basis of online activity.

We do not combine the information indicated above with your personal data, which are in our databases. This information is anonymous and does not allow us to identify you. This information is stored on the servers of the suppliers of individual tools, and these servers can most often be located all over the world.

Purposes and activities of personal data processing

Orders. When placing an order, i.e. when buying access to our service (booking a trip or event), you must provide the data necessary to complete the order, such as name, e-mail address, telephone number, country of origin. Providing data is voluntary, but necessary to place an order. In addition, we recommend that you provide nutrition restrictions.

The data provided to us in connection with the order is processed in order to perform the contract concluded by submitting the order (Article 6 (1) (b) of the GDPR), issuing an invoice (Article 6 (1) (c) of the GDPR), including the invoice in the documentation accounting (art.6 par.1 lit.c GDPR) and for archival and statistical purposes (art.6 par.1 lit.f GDPR).

Data on orders will be processed for the time necessary to complete the order, and then until the expiry of the limitation period for claims under the contract. In addition, after this deadline, the data may still be processed by us for statistical archival purposes, in particular to identify a returning customer. Also remember that we have an obligation to store invoices with your personal data for a period of 5 years from the end of the tax year in which the tax obligation arose.

In the case of order data, you cannot rectify this data after the order has been processed. You also can not object to data processing and demand the deletion of data until the expiry of the limitation period for claims under the contract. Similarly, you cannot oppose the processing of data and demand the deletion of data contained in invoices. After the expiry of the limitation period for claims arising from the concluded contract, you may object to the processing of your data by us for statistical purposes, as well as demand the removal of your data from the database.

Complaints and withdrawal from the contract. If you make a complaint or withdraw from the contract, you provide personal data contained in the content of the complaint or statement of withdrawal from the contract, which includes your name, address, telephone number, e-mail address, bank account number. Providing data is voluntary, but necessary to make a complaint or withdraw from the contract.

The data provided in connection with the submission of a complaint or withdrawal from the contract are used to implement the complaint procedure or the procedure for withdrawal from the contract (art.6 par.1 lit.c GDPR), and then for archival purposes, which is our legitimate interest (art. 6 para. 1 lit.f GDPR).

The data will be processed for the time necessary to complete the complaint or withdrawal procedure. Complaints and statements of withdrawal from the contract may also be archived in order to be able to demonstrate in the future the course of the complaint process or withdrawal from the contract

In the case of data contained in complaints and declarations of withdrawal from the contract, you are not able to rectify this data. You also can not object to data processing and demand the deletion of data until the expiry of the limitation period for claims under the contract. After the expiry of the limitation period for claims arising from the concluded contract, you may, however, object to the processing of your data by us, as well as demand the removal of your data from the database.

Newsletter. By subscribing to the newsletter, you provide us your e-mail address.

Providing an e-mail address is voluntary, but necessary to subscribe to the newsletter.

The data provided to us during the subscription to the newsletter are used to send you the newsletter, and the legal basis for their processing is your consent (art.6 par.1 lit.a GDPR) expressed when subscribing to the newsletter.

You can unsubscribe from the newsletter at any time by clicking on the dedicated link found in each message sent as part of the newsletter or simply by contacting us. Despite unsubscribing to the newsletter, your data will still be stored in our database in order to defend any claims related to sending you the newsletter, in particular for the purpose of demonstrating the fact that you consented to receiving the newsletter and the moment of its withdrawal, which is our legitimate interest, referred to in art. 6 clause 1 lit. f GDPR.

You can correct your data saved in the newsletter database at any time. In a situation where you object to the processing of your personal data, while demanding the removal of your data from our database, we will be forced to inform you that due to our legitimate interest referred to in the previous paragraph, we will not delete your data from the database. Deleting such data would prevent us from demonstrating, if necessary, that you have consented to receive the newsletter in the past.

The mailing system we use tracks your actions taken in relation to messages sent to you. Therefore, we have information about which messages you opened, under which messages you clicked links, etc.

Comments. By adding a comment on our site, you use the Disqus system in this regard. Using the Disqus system is based on the Disqus regulations, which you accept as its user. As part of the Disqus system, we do not have access to your personal data, with the exception of your nickname defined in the Disqus system and image if it is available as part of your user account in the Disqus system. The Disqus system provider is an independent administrator of your personal data processed as part of the Disqus system.

Contact. By contacting us, you naturally provide us with your personal data contained in the content of the correspondence, in particular the email address and name. Providing data is voluntary, but necessary to make contact.

In this case, your data is processed in order to contact you, and the basis for processing is art. 6 clause 1 lit. f GDPR, i.e. our legitimate interest. The legal basis for processing after the contact is also our justified purpose in the form of archiving correspondence for internal needs (Article 6 paragraph 1 letter f of the GDPR).

The content of correspondence may be archived and we are not able to clearly determine when it will be deleted. You have the right to request the history of correspondence with you (if it has been archived), as well as to request its removal, unless its archiving is justified due to our overriding interests, e.g. defense against potential claims on your part.

Cookies and other tracking technologies. Our website, like almost all other websites, uses cookies.

Cookies are small text information stored on your end device (e.g. computer, tablet, smartphone) that can be read by our ICT system (own cookies) or the ICT system of third parties (third party cookies).

Some of the cookies we use are deleted after the end of the web browser session, i.e. after closing it (so-called session cookies). Other cookies are stored on your end device and allow us to recognize your browser the next time you visit the site (persistent cookies).

If you want to learn more about cookies as such, you can read, for example, this material: https://pl.wikipedia.org/wiki/HTTP_cookie.

However, below you will find detailed information about cookies functioning as part of our website.

Consent to cookies. During your first visit to the website, you are shown information on the use of cookies with a question about consent to the use of these files.

Thanks to a special tool you have the ability to manage cookies from the page, disabling individual cookies.

In addition, you can always change your cookie settings from your browser or delete cookies at all. Browsers manage cookie settings in different ways. In the auxiliary menu of the web browser you will find explanations about changing cookie settings.

You can also manage cookie settings by installing special add-ons that allow you to control cookies, such as Ghostery (https://www.ghostery.com).

Remember that disabling or limiting the use of cookies may cause difficulties in using our website, as well as from many other websites that use cookies.

Own cookies. We use our own cookies to ensure the proper functioning of the website. Own cookies also store information about your consent to the use of cookies and information about the cookie settings you have defined on our site. Own cookies are also used by the script responsible for the mechanism of recovering abandoned baskets. This means that cookies may contain information about the contents of your basket, recently viewed products, etc.

Third party cookies. Our website, like most modern websites, uses functions provided by third parties, which involves the use of cookies from third parties. The use of this type of cookies is described below.

Google Analytics. We use the Google Analytics tool provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. We implement activities in this area, based on our legitimate interest, consisting in the production of statistics and their analysis in order to optimize our websites.

Google Analytics automatically collects information about your use of our site. The information collected in this way is usually transmitted to a Google server in the United States and stored there.

Due to the IP anonymization that we have activated, your IP address is shortened before forwarding. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and shortened there. The anonymized IP address provided by your browser as part of Google Analytics is generally not combined with other Google data.

We emphasize that as part of Google Analytics, we do not collect any data that would allow you to be identified. Therefore, the data collected as part of Google Analytics is not personal data. The information we have access to as part of Google Analytics is, in particular:

● information about the operating system and the web browser you are using,

● subpages that you browse as part of our website,

● time spent on our website and its subpages,

● transitions between individual subpages as part of our website,

● source from which you go to our website.

In addition, we use the following Advertising Functions as part of Google Analytics:

● demographic and interest reports,

● Remarketing

● ad reporting functions, user-ID.

As part of Advertising Features, we also do not collect personal data. The information we have access to is in particular:

● the age range you’re in,

● your gender,

● Your approximate location limited to the city,

● Your interests based on your web activity.

In order to use Google Analytics, we have implemented a special Google Analytics tracking code in the code of our website. The tracking code uses Google LLC cookies for the Google Analytics service. From the level of our website, using the mechanism for managing cookies, you can disable the Google Analytics tracking code. You can also block Google Analytics tracking code at any time by installing the browser add-on provided by Google: https://tools.google.com/dlpage/gaoptout.

Google Analytics and Google Analytics 360 services have obtained the certification of the independent security standard ISO 27001. ISO 27001 is one of the most recognized standards in the world and confirms the fulfillment of relevant requirements by systems supporting Google Analytics and Google Analytics 360.

If you are interested in details related to data processing within Google Analytics, we encourage you to read the explanations prepared by Google: https://support.google.com/analytics/answer/6004245.

Google Ads. We use the Google Ads advertising program operated by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA to run advertising campaigns, including remarketing. We implement activities in this area based on our legitimate interest, consisting in marketing our own products or services.

When you visit our website, a Google cookie remarketing file is automatically left on your device, which, with the help of a pseudonymous identifier (ID) and based on the pages you visit, allows you to display interest-based advertising.

Further processing of information only takes place if you have consented to Google to combine the browsing history and use of the application with your account and to use the information from your Google account to personalize the ads that are displayed on websites. If in this case you will be logged in when visiting my website on Google, Google will use your data together with Google Analytics data to create and define lists of target groups for remarketing on different devices. To this end, Google temporarily combines the information collected with Google Analytics data to create target groups.

We emphasize that we, when using Google Ads, do not collect any data that would allow your identification. The possible compilation of data in such a way that they acquire the nature of personal data can be made by Google, but in this respect we are no longer responsible, because Google performs these activities on the basis of a contract concluded with you as a user of Google services.

We, using Google Ads, are only able to define the target groups to which we would like our ads to reach. On this basis, Google decides when and how it will present our advertisement to you.

In order to use Google Ads, we have implemented a special Google Ads conversion pixel in the code of our website. The pixel uses Google LLC cookies for the Google Ads service. From our site, using the mechanism for managing cookies, you can disable these cookies. You can manage your ad settings directly on Google: https://adssettings.google.com/.

If you are interested in details related to data processing as part of Google Ads, we encourage you to read the Google privacy policy: https://policies.google.com/privacy.

Facebook Ads and Insights. We use marketing and analytical tools available as part of Facebook. The provider of these tools is Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA. We implement activities in this area based on our legitimate interest, consisting in marketing our own products or services as well as analysis and statistics.

In order to target you personalized ads in terms of your behavior on our website, we have implemented Facebook Pixel as part of our website, which automatically collects information about your use of our website in terms of pages viewed. The information collected in this way is usually transmitted to a Facebook server in the United States and stored there.

The information collected as part of Facebook Pixel is anonymous, i.e. it does not allow us to identify you. We only know what actions you have taken on our site. We can also check your age range, gender, where you are connecting to the Internet. Facebook Insights can also provide us with more information about you, but it is never information that would allow us to identify you.

However, we inform you that Facebook may combine the information collected with other information about you collected as part of your use of Facebook and use for its own purposes, including marketing. Such Facebook actions are no longer dependent on us, and you can search for information directly in Facebook’s privacy policy: https://www.facebook.com/privacy/explanation. You can also manage your privacy settings from your Facebook account. Here you will find useful information in this regard: https://www.facebook.com/help/568137493302217.

From our site, using the mechanism for managing cookies, you can disable Facebook Pixel.

Content from external websites. We embed content from external websites, in particular videos from YouTube. Therefore, Google LLC cookies related to the YouTube service are used, including DoubleClick cookies.

When playing a video or reading other embedded material, Google receives information about it, even if you do not have a profile with a given service provider or are not currently logged in. This information (along with your IP address) is sent by your browser directly to the server of the given service provider (some servers are located in the USA) and stored there.

If you have logged in to the website of a given service provider, then the service provider will be able to directly assign a visit to our website to your profile in a given social network. The purpose and scope of data collection and their further processing and use by service providers, as well as the possibility of contact and your rights in this regard and the ability to make settings that protect your privacy are described in the privacy policy of individual service providers.

If you do not want service providers to assign the data collected during video playback or to read other content on our website directly to your profile on a given website, then before visiting our website you must log out of this website. You can also completely prevent the plugins from loading on the page using the appropriate extensions for your browser, e.g. script blocking.

YouTube-related cookies are only loaded when the video is played, so if you do not want this to happen, refrain from watching the video.

Social Tools. Our website uses plugins and other social networking tools provided by social networking sites such as Facebook and Instagram.

By displaying our website containing such a plug-in, your browser will establish a direct connection to the servers of social network administrators (service providers). The content of the plugin is transmitted by the respective service provider directly to your browser and integrated with the website. Thanks to this integration, service providers receive information that your browser has viewed our website, even if you do not have a profile with a given service provider or are not currently logged in to it. This information (along with your IP address) is sent by your browser directly to the server of the given service provider (some servers are located in the USA) and stored there.

If you have logged in to one of the social networking sites, then this service provider will be able to directly assign a visit to my site to your profile on the given social networking site.

If you use a given plugin, e.g. by clicking on the “Like” or “Share” button, the relevant information will also be sent directly to the server of the given service provider and stored there.

In addition, this information will be published on the respective social network and will appear to people added as your contacts. The purpose and scope of data collection and their further processing and use by service providers, as well as the possibility of contact and your rights in this regard and the ability to make settings that protect your privacy are described in the privacy policy of individual service providers.

● Facebook – https://www.facebook.com/legal/FB_Work_Privacy,

● Instagram – https://help.instagram.com/155833707900388.

If you do not want social networking sites to match the data collected during visits to our website directly to your profile on a given website, then before visiting our website you must log out of this website. You can also completely prevent the plugins from loading on the page using the appropriate extensions for your browser, e.g. script blocking.

Server logs. Using the website involves sending queries to the server on which the website is stored. Each query directed to the server is saved in the server’s logs.

Logs include, among others Your IP address, server date and time, information about the web browser and operating system you use. Logs are saved and stored on the server.

The data saved in the server logs are not associated with specific people using the site and are not used by us to identify you.

Server logs are only auxiliary material used to administer the site, and their content is not disclosed to anyone except those authorized to administer the server.