Privacy Policy

1. General Information

This Privacy Policy sets out the rules for collecting, processing, and using personal data of users using the website www.chocholowskarowerem.pl (hereinafter: "Website").

We care about the security of data entrusted to us and ensure compliance with applicable laws, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

2. Data Controller

The controller of personal data collected through the Website is:

Bicycle Rental and Parking "U ASI" Lucyna Jarończyk

Siwa Polana, 34-512 Dolina Chochołowska, Poland

NIP: 7352544599

REGON: 387782936

[email protected]

3. Purposes, Legal Bases, and Data Retention Period

Users' personal data is processed for the following purposes:

a) Handling inquiries and reservations – through the bicycle availability form. We process: reservation date, number of people, bike type, first name, last name, email address, phone number, browser language, and IP address. Legal basis: Art. 6(1)(b) GDPR (actions taken at the request of the data subject before concluding a contract). Retention period: for the time necessary to process the inquiry or until the limitation of claims arising from the contract.

b) Ongoing communication – via the online chat tool (Tawk.to). We process data voluntarily provided by the user in the chat window (name, email, message content). Legal basis: Art. 6(1)(f) GDPR (legitimate interest of the controller consisting of customer service). Retention period: until the end of the conversation or withdrawal of consent.

c) Analytics and statistics – via Google Analytics. We analyze anonymized user behavior on the website. Legal basis: Art. 6(1)(f) GDPR (legitimate interest consisting of optimizing the Website's operation). Retention period: according to Google Analytics configuration (standardly 14 months).

d) Direct marketing – in case the user gives optional consent. We process: email address and phone number. Legal basis: Art. 6(1)(a) GDPR (voluntary consent). Retention period: until the user withdraws consent.

4. Data Recipients and Transfer Outside EEA

For the proper functioning of the Website and the reservation system, the Controller uses services of external entities to which data may be entrusted:

– Cloudflare Inc. (USA) – for handling network infrastructure (Cloudflare Workers) processing form inquiries.

– Resend Inc. (USA) – for automatic sending of email notifications about reservations.

– Tawk.to Inc. (USA) – to provide live chat functionality.

– Google LLC (USA) – for statistical and analytical purposes (Google Analytics).

All the above entities process data based on standard contractual clauses or compliance certificates under the EU-U.S. Data Privacy Framework, which guarantees a high level of personal data protection required by GDPR.

5. User Rights

Every user whose data is concerned has the right to:

– access their personal data and receive a copy of them,

– rectification (correction) of their data,

– deletion of data (right to be forgotten), provided that other legal obligations do not stand in the way,

– restriction of data processing,

– data portability to another controller,

– objection to processing based on the Controller's legitimate interest.

The user also has the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO) if they consider that data processing violates GDPR provisions.

6. Cookies and Local Technologies

The Website uses cookies and localStorage technology to store basic user preferences (e.g., website language selection, graphic theme).

This data is fully anonymized, does not serve to identify users' identity, and is not used for marketing or profiling purposes.

The user may block or delete cookies at any time from their web browser settings.

7. Final Provisions

The Controller reserves the right to introduce changes to this Privacy Policy to adapt it to legal or technological changes.

The current version of the document is always published and available to users on this subpage.