Privacy Policy

1. Controller’s details

The controller of your personal data within the meaning of the GDPR is

F.H.U „Wojtanowski”, Stanisław Wojtanowski

Ustup 15a, 34-500 Zakopane, NIP: 7361035986,

(hereinafter: the “Controller”). In matters concerning the protection of personal data, you may also contact the Controller via the email address info@zakopane4you.com.

2. Purposes and legal bases of data processing

Your personal data may be processed by the Controller on the basis of:

a) necessity for the performance of a contract or to take steps prior to entering into a contract (art. 6 ust. 1 lit. b GDPR), separately for the purpose of:

(i) providing the newsletter service; (ii) using the trip/excursion sign-up forms; (iii) enabling access to materials related to the topics covered on the Website;

b) consent (art. 6 ust. 1 lit. a GDPR), for the purpose of conducting marketing of entities cooperating with the Controller;

c) the Controller’s legitimate interest (art. 6 ust. 1 lit. f GDPR), separately for the purpose of:

(i) using the contact forms made available by the Controller on the Website, where the controller’s legitimate interest is care for the users of the Website and answering questions asked; (ii) defence against potential claims, where the Controller’s legitimate interest is the establishment or defence of claims.

3. Transfer of personal data

Data may be transferred to entities processing them on our behalf on the basis of contracts concluded with the Controller, but only for the purpose and to the extent necessary for the realisation of the aforementioned purposes, including, among others, entities providing IT services to us or other services ensuring the proper functioning of the Website, whereby such entities process data solely in accordance with the Controller’s instructions.

As a rule we transfer your data to entities within the European Economic Area. The exception is the following services of providers established in the United States that we use on this Website: (a) Google LLC – Google Analytics 4 (traffic analytics) and Google Maps (maps embedded on trip pages); both are loaded only after you give consent in the cookie banner, and Google LLC may then receive, among other things, your IP address and device identifiers; (b) Cloudflare, Inc. – Cloudflare Turnstile (protection of booking forms against bots), active on pages with a booking form. Data is transferred to the USA on the basis of the European Commission’s adequacy decision for entities participating in the EU-U.S. Data Privacy Framework (Art. 45 GDPR) or the standard contractual clauses (Art. 46(2)(c) GDPR) applied by the given provider.

4. Period of storage of personal data

We process your personal data only for the period necessary to fulfil the purpose of their storage or for as long as this is required of us in accordance with the law, in particular until the limitation of potential claims or the expiry of the archiving obligation arising from legal provisions, including the obligation concerning the storage of accounting documents.

In the case of processing of personal data for the purpose of providing the newsletter service, using the trip/excursion sign-up forms and enabling access to materials related to the topics covered on the Website, your personal data will be processed for the period necessary to provide that service, until you resign from it.

In the event of processing of personal data on the basis of consent given by you, your data will be stored until it is withdrawn. It is possible at any time to withdraw consents given on the service. Withdrawal of consent to processing will not affect the lawfulness of processing carried out before its withdrawal.

In the case of processing of your data on the basis of the controller’s legitimate interest, the Controller will cease processing the data earlier if you effectively object to the processing of data.

For data related to booking requests and contact forms (name, phone number, email address, message content), this data is automatically anonymized no later than 14 months after submission — only statistical data remains (e.g. trip, date, number of participants), with no way to identify the individual.

5. Rights you are entitled to

Right of access to data

You have the right to obtain information regarding the personal data we store about you, including a copy of those data.

Right to rectification of data

You have the right to request rectification of your personal data that are inaccurate. Taking into account the purposes of processing, you have the right to request that incomplete personal data be completed, including by means of providing a supplementary statement.

Right to erasure of data

You have the right to demand erasure of your personal data stored by us in the following cases:

• your personal data are no longer necessary for the purposes for which they were collected
• you have withdrawn the consent on which the processing is based and there is no other legal basis for the processing
• you have objected to processing and there are no overriding legitimate grounds for the processing, or the objection concerns processing of data for the purposes of direct marketing
• the personal data were processed unlawfully
• the personal data must be erased in order to comply with a legal obligation provided for in Union law or national law
• the personal data were collected in connection with the offering of information society services referred to in art. 8 ust. 1 GDPR

Right to data portability

You have the right to receive, in a structured, commonly used and machine-readable format, the personal data concerning you which you have provided to us, if the processing of those data is based on consent or a contract and is carried out by automated means.

If you demand that those data be sent to another data controller, this will be carried out, provided that it is technically possible.

Right to restriction of data processing

You have the right to request that the processing of your personal data be restricted, in the following cases:

• you contest the accuracy of the personal data – for a period enabling us to verify the accuracy of those data
• the processing is unlawful and you oppose the erasure of the personal data, requesting instead the restriction of their use
• we no longer need the personal data for the purposes of processing, but they are required by you for the establishment, exercise or defence of claims
• you have objected pursuant to art. 21 ust. 1 to processing – pending the verification whether the legitimate grounds on the part of the controller override those of the objection

Right to object to processing

If your personal data are processed on the basis of the controller’s legitimate interest, you have the right to object at any time to the processing, in accordance with art. 21 GDPR.

Right to withdraw consent

You have the right to withdraw the consent given to the processing of personal data at any time. Withdrawal of consent to processing will not affect the lawfulness of processing carried out before its withdrawal.

If you wish to exercise the rights you are entitled to, please send us a message to the address: info@zakopane4you.com, or by traditional post to the address: Zakopane4You, Ustup 15a, 34-500 Zakopane, tel. +48 504 918 718.

The security of personal data is a priority for us; however, if you consider that in processing your personal data we are infringing the provisions of the GDPR, you have the right to lodge a complaint with the President of the Personal Data Protection Office.

6. Cookies

What are cookies and what are they used for?

Cookies are small text files that are saved on your device when you visit our Website. These files are sent by the internet service to the browser. Each cookie has an anonymous identifier and makes it possible to identify the device in whose memory it was saved for a specified time (the time after which the given cookie will be deleted). Cookies are saved in order to recognise your device, to learn your preferences, and also to collect information about your previous actions on the Website.

Which cookies do we use?

This Website stores the following cookies and browser storage on your device (its own and Google Analytics); third-party services are described below:

• z4y_lang – first-party cookie (functional, necessary): remembers the selected language; valid for 12 months.
• z4y_cookie_consent – browser local storage entry (localStorage, not a cookie): remembers your consent choice (granted/denied); stays until deleted.
• _ga and _ga_* – Google Analytics 4 cookies (analytics, third party: Google LLC): set only after your consent; used for traffic statistics; default lifetime up to 2 years. Data collected via Google Analytics is retained by Google according to that service's own retention settings — details: https://policies.google.com/privacy.
• Google Maps (third party: Google LLC): after your consent, the map embedded on a trip page may store its own cookies or browser data, which we do not control — details: https://policies.google.com/privacy.
• Cloudflare Turnstile (third party: Cloudflare, Inc.): protects booking forms against bots and is loaded on pages with a booking form; it may use its own browser storage for verification, which we do not control.

Necessary cookies: Always Active

Without these files it is not possible to navigate the site or use its functions. We process your data on the basis of art. 6 (1) f) GDPR. You may object to such processing of your personal data, but in practice this will make it impossible to use our website or will significantly hinder it.

Google Maps embedded on trip pages loads only after you consent; until then a notice with a consent button is shown in its place. We ourselves do not use cookies for marketing purposes.

You can change or withdraw your consent at any time via “Cookie settings” in the footer of every page — withdrawing is as easy as giving consent; it deletes the Google Analytics cookies and reloads the page without loading Google services.

How long do we store cookies?

Session cookies remain on your device until you leave the Website or disable the software (the internet browser).

The z4y_lang cookie is stored for 12 months; Google Analytics cookies for up to 2 years or until you withdraw consent.

How to manage cookies?

It should be remembered that if you do not consent to the operation of cookies, you will not be able to fully use some elements of the Website, e.g. you will not be able to use the Website personalisation functions.

Remember to configure all browsers on different devices (tablets, smartphones, computers). There are various ways of configuring browsers, therefore you should consult the “Help” section of the browser you use in order to learn how to configure it and to use the available options.

Ways of configuring cookie settings in particular browsers can be found, among others, at the following addresses:

• Google Chrome: support.google.com/chrome/bin/answer.py?hl=pl&answer=95647
• Mozilla Firefox: support.mozilla.org/pl/kb/usuwanie-ciasteczek
• Microsoft Internet Explorer: support.microsoft.com/kb/278835/pl
• Microsoft Edge: support.microsoft.com/pl-pl/microsoft-edge/usuwanie-plików-cookie-w-przeglądarce-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09

7. Changes to the Privacy Policy

In order to ensure that the Website’s Privacy Policy at all times meets the current requirements imposed in legal provisions, we reserve the right to make changes to it at any time. The above also applies in cases where the Privacy Policy requires changes in order to cover new or changed products or services of the Website.