Personal Data Administrator
The administrator of personal data obtained through the Website and in connection with the Services provided in accordance with the Terms and Conditions is Proudcube.
You can contact the Administrator:
Personal data - the scope, purpose, basis and period of personal data processing by us
Depending on the Services you use or the purpose for which you contact us, we collect your personal data. We use your data only for the purpose for which you provided it to us. Below you will find information on individual purposes, legal grounds and the time for which your data will be processed by us. If you do not find the details you are interested in below, please contact us.
• Contact form, hotline, chat, complaints
If you want to contact us, you send us a contact form, contact us via the hotline or chat. The data you provide to us include identification data (such as name and surname), contact details (such as telephone number, address or e-mail address) and other information provided during correspondence or conversation.
We use personal data only to answer your questions provided in the contact form, during a telephone conversation, chat or complaint. If the consideration of a complaint application requires obtaining information from other entities, e.g., from the Tourism Organizer or Tourist Agent who participated in the provision of the Services, then we may obtain additional personal data about you from that other entity and / or inform the relevant entity about the complaint you have submitted.
The legal basis for data processing is Article 6 Item 1 Letter f) RODO. The legitimate interest pursued by the Administrator results from the willingness to respond to your inquiries and notifications, and thus from the desire to maintain and ensure high customer satisfaction. We maintain the absolute confidentiality of personal data provided by you when filling out contact forms, telephone calls or during contact via the chat service.
We will process the data for the time needed to handle the question provided in the form, contact, chat, and then for 3 years to protect against possible claims. In the case of complaints, we will process personal data until we respond to the complaint, and then until the end of the calendar year in which the 6-year limitation period expires in order to protect against possible claims. In the event of a dispute or pending proceedings, in particular court proceedings, the storage period will be counted from the date the dispute is terminated or the proceedings are legally terminated.
If you subscribe to the newsletter, you only provide us with your name and e-mail address.
Your personal data is processed only for the purpose of sending our newsletter containing information about us and our activities, services, events and promotions.
The legal basis for data processing as part of the sending of the newsletter is generally the consent pursuant to Article 6 Item 1 Letter a) RODO and ordering information by subscribing to our newsletter.
If you withdraw your consent to receive the newsletter, your data will be immediately blocked and then deleted.
• Provision of Services
If you are interested in our Offer and we start developing a specific Offer for you or concluding an Agreement, it will be necessary to obtain a wider range of your personal data and possibly personal data of other people who will use our Offer. These data may include the PESEL number, data included in the identity document, information on possible allergies, and, if required, other circumstances essential for the proper execution of the Service (e.g., possession of the required driving license, passport, tourist vaccinations, data necessary to obtain a tourist visa). We do not obtain personal data to a greater extent than necessary in a specific, personalized case of providing a given Service in accordance with the Customer's inquiry or the concluded Agreement.
The legal basis for the processing of your personal data is the necessity to perform the Services in accordance with the concluded Agreement or taking appropriate steps before its conclusion, in accordance with your inquiry (Article 6 (1) (b) of the RODO towards Customers and Article 6 Item 1 Letter f) RODO towards accompanying persons who are not parties to the Agreement). In the case of processing your data of special categories, in particular health data (e.g., allergies, other circumstances or health preferences, vaccinations), the basis for the processing of your data is your consent, in accordance with Article 9 Paragraph 2 Letter a) RODO.
In addition, in the event of the conclusion of the Agreement, your personal data will also be processed in order to fulfil our obligations under the law, particularly including tax and accounting regulations. The legal basis for processing will then be Article 6 Item 1 Letter c) RODO.
Providing your personal data is voluntary, but necessary for the provision of the Services. Without your personal data required by us, other entities involved in the provision of the Services and by applicable law, the conclusion of the Agreement and its implementation may not be possible.
Your personal data will be processed for the period of:
• Statistics and analysis
• Social media plugins
On our website you will also find plugins for our social media profiles, e.g., Facebook, YouTube, Twitter. These plugins are the tools of the owners of the portals they come from and we do not decide on the scope of their operation and functionality. More information can be found in the respective privacy policies of these social networks. They are required to comply with all the rules and obligations set out in the RODO.
Sharing personal data with other administrators
Your personal data will be shared by us with our business partners providing the Services in accordance with the Agreement concluded with you: Tourism Organizers, Travel Agents and Service Providers. Sharing may be made only to those entities that will provide Services for you in accordance with the Agreement and to the extent necessary for this. These entities are separate administrators of personal data from us and are fully obliged to meet all the requirements of the RODO regardless of us.
Our partners, suppliers and service providers are based in the countries of the European Economic Area (European Union countries and Iceland, Liechtenstein and Norway) - EEA or in Switzerland, recognized as a country that meets an adequate level of personal data protection. Whenever we share your personal data internally or with entities in other countries, we use the necessary safeguards to protect it.
As a rule, we do not transfer your personal data to third countries, i.e., outside the EU / EEA, but it may happen if it is necessary due to the location of the Services provided to you in accordance with the Agreement. You will always know about it, and we will take appropriate measures to protect your personal data and provide appropriate legal grounds for making such a transfer in accordance with the requirements of the RODO.
In addition, your personal data may be disclosed to entities providing logistic, transport and delivery services and entities authorized to obtain them on the basis of applicable law, e.g., law enforcement authorities. To the extent permitted by applicable law, we may also provide personal data to institutions dealing with debt collection and debt trading.
Disclosure of personal data to our subcontractors (processors)
Your personal data may be disclosed to third parties who, on our behalf and on our behalf, support us in the provision of services, including suppliers and partners:
We provide our suppliers and partners with access only to the personal data that allows them to provide services to us in accordance with the concluded contracts for entrusting the processing of personal data and we require them to maintain confidentiality and information security. We also verify whether they provide adequate personal data protection measures.
For this purpose, we use our cookies:
The cookies we use can be found here.
In addition, cookies or similar tracking tools may be used by the owners of portals for which plugs and functional buttons are available on the Website and in connection with the services of service providers that we use for statistical and analytical purposes. They are used independently of us and we have no influence on the scope of activities undertaken by these entities, but only use the appropriate services, in particular:
Cookies and information stored in them or accessing them do not change the configuration of the device and the software installed on this device. The information obtained by us through cookies is not assigned to a specific person and does not allow him to be identified. You can change the way cookies are used by the browser, including blocking or removing those that come from the Website. To do this, change the browser settings.
Most browsers offer the option of accepting or rejecting all cookies, accepting only certain types, or informing you each time a website tries to save them. You can also easily delete cookies that have already been saved on the device by the browser. The management and deletion of cookies varies depending on the browser used. Detailed information on managing cookies for some browsers:
More information on managing cookies can be found at www.wszystkoociasteczkach.pl or on the website of the European platform www.allaboutcookies.org.
Rights of data subjects
The data subject has:
• The right of access (Article 15 of the RODO), i.e., requests from the Administrator to provide information on the processing of their personal data, i.e., to confirm whether the personal data of the data subject is processed. If data about a person is processed, he is entitled to access them, obtain a copy of them and obtain the following information: about the purposes of processing, categories of personal data, information about recipients or categories of recipients to whom the data has been or will be disclosed, about the storage period data or the criteria for determining them, about the rights of a person related to the processing of his personal data, about the possibility of lodging a complaint to the supervisory authority, about the source of obtaining personal data, if not obtained directly from the data subject, and about profiling and automated processing of decisions;
• The right to rectify (Article 16 of the RODO), i.e., if a person receives information that their personal data processed by the Administrator is incorrect, out of date or incomplete, they have the right to request immediate rectification or supplementation;
• The right to delete data (Article 17 of the RODO), i.e., they may request the deletion of their personal data, however, if the person has consented to the processing of personal data, the request for deletion will have the same effect as withdrawal of consent;
• The right to limit data processing (Article 18 of the RODO), i.e., requesting the cessation of their processing, except for their storage, in situations where: a) the data subject questions the accuracy of the personal data. b) the data subject questions the lawfulness of the processing of personal data by the Administrator. c) the administrator no longer needs these data, but they are needed by the data subject to establish, assert or defend his claims. d) the data subject has objected to the processing and this objection has been recognized by the Administrator.
• The right to transfer data (Article 20 of the RODO), which means the right to receive personal data made available to the Administrator in a structured format, common use, readable by a specific device, so that it can be transferred directly to another entity, provided that it is possible from a technical point of view.
• The right to object to processing (Article 21 of the RODO), which means the right to object by the data subject to the use of their personal data for purposes related to direct marketing of products and services, as well as other marketing activities carried out by the Administrator sent via e-mail or SMS). The objection does not result in the deletion of data, but only the cessation of their use by the Administrator for marketing purposes.
• The right to withdraw consent, which means that in cases where the processing of data takes place on the basis of the consent granted, the data subject has the right to withdraw the consents granted for individual purposes of processing, at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out until the consent is withdrawn.
• Right to lodge a complaint with the competent supervisory authority. If the data subject believes that the data is being processed illegally, he has the right to lodge a complaint with the competent supervisory authority:
Office for Personal Data Protection, Stawki 2, 00-193 Warsaw, Telephone: 22 531 03 00, fax. 22 531 03 01, firstname.lastname@example.org
Last modification 01.02.2021