Privacy policy

Our objectives regarding personal data protection

Personal data protection is an important aspect taken into account by us in the organization of “ARTUR MANOWSKI” and the provision of our services. Our goal is the transparent and reliable processing of personal data. The rules for the processing of personal data by “ARTUR MANOWSKI” and the rights of data subjects are set out in this Privacy Policy.

We have therefore implemented the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as “GDPR“) within the scope of our business activities, and we process your personal data based on the principles of lawfulness, fairness and transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability.

We hope that in this Privacy Policy you will find answers to all questions regarding the protection of your personal data. In case of any additional doubts, you can always contact us by writing to the e-mail address: info@warsawheritagetours.com or the correspondence address: Chmielna 73, 00-801 Warszawa.

Who is your Data Controller?

The controller of your personal data is:

ARTUR MANOWSKI conducting business under the name ARTUR MANOWSKI with its registered office in JÓZEFOSŁAW, ARNIKI, nr 2/1, 05-500 holding NIP (Tax ID): 9512214708; REGON number: 141330219 hereinafter referred to as the “Data Controller“

What are the purposes, categories, and legal bases for processing your Data?

The Data Controller processes your personal data to an extent depending on the purposes of their processing, which in turn determines the legal basis legitimizing their processing.

Creating an account to gain access to our service (using the website)

Purpose of processing

In order to allow you access to our service (use of the website), we must identify you as a distinct user and receive contact details through which we can communicate with you.

Categories of data

The data we collect for this purpose include your identification data (name and surname, company name) and contact details (e-mail address, telephone).

Legal basis

Art. 6(1)(b) GDPR – necessity to take steps at your request prior to entering into a contract and for the performance of a contract.

The provision of some of your data is necessary to create an account. If you do not provide the personal data marked by our system as mandatory, you will not be able to create an account with us and use our website and the services we provide. Providing data not marked as mandatory is voluntary and is not a condition for using our services.

Providing access and smooth use of the website / our services

Purpose of processing

We want to provide you with access and use of the application in the most user-friendly and effective way possible. We need your data to be able to manage your dedicated account.

Categories of data

Your identification and contact data, as well as data related to the use of the application and our website (data regarding your activity in the application and on the website, your login history, browsing history, sessions, IP address, data regarding your web browser and operating systems).

Legal basis

Art. 6(1)(b) GDPR – necessity for the performance of a contract.

The provision of some of your data is necessary to use our services. If you do not provide the personal data marked by our system as mandatory, we will not be able to provide our services to you/provide you with certain functionalities. Providing data not marked as mandatory is voluntary and is not a condition for using our services.

Ensuring the functionality and security of our services

Purpose of processing

We want to continuously improve the services we provide and enhance their functionality and security. Thanks to them, we will be able to improve our website and provided services with new modifications and functions. We would also like to inform you about the changes introduced so that you can use our application in the most optimal way.

Categories of data

Your identification data, contact data, and data related to the use of the application and our website (data regarding your activity in the application and on the website, your login history, browsing history, sessions, IP address, data regarding your web browser and operating systems).

Legal basis

Art. 6(1)(f) GDPR – our legitimate interest in the continuous improvement of the services we provide.

Contacting you – answering questions sent via the contact form

Purpose of processing

We care about communication with you and your satisfaction with the services we offer. Therefore, we would like to be able to contact you and respond to any of your questions related to the provision of our services.

Categories of data

Your identification and contact data, data about your use of our services, data subject to your inquiries, complaints, or requests.

Legal basis

Art. 6(1)(f) GDPR – our legitimate interest in staying in touch with you and providing assistance/answering your questions.

Establishment, exercise, or defense of claims

Purpose of processing

Based on the services we provide, it may be necessary to clarify factual or legal circumstances in order to establish and potentially proceed with claims resulting from the use of our services.

Categories of data

Your identification and contact data, other data necessary to establish, exercise, or defend claims.

Legal basis

Art. 6(1)(f) GDPR – our legitimate interest in the potential securing of claims and their pursuit before courts or other relevant state institutions.

Marketing of our services

Purpose of processing

We are a company conducting business activity for our clients – an important element of any such activity is the self-marketing of provided services. Therefore, we use the data of our clients, application users, as well as persons subscribed to the newsletter list/receiving mailings and other information or advertising materials from us, for our own marketing activities, in particular by informing them about the events we organize.

Categories of data

Your identification and contact data, data regarding your activity on our service.

Legal basis

Art. 6(1)(f) GDPR – our legitimate interest in the marketing of our services. Art. 6(1)(a) GDPR – consent to the processing of your data.

Profiling

Based on the personal data we have about you, we assess whether you would be interested in specific advertising or information material and, on this basis, we send it to you or not. We want to respond to your needs as effectively as possible and meet your preferences.

Business cooperation

Purpose of processing

When cooperating with each other as part of performing services, delivering products or solutions, we process your data as our clients or business partners. This is necessary for us to perform contracts, conduct business, and mutually develop our activities.

Categories of data

Personal data of yours and your employees/associates: contact, identification, data necessary for billing purposes, performance of services/delivery of products or solutions.

Legal basis

Art. 6(1)(b) GDPR – if you have concluded a contract with us as a business partner or client, the processing of your data may prove necessary for the performance of that contract. Art. 6(1)(f) GDPR – our legitimate interest in, for example, undertaking a possible defense of claims arising on the basis of our cooperation relationship, marketing purposes.

Your data retention period

If you create an account on our website, your personal data will be stored by us for the period of its validity and for the next 6 months, for the purposes of providing the service in the form of access and use of the application as well as for marketing purposes. After this period, your data will be stored solely for the purposes of considering complaints and claims related to the services we provide, for the limitation period of these claims as specified by law.

If you are our client or business partner, your data will be processed by us for the period of our cooperation, and then for the limitation period of potential claims as specified by law.

If we process your data for marketing purposes, we will store them until you object to this purpose of processing your data or withdraw your consent in this regard, depending on the basis on which we process your data.

After the expiry of the aforementioned periods, your data will be deleted by us.

Source of your personal data

As a rule, we receive personal data from you – when you fill out the contact or registration form or perform activities related to the creation and transfer of your data to us.

Recipients of personal data

Your personal data will be transferred by the Data Controller if it is necessary to achieve our goals, in accordance with the appropriate legal basis. The current categories of recipients of your personal data include:

  • Data center operators, hosting service operators;
  • Cloud service providers;
  • Service providers providing access to new technologies and internet advertising;
  • Service providers providing advertising services;
  • Entities providing legal and accounting services;
  • Partners of the Data Controller;

The Data Controller may also share your personal data in the event of a request from authorized state authorities, within the scope and on the basis specified by law.

Where do we transfer your personal data?

Your personal data may be transferred to recipients located within the European Economic Area (hereinafter referred to as the “EEA“) as well as outside of it (to Third Countries).

The transfer of your personal data to Third Countries may only take place under the conditions set out in Chapter V of the GDPR, to countries for which the European Commission has issued a decision stating an adequate level of protection, as referred to in Art. 45 GDPR.

You can obtain a copy of your personal data that we transfer to Third Countries as well as information about the place where they are made available by writing to us at the e-mail address indicated in point I.

Your rights as a data subject related to the processing of personal data

The Data Controller processes your personal data in accordance with the regulations and respecting your rights related to their processing. In order to exercise any of the rights listed below, you can contact us by writing to our e-mail address or correspondence address indicated in points I and II.

You can also contact us in the aforementioned manner to submit complaints, inquiries, requests, or any doubts related to the processing of your personal data.

When you contact us regarding any of your rights as a data subject, we will inform you about the actions taken at the latest within 1 month of receiving your information. If the complex nature of your request or the number of requests prevents the Data Controller from providing information within this period, we will notify you of this, stating the reason for the delay. In such a case, we will make every effort to provide you with an answer as soon as possible.

Right of access to data

Based on this right, you can obtain information from us as to whether we are processing your personal data. If this is the case, you have the right to obtain:

  • access to your personal data;
  • information about the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of such data, the planned storage period of personal data or the criteria for determining this period, the right to request from the Data Controller the rectification, erasure, or restriction of the processing of your personal data, and to object to such processing, as well as the right to lodge a complaint with a supervisory authority, the source of this data, automated decision-making, including profiling, and if the data is transferred outside the European Union, information about the safeguards used in the transfer of this data – this information is governed by this Privacy Policy;
  • a copy of the personal data undergoing processing.

Right to rectification

You have the right to rectify or supplement the personal data provided by you if they are incorrect or incomplete.

Right to erasure (“right to be forgotten”)

You have the right to erase your personal data in the following cases:

  • Your data is no longer necessary for the purposes for which they were collected or otherwise processed;
  • You have withdrawn a given consent, and there is no other legal basis for processing this personal data;
  • You have objected to the processing of your personal data;
  • Your personal data was processed unlawfully;
  • Your data must be erased in order to comply with a legal obligation to which the Data Controller is subject.

In some cases, despite your request to erase your personal data, we may be obliged to continue storing them to the extent necessary for the purposes of complying with a legal obligation or for the establishment, exercise, or defense of claims.

Right to restriction of processing

You have the right to request the restriction of processing of your personal data in the following cases:

  • when you contest the accuracy of the personal data – the Data Controller will restrict the processing of your personal data for a period enabling them to check their accuracy;
  • when the processing of your personal data is unlawful and you request the restriction of their use;
  • when your personal data is no longer needed for the purposes of processing by the Data Controller, but you need them for the establishment, exercise, or defense of claims;
  • when you have objected to the use of your personal data, then the restriction of processing occurs until it is determined whether the legitimate grounds on the part of the Data Controller override the grounds of your objection.

Right to data portability

You have the right to receive your personal data that you provided to us, in order to then send them to another personal data controller. You can also request that the personal data be sent by us directly to another controller, provided that this is technically possible.

The exercise of the right to data portability may be restricted if it were to adversely affect the rights and freedoms of others.

Right to object to the use of data

You have the right at any time to object to the processing of your personal data, including profiling, when it is based on a legitimate interest. In the event that your objection is justified and there is no other legal basis for processing your personal data, your data will not be processed by the Data Controller.

If you object to the processing of your data for direct marketing purposes, your data will not be processed by the Data Controller for this purpose.

Right to withdraw consent

Giving any consent to the processing of personal data by the Data Controller is voluntary and you have the right to withdraw it at any time. The withdrawal of consent does not affect the lawfulness of the processing that the Data Controller carried out on this basis before the withdrawal of consent.

Right to lodge a complaint with the relevant supervisory authority

You have the right to lodge a complaint with the President of the Office for Personal Data Protection (Prezes Urzędu Ochrony Danych Osobowych) or its legal successor if you consider that the processing of your personal data violates your rights.

Changes to the Privacy Policy

If the need arises, we update both the functionality of the services we provide and the internal regulations that are intended to ensure their security. Any changes or supplements to this Privacy Policy will be announced and made available on our website. You will be informed of significant changes to this Privacy Policy in a separate e-mail if you have provided us with an e-mail address.

Cookie policy

You are reading this policy because you most likely visited our website.

Pursuant to Art. 173 of the Act of 16 July 2004 – Telecommunications Law (Journal of Laws No. 171, item 1800, as amended), we would like to provide you with information regarding our use of cookies and your ability to determine the conditions for storage or access regarding cookies.

Use of cookies

We use cookies, i.e., small files saved on your telecommunications terminal equipment (e.g., computer, phone). We use them both on our website and within any application we offer.

Purpose of storing and using cookies

We store and use cookies for the purpose of creating website traffic statistics and adjusting the website content to your individual needs, e.g., to improve its functionality.

Changing the conditions for storing and using cookies

We inform you that you have the possibility to change the settings of your web browser in a way that prevents the storage of cookies on your terminal equipment. You can also delete cookies by making appropriate changes to your web browser settings. Methods of using and deleting cookies are included in the instructions of the web browser manufacturers, which can be found at the links provided below:

Storage of cookies

We store two types of cookies:

  • session – stored until the web browser is closed or the website is left,
  • permanent – stored for the time specified in their parameters or until they are deleted by the user.

Contact us

Should you have any questions or doubts related to the use of cookies, you can contact us by writing to the e-mail address provided in point I.

Book Your Tour
Book Your Tour
Camp BrightSide
Camp BrightSide