This document will tell you how and on what basis we process your personal data when you contact us or use one of our services.

You will find out, among others:

✓ why we may process your data;

✓ for what purpose we process your data;

✓ whether you are obliged to provide us with your data;

✓ how long we keep them;

✓ whether there are other recipients of your personal data;

✓ whether we process your data outside the European Economic Area;

✓ whether we process your data by automated means, including whether we profile data.

 

The first part of the Privacy Policy contains information we are obliged to provide to everyone, regardless of the purpose of processing.

The second part contains information for a person who wants to know more about the services we provide or who wants to conclude a contract with us, representing a group of tourists, travel agency, school, company or other organization.

The third part contains information for tourists who have been registered to participate in a specific tourist attraction by their representative.

 

Part I – General Information

 

Contact details of your Data Controller

 

The Controller of your personal data is Us, UTC Tour Operator sp. z o.o. with its registered office in Cracow (31-150), ul. św. Filipa 23/3, entered in the Register of Entrepreneurs, KRS number: 0000412290, NIP number: 6792843325.

You can contact us in several ways regarding all matters concerning our services, as well as the processing of your personal data:

E-mail: poland@4travel.pl

Telephone number: +48 12 429 30 96

 

Where do we obtain your personal data from?

 

The personal information we collect through our website comes directly from you. This happens when:

You browse our website. You send us questions or a request for a proposal.

You can find more about the processing of your data in Part II of the Privacy Policy.

If you are a tourist who is part of a school, company or other group that we serve, we obtained your data from a representative of this group. You can find more about the processing of your data in Part III of the Privacy Policy.

 

What rights do you have in relation to the processing of your personal data?

 

Below we set out your rights in relation to data protection and our processing of your data. The rights you have in particular circumstances depend on the purpose and basis of the processing of your data.

 

Right of access to data

You have the right to be informed about the personal data we hold about you. When you make a request for access to your data, you will be provided with information about the processing of your personal data, including in particular the purposes and legal basis of the processing, the scope of the data held, the entities to which the personal data are disclosed and the planned date of deletion.

 

Right of rectification

You have the right to have the personal data held about you rectified and/or supplemented without delay. It is our duty to ensure that our mutual communication is based on data that is true, complete, and up-to-date.

 

Right to restrict processing

You have the right to ask us to restrict the processing of your personal data if you dispute the accuracy of data held about you, if the processing is carried out without a legal basis or if you have presented your objection to data processing.

 

Right to erasure

You have the right to request erasure of your personal data held by us, if retention of the data is not necessary to ensure freedom of expression, freedom of access to information, to comply with a legal obligation, for reasons of public interest, to report or defend against claims or to assert rights under the law.

 

Right to information

If you have notified us of your right to rectification, erasure or restriction of processing, we will notify all recipients of your personal data of how to rectify, erase or impose restrictions on the processing of that data, unless this is impossible to carry out or involves a disproportionate effort.

 

Right to data portability

You have the right to obtain a copy of the data provided to us, which will be sent to you or a third party in a structured, standard, machine-readable format. If you request that this data be sent to another controller, this will be done as long as it is technically possible. This right only applies if we process your data on the basis of your consent or in connection with the performance of a contract.

 

Right to object

If your personal data is processed on the basis of our legitimate legal interest, you have the right to object at any time to further processing. We will consider your application in accordance with the regulations.

 

Right of withdrawal of consent

If your data is processed on the basis of consent, you have the right to withdraw it at any time, with future effect. This will not affect the legality of data processed to date.

 

Right to lodge a complaint with a supervisory authority

If the processing of your personal data violates data protection legislation or if your data protection rights have been infringed in any other way, you can lodge a complaint with the supervisory authority. The supervisory authority competent in the territory of Poland is the President of the Office for Personal Data Protection in Warsaw (ul. Stawki 2). Before exercising your right to complain, we encourage you to contact us first so that we can clarify any concerns you may have.

 

Consideration of your request

If you make a request to us to exercise your right, we will respond to your request within one month of receiving it. If it is necessary to extend this deadline, we will inform you of the reasons for such an extension.

Response to your request will be sent to the e-mail address from which you send your request or, in the case of requests made by letter, by traditional mail to the address you provide, unless you indicate in your letter that you wish to be contacted by e-mail (in which case you must provide your e-mail address).

 

Links to other sites

 

Where we provide links to third-party websites, this Privacy Policy does not apply and does not describe how such entities process your personal data. We encourage you to read these entities’ respective privacy policies published on their websites.

 

Visits to our website

 

Google Analytics

On our site, we use tools from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, Google Analytics, which allow us to collect statistical information about your use of our site such as IP address, device type, browser type. We do this in order to know, among others, the number of users accessing our website. This information is only processed in a way that does not allow us to identify anyone directly. Please note, however, that Google may process your data on a server in the United States. In these cases, Google may process your personal data outside the European Economic Area, but this takes place on the basis of so-called standard contractual clauses, provisions of the contract concluded between us and Google which guarantee an adequate degree of secure processing of your personal data.

If you are interested in the details related to the processing of data within Google Analytics, we encourage you to read the explanations prepared by Google here.

 

Cookies

Like almost all websites, we also use cookies.

Cookies, which are used to ensure the functionality, security, and availability of the website, are essential for the correct operation of the website. These cookies let us know that you have accepted our Privacy Policy and Cookie Policy. We use these cookies on the basis of our legitimate legal interest.

Cookies that are used for statistical purposes (Google Analytics) are optional and we only use them on the basis of your consent.

You can read more about how we use cookies and how to change your cookie preferences on our Cookie Policy page.

 

 

Changes to the Privacy Policy

 

The Privacy Policy is subject to periodic review and update as reasonably necessary. You can read about the changes to date below.

 

September 2021

We have launched our website and published the first version of our Privacy Policy.

 

 

Part II. Processing of data of a person representing a group of tourists

 

Below we present to you the rules for the processing of personal data, which apply when you send us a message with a question or request for an offer using the e-mail address on our website or fill out an inquiry available for a specific service in order to obtain an offer.

 

For what purpose do we process your data?

 

We process your personal data to answer your questions, present an offer, and take further steps to conclude a contract.

If you accept our offer, then we will process your data in order to perform the contract. When implementing the contract, we are also legally obliged to process your data, e.g. in order to fulfill fiscal obligations (documenting transactions for tax purposes).

Other purposes of processing your data, which will be valid after the conclusion of the contract, are: investigation or defense against possible claims, satisfaction survey, and direct marketing.

If you give separate consent, we will process your telephone number or e-mail address in order to provide you with marketing information.

 

On what legal basis do we process your data?

 

The legal basis for the processing of your personal data is:

✓ your consent expressed by sending us a specific question;

✓ the necessity of activities aimed at concluding the contract in the scope of presenting the offer and communication aimed at concluding the contract;

✓ fulfillment of the legal obligation in the form of data processing for the purpose of tax documentation of the transaction;

✓ our legitimate interest in pursuing or defending against possible claims, testing satisfaction with our services or providing marketing services;

✓ your consent to conduct marketing communication by e-mail or telephone.

 

For how long will we process your data?

 

We will process your data until your consent is withdrawn, and in the scope of activities aimed at concluding a contract, for the duration of the contract, the period of limitation of claims, the period resulting from legal provisions determining the time of storage of accounting documents.

Personal data will also be processed for the duration of our marketing activities or until you object to further data processing for marketing purposes or until you withdraw your consent to receive marketing messages also to the e-mail address and telephone number.

 

Who is the recipient of your personal data?

 

The recipients of your personal data, i.e. the external entities that may be involved in the processing of your data, will be our trusted subcontractors – IT service providers for data hosting and business mail services, and legal and tax advisors as well.

The recipient of your data may be, depending on the selected service: coach lines, hostels, hotels, other entities providing services that are part of the service, insurance companies, banks, payment operators, agents cooperating with us on the basis of agency and franchising agreements, solely for the purpose and scope necessary for the performance of the concluded contract.

 

Nature of data provision

 

Providing your data is voluntary, but if you want to receive a personalized offer from us or conclude a contract, you should provide us with the information necessary to achieve this goal. Failure to provide relevant information will make it impossible to present an offer or conclude a contract.

 

Other relevant information

 

Your data will not be subject to automated processing or profiling. Your data will not be processed outside the European Economic Area.

 

What rights do you have?

 

Your rights are set out in Part I of this Privacy Policy.

 

 

Part III. Processing of tourist data

 

Below we present you the rules for the processing of personal data that apply when you are reported to participate in a given trip by a representative of a group, company, school, or organization.

Often, information only on the number of participants and their age is sufficient, while in some cases (purchase of tickets, transport) it is necessary for us to obtain basic data of a specific tourist.

 

For what purpose do we process your data?

 

We process your personal data in order to properly and safely perform the contract concluded with a representative of your group. Providing relevant data may be necessary in a given case in order to provide you with a specific service or part of it, but also to ensure your safety, or enable the investigation or defense against possible claims.

 

On what legal basis do we process your data?

 

The legal basis for the processing of your personal data is our legitimate interest, which consists in the need to properly perform the contract, including the transfer of your data to other entities providing services to you, only to the extent necessary. Our legitimate interest also consists in the right to assert or defend against possible claims, as well as to test the satisfaction with our services.

 

For how long will we process your data?

 

We will process your data for the duration of the contract, the period of limitation of claims, the period resulting from legal provisions determining the storage time of accounting documents.

 

Who is the recipient of your personal data?

 

The recipients of your personal data, i.e. the external entities that may be involved in the processing of your data, will be our trusted subcontractors – IT service providers for data hosting and business mail services, and legal and tax advisors as well.

The recipient of your data may be, depending on the selected service: coach lines, hostels, hotels, other entities providing services that are part of the service, insurance companies, banks, payment operators, agents cooperating with us on the basis of agency and franchising agreements, solely for the purpose and scope necessary for the performance of the concluded contract.

 

Nature of data provision

 

Providing your data is voluntary, but depending on the service, it may be necessary to participate in it.

 

Other relevant information

 

Your data will not be subject to automated processing or profiling. Your data will not be processed outside the European Economic Area.

 

What rights do you have?

 

Your rights are set out in Part I of this Privacy Policy.