Privacy Policy of gdansker.pl Website
§1 General Provisions
This Privacy Policy sets out the principles for processing personal data of users of the gdansker.pl website (hereinafter referred to as the “Website”) by the Data Controller.The Data Controller is Gdansker Jakub Zgliński, based in Gdańsk, ul. Piwna 1/2, unit 405, NIP: 5842619642, REGON: 222129934, email: hej@gdansker.pl, hereinafter referred to as the “Controller.”
Personal data is processed in accordance with applicable laws, including:
-
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR),
-
The Act of 10 May 2018 on the Protection of Personal Data,
-
The Act of 18 July 2002 on Providing Services by Electronic Means.
§2 Scope and Purpose of Personal Data Processing
The Controller processes personal data of Website users for the following purposes:
a) Execution of orders for guided tours, events, and urban games,
b) Handling inquiries sent via contact forms,
c) Organizing events and providing information about their execution,
d) Pursuing or defending against claims,
e) Fulfilling the Controller's legal obligations (e.g., those arising from tax regulations).
Personal data may be processed in particular in the following scope:
-
Name and surname,
-
Email address,
-
Phone number,
-
Information about preferences and details of ordered services,
-
IP address (when using the Website).
§3 Legal Basis for Processing The Controller processes personal data of Website users based on:
-
Article 6(1)(b) GDPR – to perform a contract or take actions at the request of the data subject prior to entering into a contract,
-
Article 6(1)(c) GDPR – to fulfill the Controller's legal obligations,
-
Article 6(1)(f) GDPR – to pursue the Controller’s legitimate interests, such as direct marketing or ensuring the security of the Website,
-
Article 6(1)(a) GDPR – based on the user’s consent (e.g., subscription to a newsletter).
§4 Sharing Personal Data
Users' personal data may be shared with entities cooperating with the Controller, in particular:
-
Entities providing IT and hosting services,
-
Entities handling online payments,
-
Legal and accounting entities supporting the Controller in fulfilling legal obligations. Personal data will not be transferred outside the European Economic Area (EEA) unless appropriate safeguards are implemented, in accordance with GDPR provisions.
§5 Period of Personal Data Storage
Personal data will be stored:
a) For the period necessary to perform the contract,
b) Until the user withdraws consent (in cases where processing is based on consent),
c) For the period required by law (e.g., storage of accounting documents for 5 years),
d) For the period necessary to pursue or defend against claims.
§6 User Rights
Users have the right to:
-
Access their personal data and obtain a copy of it (Article 15 GDPR),
-
Rectify data if it is incorrect or incomplete (Article 16 GDPR),
-
Erase data (“right to be forgotten”) in cases specified in Article 17 GDPR,
-
Restrict data processing (Article 18 GDPR),
-
Data portability (Article 20 GDPR),
-
Object to data processing based on the Controller’s legitimate interest (Article 21 GDPR),
-
Withdraw consent at any time (if processing is based on consent),
-
Lodge a complaint with the President of the Personal Data Protection Office (PUODO) in case of suspected GDPR violations.
§7 Cookies and Tracking Technologies
The Website uses cookies to:
a) Improve the functionality of the Website,
b) Analyze website traffic,
c) Conduct marketing activities.
Users can manage cookies through the settings of their web browsers.
§8 Changes to the Privacy Policy
The Controller reserves the right to amend the Privacy Policy due to changes in applicable laws or in the operation of the Website.
Users will be informed of any changes by posting the new Privacy Policy on the Website and, if necessary, through other communication channels.
Contact:
For any questions regarding the Privacy Policy and personal data processing, please contact us via email: hej@gdansker.pl or by phone: +48787685727.
